Re: Generating certificates and private keys

> From: Neil.Newman [mailto:[EMAIL PROTECTED]] > > When you generate the private key and the CSR does it tie > itself in to the particular server it is generated on, or are > we able to create the private key and CSR on our test server > prior to using it on the new server when it arrives

Bug in cryptlib.c

Is this the correct list to post bug reports to? There is a bug in cryptlib.c when using app locks. It is in both 0.9.6c and 0.9.7 beta 3. In 0.9.7 beta3 CRYPTO_NUM_LOCKS is 31. When requesting an app lock this code gets called: int CRYPTO_get_new_lockid(char *name) { char *s

Re: PKCS#12 and Verisign cert

On Tue, Aug 20, 2002, David Iungerich wrote: > I have the following. > > key.pem - private key created with openssl. > req.pem - CSR created with openssl. > cert.cer - Signed cert returne from Verisign after sending them req.pem. > > I need to find out what openssl commands to use to package th

PKCS#12 and Verisign cert

I have the following.   key.pem - private key created with openssl. req.pem - CSR created with openssl. cert.cer - Signed cert returne from Verisign after sending them req.pem.   I need to find out what openssl commands to use to package this all up in a PKCS#12 file that my server require

Re: Openssl and Cisco Secure Accellerator

Marc, Maybe. We have an agent using openssl running on AIX, SSL_read() *and* SSL_accept() will get SSL_ERROR_SYSCALL with errno set to EAGAIN. In these cases, I retry the SSL function again. With SSL_read(), first I call poll() to see if there is data to be read. Jim Marc Ochs wrote: > Anyo

-Rand option

How do one can use '-rand ' option with s_client program. I mean what type of file is expected to go with -rand option ? (And what kind of data in that file, coz i want to create one) Ankit Shah __ OpenSSL Project

Re: openssl genrsa question - Please answer

On Wed, Aug 21, 2002 at 12:11:15AM +0530, [EMAIL PROTECTED] wrote: > I am trying to generate the key pair using the "openssl genrsa" command. > > Initially I got a problem with using this - > +++ > openssl genrsa -out testkey

sslv3 alert certificate unknown

I have a ssl server written in C that uses openssl.  I have a ssl client in Java that uses JSSE. On the server side SSL_accept fails and the error message is: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown How can I fix this? My client code is: === imp

How to compile OpenSSL using Intel PRO C/C++ 6.0 ?

Hi all, if you're using Intel PRO C/C++ 6.0 instead of Microsoft Visual C/C++ 6.0 compiler to get FAR MORE OPTIMIZED CODE, then follow these instructions: refer to INSTALL.W32: = 1.) Execute "perl Configure VC-WIN32". 2.) Execute "ms\do_masm" or "ms\do_nasm" or "ms\do_ms" o

openssl genrsa question - Please answer

Hi, I am trying to generate the key pair using the "openssl genrsa" command. Initially I got a problem with using this - +++ openssl genrsa -out testkey.pem -3 1024 warning, not much extra random data, consider using the -ra

Openssl and Cisco Secure Accellerator

Anyone know of an outstanding issue here? I notice a long hang on SSL_read() and the following error info: SSL_read() returned -1 SSL_get_error returns 5 = SSL_ERROR_SYSCALL ERR_error_string(ERR_get_error()) returns error::lib(0):func(0):reason(0) this is the Cisco CSA in front of web

RE: How to install OpenSSL into Apache 2.0.40

Depends on whether you are using a cryptographic accelerator card or not. The engine version supports these; the non-engine version doesn't. I have written a set of instructions for using Rainbow's CryptoSwift card with Apache 2.0.39 and OpenSSL 0.9.6d; I've run a test and confirmed that the same

RE: Certificate generation

Try this: $OPENSSL req -new -x509 -newkey rsa:1024 -keyout privkey.pem -out key.pem -days 365 Thanx Himanshu Soni -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jonathan Augenstine Sent: Tuesday, August 20, 2002 9:03 AM To: [EMAIL PROTECTED] Subject:

RE: Certificate generation

What is "default_days" set to in your openssl.cnf file? _ Mark Annal e-mail: [EMAIL PROTECTED] TARGUSinfo phone : (585) 598-7011 255 Woodcliff Drive fax : (585) 598-7001 Fai

How to install OpenSSL into Apache 2.0.40

Hi, Can anyone direct me to any document on how to install and configure OpenSSL 0.9.6g on Apache2.0.40. Should I download openssl-engine-0.9.6g.tar.gz or openssl-0.9.6g.tar.gz, or both? Many thanks. Sherry Sun Computer Services Center 740-597-1903 [EMAIL PROTECTE

Certificate generation

I am looking for some help on certificate generation. I have been successful in generating a certificate, however, I seem to be unable to generate a certificate with anything more than a 30 day lifespan. I have put the script I use to generate the certificate below. #!/bin/bash # # # G

RE: SSL Certs

> -Original Message- > From: Harold Tyler [mailto:[EMAIL PROTECTED]] > Sent: Monday, August 19, 2002 3:47 PM > > I saw your email at http://www.openssl.org/ and I have a > question I thought > you might be able to answer. Not sure if the mail is addressed to me but will try to answer an

RE: Generating certificates and private keys

> -Original Message- > From: Neil.Newman [mailto:[EMAIL PROTECTED]] > > When you generate the private key and the CSR does it tie > itself in to the particular server it is generated on, or are > we able to create the private key and CSR on our test server > prior to using it on the new

RE: Using ENGINE in openssl-engine-0.9.6g

I ran the openssl speed test with OpenSSL 0.9.6g with the CryptoSwift engine on Windows, and found that it worked OK; I didn't test further than "speed -engine cswift rsa1024". Lynn Gazis -Original Message- From: Edward Chan [mailto:[EMAIL PROTECTED]] Sent: Monday, August 19, 2002 10:34