Re: nonces?

2002-08-27 Thread Michael Sierchio
Rich Salz wrote: > Or use the trick we created for Identrus: make the nonce be the hash of > the document that made you first do the OCSP query. That contradicts my operational definition of what a nonce is. __ OpenSSL Project

Re: Elliptic Curve module

2002-08-27 Thread Bodo Moeller
On Wed, Jul 24, 2002 at 04:07:46PM +0100, Haikel MEJRI wrote: > I'm trying openssl-0.9.7-beta2, I want to know why the elliptic curve > module is not included in the openssl command line tool? 0.9.7 includes just a library for elliptic curve arithmetic, but no further ECC support. This will cha

RE: The effective/invalid setting method of a certificate

2002-08-27 Thread John Cronin
This is the same guide that recommends not using HTML e-mail?? :-) John. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Boyle Owen Sent: 22 August 2002 09:34 To: [EMAIL PROTECTED] Subject: RE: The effective/invalid setting method of a certificate I t

Re: Specifying CRL URL for CA

2002-08-27 Thread Karl-Michael Werzowa
hello, Fred easiest would be to insert the extension crlDistributionPoints=URI:http://your.server.com/your.crl in the section [usr_cert] of your working openssl.cnf. If you need ldap-URIs, create a subsection for the URIs. Best regards, Michael Am 2002-08-23 20:31 Uhr schrieb "Reimer, Fred" unt

IE 6.0 with multiple certificates problem

2002-08-27 Thread mac leus
Hi all, I am using mod_ssl to do client authentication on apache. We are using a 3 certificate model, where we have one certificate for (web)authentication, one for digital signatures and one for encryption. When I try to connect to the webserver (where I configured to only use the web authentica

Re: PKCS#7 creation/signing question

2002-08-27 Thread Michael Shmulevich
Stephen, Thank you for a reply. > openssl verify -CAfile rootca.pem -untrusted othercas.pem signer.pem This is what I did: $ openssl verify -CAfile root_ca.cert -untrusted ca.cert sign.cert sign.cert: OK As you see, signer certificate is OK, however, ca.cert is not being verified at all. A

RE: OpenSSL and iplanet problems

2002-08-27 Thread Max Blackmer
Is the application in Java? if so, Do you have all the kernel patches required by sun for java? You may want to verify the version of java you are using. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ashwin C Uthappa Sent: Monday, August 26, 2002 2:42

Re: The effective/invalid setting method of a certificate

2002-08-27 Thread SSL_Leay
Hello. I think that what to say has been understood somehow. Wasn't it good although it was planning to think that it is made to get confused too many, and to write briefly when long English was written? The process investigated by itself is also written from next time.   Thank you.   fr

Re: Allowing both SSLv3 and TLS

2002-08-27 Thread Lutz Jaenicke
On Mon, Aug 26, 2002 at 06:23:25PM -0700, Xperex Tim wrote: > If I want a server to accept either SSLv3 or TLS connections but not SSLv2 >connections, do I use > TLSv1_server_method() or SSLv3_server_method() or is this not possible? SSLv23_server_method() and SSL_OP_NO_SSLv2 in SSL_CTX_set_opti

RE: 0.9.6g win2k linkage warning: duplicate advapi32 symbols

2002-08-27 Thread Tal Mozes
Thanks, Gregory, for your reply. But it doesn't really explain the situation. The problem is that the ADVAPI32.LIB import library is included in both libeay.lib and ssleay.lib. Since the imported symbols are the same in both libs, I don't see any problem with it. But, when I build a library and t