Re: problem with EVP_SealInit

2003-07-17 Thread Dr. Stephen Henson
On Thu, Jul 17, 2003, Reza Curtmola wrote: > My problem is that when I do public encryption, the first time I run the > following piece of code, it works OK, but then when I run the program for > the second time, the EVP_SealInit function fails and returns -1. > > I seed the random number generat

problem with EVP_SealInit

2003-07-17 Thread Reza Curtmola
My problem is that when I do public encryption, the first time I run the following piece of code, it works OK, but then when I run the program for the second time, the EVP_SealInit function fails and returns -1. I seed the random number generator before calling the following piece of code. EVP_CI

Re: Encryption with OpenSSL

2003-07-17 Thread Dr. Stephen Henson
On Thu, Jul 17, 2003, Markus Krutz wrote: > Hi, > > I´ve tried to SSLify my existing application. Works all fine so far, except for that > the messages sent via the SSL channel are not encrypted (tcpdump). > I do almost the same as in the demos\ssl folder. > Do I need to set up any BIO or set a

Re: RE: more spam

2003-07-17 Thread Andrew Marlow
[EMAIL PROTECTED] writes: >At the risk of going *completely* off topic, what is TDMA in this >context? Whoops, I actually meant to say TMDA, which stands for Tagged Message Delivery Agent. See http://tmda.net for details. Regards, Andrew Marlow There is an emerald here the size of a plover'

Re: which SSL function

2003-07-17 Thread Jue (Jacky) Shu
Thx lutx, I found there is another SSL function to get peer's certificate, not certificate chain. SSL_get_peer_certificate(SSL). man suggests using it instead of SSL_get_peer_cert_chain. Jacky On 2003-07-17 at 02:50, Lutz Jaenicke wrote: > On Wed, Jul 16, 2003 at 09:53:24PM -0400, Jue (Jacky) Sh

Encryption with OpenSSL

2003-07-17 Thread Markus Krutz
Hi,   I´ve tried to SSLify my existing application. Works all fine so far, except for that the messages sent via the SSL channel are not encrypted (tcpdump). I do almost the same as in the demos\ssl folder. Do I need to set up any BIO or set a cipher in order to obtain encryption with OpenSS

Re: Signing a CSR from JetDirect

2003-07-17 Thread Michael Sierchio
David Schwartz wrote: The right thing is for the CA to issue a limited wildcard CA cert. Basically, it would say that a certain key may sign certificates for all hosts inside a particular domain. That way you only need one key signed by an outside authority and it doesn't matter if one of

Re: more spam

2003-07-17 Thread Louis LeBlanc
On 07/17/03 10:06 AM, Aleix Conchillo Flaque sat at the `puter and typed: > > hi, > > i have sent a message to the list, and some anti spam software that this > user ([EMAIL PROTECTED]) has installed has sent to me an email asking > me to accept it if i really wanted to send the message to him. >

Re: X.509 source code

2003-07-17 Thread Dr. Stephen Henson
On Thu, Jul 17, 2003, Pascal VERRECCHIA wrote: > What is the exact type of X509? > I don't succeed to find his declaration in my library openssl... > And, where can I find a function which permits to print the different > informations of a certificate X509? > Erm X509 is a structure defined

Re: X.509 source code

2003-07-17 Thread Pascal VERRECCHIA
What is the exact type of X509? I don't succeed to find his declaration in my library openssl... And, where can I find a function which permits to print the different informations of a certificate X509? --- > OK, thank you very much for the informations! > > > ---

Re: OCSP verifying

2003-07-17 Thread Dr. Stephen Henson
On Thu, Jul 17, 2003, Wu Junwei wrote: > Hi,all > > I have a 4-level certificate tree. > > ca0--ca1--ca2--cert > > And I put ca0 ,ca1 in the X509_STORE, > put ca2 in the STACK_OF(X509) > > When I send the ocsp request to ca2, with the cert in question, I can get > the ocsp response which is si

Re: X.509 source code

2003-07-17 Thread Pascal VERRECCHIA
OK, thank you very much for the informations! --- > On Thu, Jul 17, 2003, Pascal VERRECCHIA wrote: > > > > > > > > > I'd like to find a program which permits me to obtain the fields > > > > following of a certificate : > > > > > > > > - issuer > > > > - is

Re: X.509 source code

2003-07-17 Thread Dr. Stephen Henson
On Thu, Jul 17, 2003, Pascal VERRECCHIA wrote: > > > > > > I'd like to find a program which permits me to obtain the fields > > > following of a certificate : > > > > > > - issuer > > > - issuerAltName > > > - subject > > > - subjectAltName > > > - cRLDistributionPoint > > >

AW: more spam

2003-07-17 Thread Jung Rainer
Hi, List! > At the risk of going *completely* off topic, what is TDMA in this > context? TDMA is a "Tagged Message Delivery Agent". It's a nice idea, i am also using it. Just send the persone once the link to http://tmda.net/config-filter.html, there is written, how to deal with lists. Bye, Rai

RE: more spam

2003-07-17 Thread Bart J. Smit
At the risk of going *completely* off topic, what is TDMA in this context? Old RF hackers like me only know this as Time Division Multiplexed Access :( Bart... -Original Message- From: Andrew Marlow [mailto:[EMAIL PROTECTED] Sent: 17 July 2003 10:36 To: [EMAIL PROTECTED] Subject: RE: mo

RE: more spam

2003-07-17 Thread Andrew Marlow
[EMAIL PROTECTED] writes: >I've complained about this member before (and I block him as well). >Auto-responders (whether vacation or anti-spam) are totally inappropriate >on an opt-in mailing list. This sounds like TDMA to me. Does anyone know? I am thinking of using TDMA but msgs like this put m

Re: OCSP verifying

2003-07-17 Thread Wu Junwei
(B (B (Badd one thing, (B  (BIt is supposed the chain: (Bca0--ca1--ca2--D1 (Bcan be verified one by one. (B  (B  (B (B - Original Message - (B From: (B Wu (B Junwei (B To: [EMAIL PROTECTED] (B Sent: Thursday, July 17, 2003 6:04 (B PM (B Subject: OCSP verifyi

OCSP verifying

2003-07-17 Thread Wu Junwei
(B (B (BHi,all (B    (BI have a 4-level certificate tree. (B  (Bca0--ca1--ca2--cert (B  (BAnd I put ca0 ,ca1 in the X509_STORE, (Bput ca2 in the STACK_OF(X509) (B  (BWhen I send the ocsp request to ca2, with the cert in question, I can get (Bthe ocsp response which is signed by the d

Re: X.509 source code

2003-07-17 Thread Pascal VERRECCHIA
Hello and thank you for your answer! --- > On Wed, Jul 16, 2003, Pascal VERRECCHIA wrote: > > > Hello everybody! > > > > I'd like to find a program which permits me to obtain the fields > > following of a certificate : > > > > - issuer > > - issuerAltName > >

RE: more spam

2003-07-17 Thread Dean Gibson (System Administrator)
I've complained about this member before (and I block him as well). Auto-responders (whether vacation or anti-spam) are totally inappropriate on an opt-in mailing list. If I was the owner of the list I'd suspend him (with a friendly eMail warning). -- Dean Steven Reddie wrote on 2003-07-17 01:

RE: more spam

2003-07-17 Thread Steven Reddie
Yeah, I get the same. I've added this user to my spam list. Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Aleix Conchillo Flaque Sent: Thursday, 17 July 2003 6:06 PM To: [EMAIL PROTECTED] Subject: more spam hi, i have sent a message t

Re: more spam

2003-07-17 Thread Christian Hohnstaedt
Readjust your spamfilter, my spamfilter has marked it as Spam :-)) Regards Christian On Thu, Jul 17, 2003 at 10:06:28AM +0200, Aleix Conchillo Flaque wrote: > > hi, > > i have sent a message to the list, and some anti spam software that this > user ([EMAIL PROTECTED]) has installed has sent to

more spam

2003-07-17 Thread Aleix Conchillo Flaque
hi, i have sent a message to the list, and some anti spam software that this user ([EMAIL PROTECTED]) has installed has sent to me an email asking me to accept it if i really wanted to send the message to him. what is this? i do not want more spam. it is really annoying. anti-spam filters are g

Re: crypto library

2003-07-17 Thread Aleix Conchillo Flaque
i think that by default OpenSSL is installed in /usr/local/ssl, so libcrypto.a is in /usr/local/ssl/lib. you probably would want to do: ./config --prefix=/usr/local now libcrypto will be installed in /usr/local/bin and openssl executable in /usr/local/bin may be this was the problem. hth. al