Re: What key management algorithms are supported by OpenSSL

2002-10-11 Thread Rich Salz
> I'm not quite sure what this means, but "What key > management algorithms, including modulus sizes, are > supported by OpenSSL?" Oooh, it means someone's applying for an export license. :) Include a copy of the TLS RFC in your application, and refer them to that. They won't actually read it, th

Re: mod_authz_ldap compiling error

2002-10-11 Thread Andreas Mueller
On Fri, 11 Oct 2002, Glynn S. Condez wrote: > > On Fri, 11 Oct 2002, Glynn S. Condez wrote: > > > certmap.c:14:17: pem.h: No such file or directory > > pem.h is a OpenSSL header, so you should add the openssl includes > > directory to your CPPFLAGS. > > CPPFLAGS=-I/usr/local/include /usr/local/ssl/

Using a client certificate

2002-10-11 Thread brian beuning
I am working on a project to write a client program to connect to a sercure server using a client certificate issued by the server owner. Below is a copy of the certifcate (after it was converted from p12 to pem format). I am using code from the excellent book by Eric Rescorla, like this /* L

What key management algorithms are supported by OpenSSL

2002-10-11 Thread Edward Chan
I'm not quite sure what this means, but "What key management algorithms, including modulus sizes, are supported by OpenSSL?" Thanks, Ed __ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com

Re: pkcs 12 to pem utility

2002-10-11 Thread Vijo Cherian
try `openssl pkcs12` vijo. On Fri, Oct 11, 2002 at 06:37:45AM -0700, tarun matai wrote: > Dear All, >I am looking for a utility which can > convert public key/private key bundeled in the pkcs12 > format into the pem format, is there any utility > available if yes what is the link for

[Crypt::SSLeay] Looking for modern version of Perl binaries for Win32

2002-10-11 Thread Clinton Pierce
Looking for a bit of help here. I need to do some LWP work over https, and the proxy method for the LWP::UserAgent module doesn't do http-CONNECT style proxying (it simply re-isses the GET). According to the manpage, Crypt::SSLeay (0.45) does thorugh the $ENV{HTTPS_PROXY} interface but the versi

pkcs 12 to pem utility

2002-10-11 Thread tarun matai
Dear All, I am looking for a utility which can convert public key/private key bundeled in the pkcs12 format into the pem format, is there any utility available if yes what is the link for the download of the same. I would highly appreciate the help provided by you Thanks in advance.

bad record mac record alert

2002-10-11 Thread Glen Matthews
Hi, i'm getting a bad record mac alert back from the server, just before it closes the connection. the ciphersuite that was negotiated was DES-CBC-SHA, and the initial handshakes, etc. completed successfully. anyone have any idea what's up? or where in the code i should look? the protocol versi

Re: dummy question about PKCS#12

2002-10-11 Thread Aleix Conchillo
On Fri, 11 Oct 2002 18:42:02 +0200, Joern Sierwald wrote: > > If the certificates are encrypted, you need to decrypt them. Sorry for > stating the obvious. However: there is no need to encrypt them > in the 1st place. A pkcs#12 file can contain the cert unecrypted > and the key encrypted. > > o

Re: dummy question about PKCS#12

2002-10-11 Thread Joern Sierwald
At 18:32 11.10.2002 +0200, you wrote: >hi! > > this is probably basic question. i'd like to know if there is any way >to obtain the public certificates inside a PKCS#12 without the need >of decrypt it. > > if the certificates are public it should be obvious to be able to >read them

dummy question about PKCS#12

2002-10-11 Thread Aleix Conchillo
hi! this is probably basic question. i'd like to know if there is any way to obtain the public certificates inside a PKCS#12 without the need of decrypt it. if the certificates are public it should be obvious to be able to read them. is it possible? regards, aleix ___

Fup: Padding error

2002-10-11 Thread Peter de Vroomen
> I am sorry, but I hardly know anything about the how the encryption itself > works. I am using the OpenSSL as an API, so please don't try to explain the > mathematical backgrounds to me, that's probably a waste of time :). ...but if anyone can point me to a site where things are explained witho

Padding error

2002-10-11 Thread Peter de Vroomen
Hi, I am having problems with padding errors. I have looked through the mailing archives, but haven't found anything usefull :(. What happens is that I have a Perl script that signs a string of text. This Perl script uses Crypt::OpenSSL::RSA version 0.16, a Perl library that wraps around the Ope

RE: ASN1_TIME

2002-10-11 Thread Alexey S. Poluntchenko
Try this one ASN1_UTCTIME_get Hi, I want to store certificates in database (Oracle) and I want to have expiration time of certificates stored in DATE column, but I did not find a function that converts ASN1_TIME to time_t or struct tm. Is there such a function? And I want to ask if the expira

ASN1_TIME

2002-10-11 Thread CHOVANEC VladimĂ­r
Hi, I want to store certificates in database (Oracle) and I want to have expiration time of certificates stored in DATE column, but I did not find a function that converts ASN1_TIME to time_t or struct tm. Is there such a function? And I want to ask if the expiration time is always stored as GMT

Re: Documentation in HTML

2002-10-11 Thread Richard Koenning
At 10:15 11.10.2002 +0100, you wrote: >Could someone consider whether the documentation for OpenSSL should be shipped >in HTML format as well as POD please? I use Windows 2000 and my current >ActiveWare version of Perl only contains POD2TEXT which is somewhat limiting. My ActiveWare version of

RE: openssl 9.6g Redhat 7.3 Seg Fault

2002-10-11 Thread DARCY,MATTHEW (HP-UnitedKingdom,ex2)
Is there any followup to this yet ? Is any more information required ? Thanks, Matt. > -Original Message- > From: DARCY,MATTHEW (HP-UnitedKingdom,ex2) > Sent: Tuesday, October 08, 2002 1:27 PM > To: '[EMAIL PROTECTED]' > Subject: openssl 9.6g Redhat 7.3 Seg Fault > >

RE: using prompt=no option with multiple CNs

2002-10-11 Thread Zachary Denison
Thank You, I am still not sure what you mean though, what command do I have to issue inside the loop? When I am done I only want 1 certificate. I am not looking to generate a seperate one for each server. --- "Marco \"Kiko\" Carnut" <[EMAIL PROTECTED]> wrote: > Hi Zachary, > > > I am using ope

Documentation in HTML

2002-10-11 Thread Paul D.Smith
Could someone consider whether the documentation for OpenSSL should be shipped in HTML format as well as POD please? I use Windows 2000 and my current ActiveWare version of Perl only contains POD2TEXT which is somewhat limiting. I imagine it would take little work to knock up a Perl script to

Re: mod_authz_ldap compiling error

2002-10-11 Thread Glynn S. Condez
Thanks Andreas it compiles now.. --- Glynn --- - Original Message - From: "Glynn S. Condez" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 11, 2002 4:12 PM Subject: Re: mod_authz_ldap compiling error > From: "Andreas Mueller" <[EMAIL PROTECTED]> > To: <[EMAIL PROTEC

Re: mod_authz_ldap compiling error

2002-10-11 Thread Glynn S. Condez
From: "Andreas Mueller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 11, 2002 3:38 PM Subject: Re: mod_authz_ldap compiling error > On Fri, 11 Oct 2002, Glynn S. Condez wrote: > > certmap.c:14:17: pem.h: No such file or directory > pem.h is a OpenSSL header, so you should ad

RE: new release of mod_authz_ldap

2002-10-11 Thread Andreas Mueller
On Fri, 11 Oct 2002, Jose Correia (J) wrote: > The module is still not available at: > > http://authzldap.othello.ch/download.html Thanks for pointing that out, the download page was not updated. The directory contained the new version, though. The update of the download page has now been auto

Re: mod_authz_ldap compiling error

2002-10-11 Thread Andreas Mueller
On Fri, 11 Oct 2002, Glynn S. Condez wrote: > certmap.c:14:17: pem.h: No such file or directory pem.h is a OpenSSL header, so you should add the openssl includes directory to your CPPFLAGS. Mit herzlichem Gruss Andreas Mueller -- Dr. Andreas Mueller, Bera

Re: DGUX test_bn failure: stack empty

2002-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 10 Oct 2002 14:34:31 -0700 (PDT), jing cui <[EMAIL PROTECTED]> said: jingcui_80202> Now I have another problem: On DG AViiON machine the jingcui_80202> "make test" failed with test_bn. I searched jingcui_80202> openssl-users archive and found that there was