PKCS#8 compliant key?

2003-02-19 Thread Thomas Anders
Hello, I've been given a file that is supposed to contain a private key in PKCS#8 format. I can successfully use the key with the software that ships with this test key. The author insists that it's strictly PKCS#8 compliant. However, I'm unable to use the key with OpenSSL (SNAP-20030217). "opens

RE: Apache + Tomcat with SSL

2003-02-19 Thread Boyle Owen
>-Original Message- >From: Manoj Kithany [mailto:[EMAIL PROTECTED]] > >Now I have installed SSL Certificates on my Servers and >wondering how to configure Apache for SSL? >Should I install mod_ssl or Apache-SSL? Are both these same ? >which one is recommended? Both methods achieve the sa

Client side SSL_ERROR_SYSCALL

2003-02-19 Thread Pj
Hi, continuing my OBI implementation using X509 certificates as backbone, I am implementing the client side, server to server transfers using OpenSSL (0.9.6g)... this is nonblocking async under windows platforms... Handshaking takes place ok... Data transfer takes place ok... always after the las

OpenSSL and the Trustway PKCS11 Patch

2003-02-19 Thread Mark Lassiter
Title: Message Hello,I hope this is the right group to ask. For starters, I'm an OpenSSL newbie, so please forgive my ignorance. I've done my best to research the topic before posting and havelearned a great deal.  However, I'm at a sticking point now. I'm trying to use the OpenSSL libraries

Apache + Tomcat with SSL

2003-02-19 Thread Manoj Kithany
Hi: I am using Apache 1.3.26 with JBoss ... it is working fine. Now I have installed SSL Certificates on my Servers and wondering how to configure Apache for SSL? Should I install mod_ssl or Apache-SSL? Are both these same ? which one is recommended? Thanks! _

compile OpenSSl with BC++ 5 and nasm

2003-02-19 Thread Olivier Marche
Hello ! I'm trying to compile OpenSSL on a Windows 2000 server with Borland C++ Builder 5 using nasm. With the snapshot 20030216 compilation stopped with the following error code : bcc32 -otmp32\md2test.obj -Iinc32 -Itmp32 -DWIN32_LEAN_AND_MEAN -q -w-au s -w-par -w-inl -c -tWC -tWM -DOPENSSL_SY

Re: X509 client verification

2003-02-19 Thread Pj
Thanks Steve, this is what I came up with yesterday... (untested as yet) I'll put that X509_get1_email() trick into it. Thanks again for your reply... void dumpCertificate(X509 *cert, char *fileName) { char buf[1024]; int ret; X509_NAME *subj = X509_get_subject_name(cert); X509_NAME *issuer

AES padding bug (0.9.7, SNAP-20030217)

2003-02-19 Thread Justin Karneges
Hi guys, I think I may have discovered a bug in OpenSSL's AES though EVP, or perhaps I don't know how it is supposed to work. I want to encrypt with padding disabled, but it seems my output data is padded regardless. For instance, if I am using AES128 and I give a 16 byte input, I get a 32 by

Re: IMPORTANT: please test snapshot openssl-0.9.7-stable-SNAP-20030214.tar.gz

2003-02-19 Thread Jacques A. Vidrine
On Fri, Feb 14, 2003 at 06:08:34PM +0100, Bodo Moeller wrote: > Please test snapshot openssl-0.9.7-stable-SNAP-20030214.tar.gz > (or later), which will be available today around 8 p.m. GMT at > ftp://ftp.openssl.org/snapshot;type=d >. > > We plan to release version 0.9.7a soon (next week if all go

Re: IMPORTANT: please test snapshot openssl-0.9.7-stable-SNAP-20030214.tar.gz

2003-02-19 Thread Corinna Vinschen
On Fri, Feb 14, 2003 at 06:08:34PM +0100, Bodo Moeller wrote: > Please test snapshot openssl-0.9.7-stable-SNAP-20030214.tar.gz > (or later), which will be available today around 8 p.m. GMT at > ftp://ftp.openssl.org/snapshot;type=d >. openssl-0.9.7-stable-SNAP-20030216 on current Cygwin 1.3.20. B