Re: maximum block size in SSL_write()

2002-09-26 Thread Lutz Jaenicke
On Thu, Sep 26, 2002 at 11:36:36PM -0700, Cory Albrecht wrote: > --- Xperex Tim <[EMAIL PROTECTED]> wrote: > > Personally, I don't consider SSL_ERROR_WANT_WRITE to be an error. If > > you are going to use > > non-blocking sockets then you are going to have to expect that > > sometimes the socket

RE: Multiple server certificates

2002-09-26 Thread Jose Correia (J)
To my knwoledge no, as Apache only allows you to specify one server certificate and key. -Original Message- From: Xperex Tim [mailto:[EMAIL PROTECTED]] Sent: 27 September 2002 03:20 To: openssl Subject: Multiple server certificates With client authentication, the server sends a list of

Re: maximum block size in SSL_write()

2002-09-26 Thread Cory Albrecht
--- Xperex Tim <[EMAIL PROTECTED]> wrote: > Personally, I don't consider SSL_ERROR_WANT_WRITE to be an error. If > you are going to use > non-blocking sockets then you are going to have to expect that > sometimes the socket won't be ready > for writing. OpenSSL doen't want to busy-wait in that c

Server self signed cert

2002-09-26 Thread Glynn S. Condez
I create my own CA and server certificate together with client certificate. Is there a way to kept the self signed server certificate to trusted root certification authorities? --- Glynn --- __ OpenSSL Project

Multiple server certificates

2002-09-26 Thread Xperex Tim
With client authentication, the server sends a list of acceptable CA's to the client in the Certificate Request, so a client may have multiple identities and choose an appropriate one. Is there something similar for the usual server authentication? I.e. can a server have multiple certificates

Re: maximum block size in SSL_write()

2002-09-26 Thread Xperex Tim
Personally, I don't consider SSL_ERROR_WANT_WRITE to be an error. If you are going to use non-blocking sockets then you are going to have to expect that sometimes the socket won't be ready for writing. OpenSSL doen't want to busy-wait in that case so it returns to you so you can do something

Observation about pkcs12 certificate generation

2002-09-26 Thread Rohit Kumar
Hello friends,  I am a newbee. I am trying to create a pkcs12 certificate using the following command.   openssl pkcs12 -export -out file1.pkcs12 -in file2.crt -inkey "some value" -passin pass:value1 -passout pass:value2.   It generates a file1.pkcs12 certificate correctly.   On the next ins

Re: Creating pkcs12 file

2002-09-26 Thread Xperex Tim
I think if you add the flag -export it will do what you want. --- "Fishman, Stephen" <[EMAIL PROTECTED]> wrote: > We are trying to convert a pem certificate and a pem key file into a pkcs12 > certificate using the following command > > openssl pkcs12 -in democert.pem -inkey demokey.pem -out demo

maximum block size in SSL_write()

2002-09-26 Thread Cory Albrecht
Hello all, I'm writing an IRC client to which I'm adding SSL to the DCC chat & send file functions. Everything went peachy keen with SSLing DCC chat, but I ran into a minor problem adding SSL to send file. Basically in DCC send file the sender sends 256 byte blocks of the file and the receiver a

Re: time out parameter for command line of openssl (s_client) bin

2002-09-26 Thread Barry Moore
Bert and Gene, I also had the same problem...and posted the lines below on September 13th...no response yet. Regards, Barry v I have an SSL-capable server application running on port 80 on a VMS box. A non-SSL browser connection to it works perfectly. However, when attempting to connect

Re: time out parameter for command line of openssl (s_client) bin

2002-09-26 Thread Gene Rogers
Hello B, Hey if you get an answer to this question I'd love to know it. I've encountered this problem myself. I also had to use OS kernel timeout, to kill the connection... I've posted this question to the list also but no answer. If I hear anything I'll let you know too. Later, Gene - O

copy_extensions equivalent for 0.9.6

2002-09-26 Thread Jochen Eisinger
Hi, is there a way to simulate copy_extensions with current stable openssl versions? Any comments are wellcome. regards -- jochen -- ...and I doubt complaining to the author will get you anything but a free procmail rule. __ O

Re: New ENGINE in OpenSSL

2002-09-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 26 Sep 2002 09:33:25 +0200, Michiels Olivier <[EMAIL PROTECTED]> said: olivier.michiels> I've to create a new ENGINE in my implementation. olivier.michiels> My question is very simple, do I have to implement olivier.michiels> the HWCryptoHook methods somewh

time out parameter for command line of openssl (s_client) bin

2002-09-26 Thread Courtin Bert
Hi list, currently I'm using - CONN_STRING="$(${PATH_TO_OPENSSL} s_client -connect ${HOST_IP}:${PORT} -nbio -pause < /dev/null 2>&1)" to connect to a remote SSL-server to get the connection string for processing it with echo "${CONN_STRING}" | ${PATH_TO_OPENSSL} x509 -noout -dates | gre

[no subject]

2002-09-26 Thread Fishman, Stephen
We are trying to convert a pem certificate and a pem key file into a pkcs12 certificate using the following command openssl pkcs12 -in democert.pem -inkey demokey.pem -out democert.pfx and get the following error 1380:error:0D0FE007:asn1 encoding routines2i_PKCS12:expecting an asn1 sequence:./c