Re: IMPORTANT: The release of 0.9.6h is postponed

2002-11-21 Thread Michael Lee
"Richard Levitte - VMS Whacker" wrote: > A fairly recent problem report (PR 343 in our bugs database) proves to > be a showstopper. It mentions that 'memset(ptr, 0, n)' may not happen > if the compiler is modern and "smart". Can you elaborate more? I use memset() that way quite often and I am i

Re: Converting own CA certificate to pkcs12

2002-11-21 Thread mikecross
Seems to me that you problem is that you didn't supply password. PKCS12 format stores Private + Public key pair encrypted with password. --- Matthew Hall <[EMAIL PROTECTED]> wrote: > > I'm trying to find out how to take my ca.crt file > (signed > by my own CA self) and convert it to pkcs12 format

RE: Beta 4 of OpenSSL 0.9.7

2002-11-21 Thread ervin ruci
it did not complain when i installed openssl 0.9.6g though. that's the one i've been using for some time. however the ld_library_path solution you mention does not work either. -Original Message- From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED]] Sent: Thursday, November 21, 20

Converting own CA certificate to pkcs12

2002-11-21 Thread Matthew Hall
I'm trying to find out how to take my ca.crt file (signed by my own CA self) and convert it to pkcs12 format for importation into Mozilla, so that Mozilla will recognize anything else signed by me as 'OK'. Converting it to DER format was easy: openssl x509 -in ca.crt -out ca.der -outform DER I'

Re: Hard-wired CA-cert in source code?

2002-11-21 Thread David Schwartz
On Wed, 20 Nov 2002 19:58:50 -0700, Bear Giles wrote: >David Schwartz wrote: >>>On Wed, 20 Nov 2002 11:29:26 +0100 (MET), Andreas Jusek wrote: I am developing an SSL-secured client/server application. In one special case, the client machine isn't trusted to be secure. Therefore I can not

IMPORTANT: The release of 0.9.6h is postponed

2002-11-21 Thread Richard Levitte - VMS Whacker
A fairly recent problem report (PR 343 in our bugs database) proves to be a showstopper. It mentions that 'memset(ptr, 0, n)' may not happen if the compiler is modern and "smart". Because of this, I've decided to postpone the release of 0.9.6h until next week. That should give us ample time to f

Re: Beta 4 of OpenSSL 0.9.7

2002-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 21 Nov 2002 12:09:56 -0500, "ervin ruci" <[EMAIL PROTECTED]> said: ruci> tried Beta 4 of OpenSSL 0.9.7 and apache/mod_ssl. i can't restart the web ruci> server. ruci> ruci> Syntax error on line 53 of /usr/local/apache+sharedmm/conf/httpd.conf: ruci> Cannot

Re: compile openssl on toshiba mips cpu

2002-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 21 Nov 2002 22:51:51 +0800, Jeffery Huang <[EMAIL PROTECTED]> said: dragonh> Can I port openssl into toshiba TX39/TX49 series CPU platform? Only you can answer that question. You can probably do it better than I, since I've never been near that kind o

Re: Why use a certificate request

2002-11-21 Thread Richard Levitte - VMS Whacker
In message <01c2915e$257149d0$0101a8c0@osiris> on Thu, 21 Nov 2002 14:01:45 +0100, "Jasper Spit" <[EMAIL PROTECTED]> said: j.spit> For non-web based OpenSSL applications, is it still necessary j.spit> or recommended to use certificate requests to obtain a new j.spit> certificate ? Currently m

Re: Unable to load DSA public key?

2002-11-21 Thread Paul L. Allen
Nils Larsch wrote: > > Paul L. Allen wrote: > > One of our customers showed up with a certificate that OpenSSL's x509 > > subcommand doesn't appear to like. It complains about the public key: > > > > [paula@bluesky C_pdp]$ /usr/local/ssl/bin/openssl x509 -in > > HASMClient1.cer -inform der -text

Beta 4 of OpenSSL 0.9.7

2002-11-21 Thread ervin ruci
tried Beta 4 of OpenSSL 0.9.7 and apache/mod_ssl. i can't restart the web server. Syntax error on line 53 of /usr/local/apache+sharedmm/conf/httpd.conf: Cannot load /usr/local/apache+sharedmm/libexec/libssl.so into server: ld.so.1: /usr/local/apache+sharedmm/bin/httpd: fatal: relocation error: fi

Bad error recovery while reading DER encoded ASN1 structure from BIO

2002-11-21 Thread Jan Hofmann
Hello I have written a simple program. It uses a simple ASN1 structure ZPRAVA, which containts INTEGER and IA5STRING. typedef struct { // ASN1 structure for message ASN1_INTEGER *cislo;// integer number ASN1_IA5STRING *str;// text } ZPRAVA; ASN1_SE

Re: The openssl s_time command

2002-11-21 Thread Martin Witzel
I found the problems, thanks. Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Problem reading ASN1 DER encoded message from BIO

2002-11-21 Thread Jan Hofmann
I have written a client/server programs using OpenSSL for sending simple ASN1 structure, which is DER encoded. rclient1.c ---> rserver.c 1. Client asks an user to enter data: a number and a short text. 2. It creates a simple ASN1 structure containing INTEGER and IA5STRING. typedef struct {

Re: Why use a certificate request

2002-11-21 Thread Christian Hohnstaedt
Hi Jasper, the major goal of using requests is that the signer does not know and need the private key of the client certificate. If your application creates a key and a request and signs the request then you don't need the request and directly can create a signed certificate and key and hand the