Re: Best format for input to EVP_EncryptInit

2003-09-11 Thread Ashutosh Jaiswal
Hi Everyone, Just a quick question. I'm trying to encrypt a PKCS7 document with EVP_EncryptInit (for symmetric key encryption). What would be the best format to output the PKCS7 document (ASN/PEM/SMIME) to be used as an input for EVP_EncryptInit (which takes unsigned char as input)? I'm

Re: subjectAlternateName

2003-09-11 Thread Rich Salz
> Has anyone thought of this - if I declare an OID to be "this data is > a pointer into my database" how do relying parties figure this out? > As in, is there some way to retrieve the ASN.1 rules/interpretation > at run time? Securely? I haven't heard of such a thing. I wonder how useful it real

Re: subjectAlternateName

2003-09-11 Thread Edward Lewis
At 2:52 +0200 9/12/03, Dr. Stephen Henson wrote: *However* the meaning of 'support' in the context of otherName is somewhat ambiguous. The actual value field can contain anything depending on the name field. Yeah. I'd settle with being able to give an OID in the dotted decimal notation and the va

Re: Best format for input to EVP_EncryptInit

2003-09-11 Thread Dr. Stephen Henson
On Thu, Sep 11, 2003, Ashutosh Jaiswal wrote: > Hi Everyone, > Just a quick question. I'm trying to encrypt a PKCS7 document with > EVP_EncryptInit (for symmetric key encryption). What would be the best > format to output the PKCS7 document (ASN/PEM/SMIME) to be used as an > input for EVP_EncryptI

Re: subjectAlternateName

2003-09-11 Thread Dr. Stephen Henson
On Thu, Sep 11, 2003, Edward Lewis wrote: > I'd like to use subjectAlternateName:otherName. From what I can > tell, in this code in 097a: > > #case GEN_OTHERNAME: > #X509V3_add_value("othername","", &ret); > #break; > > it's not supported. > > I

Re: Test

2003-09-11 Thread Michael Sierchio
Paul L. Allen wrote: Hmmm... I've seen three replies like this, but Dan's original message didn't make it here. I was recently dropped by the robot that manages the OpenSSH list because it was seeing too many bounces from my address. Hmmm... Now, is it the Bellevue mail hub? The St. Louis gate

make test problems on Solaris 9 64-bit

2003-09-11 Thread Rhugga
I am trying to build openssl-0.9.7b on Solaris 9 64-bit. I configured and built openssl as follows with zlib and solaris 64-bit support. When I run make test, I get the following: OSSL_LIBPATH="`cd ..; pwd`"; LD_LIBRARY_PATH="$OSSL_LIBPATH:$LD_LIBRARY_PATH"; DYLD_LIBRARY_PATH="$OSSL_LIBPATH:$D

Re: Test

2003-09-11 Thread Paul L. Allen
Hmmm... I've seen three replies like this, but Dan's original message didn't make it here. I was recently dropped by the robot that manages the OpenSSH list because it was seeing too many bounces from my address. Hmmm... Now, is it the Bellevue mail hub? The St. Louis gateway? The local mail

Re: Engine for IBM 2058 eServer Cryptographic Accelerator?

2003-09-11 Thread Steven Bade
There is a separate engine patch available for the 2058.. through ICA.. It is NOT the same as the 4758 engine which was NOT developed by IBM On Thu, 2003-09-11 at 13:05, Markus Lorch wrote: > Hi, > > does anyone know if the IBM 4758 engine also support the > IBM 2058 eServer Cryptographic Accelera

Allowing sendmail to relay from Outlook clients that I've issued certificates to.

2003-09-11 Thread Dann Daggett
Hello all, I am really starting to feel quite stupid. I have no idea what the heck I'm doing wrong. I've been tweaking on this for nearing two weeks now and still can't get anything with OpenSSL to work right. I've given up on the Apache web server setup (out of frustration) and have returned to t

Re: Test

2003-09-11 Thread grizzum skizzum
yup -- - Original Message - DATE: Thu, 11 Sep 2003 12:14:39 From: "Dann Daggett" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: >I seem to not be getting emails through to this list now. >Did this one make it? > >Thanks, >Dann > >

Re: Test

2003-09-11 Thread Eric Damphousse
got it! Dann Daggett wrote: I seem to not be getting emails through to this list now. Did this one make it? Thanks, Dann __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Test

2003-09-11 Thread Chuck Aaron
yes, it made it. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Test

2003-09-11 Thread Dann Daggett
I seem to not be getting emails through to this list now. Did this one make it? Thanks, Dann __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]

Engine for IBM 2058 eServer Cryptographic Accelerator?

2003-09-11 Thread Markus Lorch
Hi, does anyone know if the IBM 4758 engine also support the IBM 2058 eServer Cryptographic Accelerator? Is that what the ibmca patch in the contrib directory is for? Has somebody used it with 0.9.7b? Or is there another patch/engine available? Experiences anybody? Thanks Markus ___

subjectAlternateName

2003-09-11 Thread Edward Lewis
I'd like to use subjectAlternateName:otherName. From what I can tell, in this code in 097a: #case GEN_OTHERNAME: #X509V3_add_value("othername","", &ret); #break; it's not supported. Is that correct? Does anyone know (off-list replies encouraged)

SSL client and server write key question

2003-09-11 Thread Jostein Tveit
[Maybe this message will go through. Suddenly come to think about using the same mail address for postings as I used for subscription...] I understand the use of different keys for MAC and encryption, because using the same key for different purposes is to my understanding considered bad. But I w

Best format for input to EVP_EncryptInit

2003-09-11 Thread Ashutosh Jaiswal
Hi Everyone, Just a quick question. I'm trying to encrypt a PKCS7 document with EVP_EncryptInit (for symmetric key encryption). What would be the best format to output the PKCS7 document (ASN/PEM/SMIME) to be used as an input for EVP_EncryptInit (which takes unsigned char as input)? I'm guessing SM