Re: TLS issues with Opera

On Mon, Jan 13, 2003 at 01:33:58PM -0800, Tim Regovich wrote: > I have encountered an interesting problem when trying > to connect to s_server with Opera, when only TLS is > enabled in opera. I can only seem to connect to the > s_server if I : > > 1) start s_server -ssl3 > 2) connect to https://l

Re: Modifying x509v3 Basic Constraints

In message <1042515717.23265.1885.camel@buddy> on 13 Jan 2003 19:41:57 -0800, Robert Morse <[EMAIL PROTECTED]> said: rmorse> I created a certificate that has x509v3 Basic Constraints CA:FALSE. I rmorse> did this before getting "Network Security with OpenSSL". Now that this rmorse> cert exists,

Modifying x509v3 Basic Constraints

I created a certificate that has x509v3 Basic Constraints CA:FALSE. I did this before getting "Network Security with OpenSSL". Now that this cert exists, is there any way to change it to CA:TRUE? Sorry for the basic question. Thanks. -robert. _

Re: Stripping the OpenSSL library

I have pared down the portion of OpenSSL that I actually compile. I did it on a directory basis. I know that I am never going to use Blowfish, so I don't build anything in that folder. There is a symbol you can set to not use RC5 so if you set that you can also remove the corresponding folder fr

hash calculation in MAC version of IE?

I created a root certificate with Openssl, then load it into IE 5.2 on the MAC (latest revision, the one that works with OS X) The "fingerprint" it displays doesn't match anything I can identify. The SHA-1 fingerprint of this root as displayed by OpenSSL matches that displayed by IE 6 on Windows X

TLS issues with Opera

All, I have encountered an interesting problem when trying to connect to s_server with Opera, when only TLS is enabled in opera. I can only seem to connect to the s_server if I : 1) start s_server -ssl3 2) connect to https://localhost If i try connecting to https://192.168.2.69 (the ip of the s

Re: What do RSA functions use?

Ramon Martinez Pena wrote: > > Hello, > I'm doing a C program using RSA functions and I also have files that > contain digital signs and digital certificates that I have created > with the commands of openssl (openssl genrsa, openssl rsautl and > openssl req). This files are .key and .crt and I do

Re: obtaining expiry dates

I extracted netscape certs using the s_client switch. openssl s_client -connect host:port -showcerts > cert.pem just get rid of everything but the -Begin Cetificate- -End Certificate - in my case we use verisign certs and am presented with two certs. One being the intermedia

Re: trouble compiling

Wayne Thomas wrote: I am attempting to compile openssl-0.9.7 on my Solaris 8 Sun Blade 100 with simply ./config and make. The following error occurs: "/usr/ucbinclude/signal.h", line 49: syntax error before or at: int "/usr/ucbinclude/signal.h", line 49: warning: undefined or missing type This

error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

Hi all, I still have a problem using OpenSSL inside Apache-SSL. Everything works well EXCEPT when the browser is asking for an SSL session with C4 or C2 cypher algo and a 40 bits lenghth keys. (using 128 bits works well). This is a very big problem for us, because in France, we have a lot of use

RE: Why does get_https do not free memory used

I have a similar problem, too. I write a https server using openssl. When a new browser window is opened and client_key_exchange is processed, my https server will lose memories. I have no idea about the memory problem up to now. I wonder whether