OpenSSL libcrypto size

2003-10-01 Thread Franta Hanzlik
(Sorry, I sent my previous e-mail with bad source address) Know anyone (or is any document about it) how succesfully compile openssl with only some crypto modules, with respect on small library size? I tried compile versions 0.9.7b and 0.9.7c with various ./Configure options (no-krb5 no-hw no-dh n

How to get peer cert chain?

2003-10-01 Thread jiang lei
Greetings everyone, (B (BMy case is simple: (B (BWindows HTTP client using openssl0.9.7b, a single server cert signed by (BVeriSign. (B (Bthe path is: (B (B[VeriSign Class 3 Public Primary CA ] -> [www.verisign.com/CPS Incorp.by (BRef. LTD.(c)97 VeriSign] -> [my own cert] (B (B

RE: Creating Certificates for Pocket PC

2003-10-01 Thread Steven Reddie
Title: Message You are trying to run the openssl.exe built for the Pocket PC.  It wont run on the desktop.  You would probably be better off using a desktop build of openssl, creating the certificates with that, and transferring them to the PPC.  If you really want to use the PPC version, ge

Re: how to generate certs with a "+" in the dn

2003-10-01 Thread François Beretti
Thank you very much ! I will try it today. Thanks for the advices about the lack of interoperability. Actually, I did not choose this configuration, my job is to set up an ldap directory on which users will be able to authenticate via TLS with their certificate in this PKI, and I have to test th

Re: how to generate certs with a "+" in the dn

2003-10-01 Thread Dr. Stephen Henson
On Thu, Oct 02, 2003, François Beretti wrote: > hello all > > I would like to create a PKI (with openssl of course) which generate > certificates with such DNs : > givenName=Francois+sn=beretti+cn=0123456789,ou=myorganizationalunit,l=mylocality,o=myorganisation,c=mycountry > > how must I config

how to generate certs with a "+" in the dn

2003-10-01 Thread François Beretti
hello all I would like to create a PKI (with openssl of course) which generate certificates with such DNs : givenName=Francois+sn=beretti+cn=0123456789,ou=myorganizationalunit,l=mylocality,o=myorganisation,c=mycountry how must I configure my openssl.cnf file to do this ? my only problem is the

RE: [13%] - Solaris 8 and openssl-.97c problems

2003-10-01 Thread Chapman, Kyle
try setting LDFLAGS to include -R/usr/local/lib or use crle to add /usr/local/lib, or wherever you have the openssl libs installed to the library search path -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 5:43 PM To: [EMAIL PROTECTE

Solaris 8 and openssl-.97c problems

2003-10-01 Thread rick . edwards
Hi All Trying to get this baby built and installed, but am having some weird problems. Running Solaris 8 and gcc V3.2 ./Configure shared solaris-sparcv8-gcc make make test All tests pass (except those which are expected to fail) Now I do a "make install", again with no errors. Here's the weir

Creating Certificates for Pocket PC

2003-10-01 Thread Kambourakis Georgios
Hi,   I have succesfully installed openssl 0.9.7b for Windows CE, and i need to create certificates for my openssl client that runs on a pocket pc 2002.   When i run openssl from command prompt (in Win 2000) writes: "The image file openssl.exe is valid, but is for a machine type other than t

Re: compiling openssl-0.9.7c on redhat 3.0.3

2003-10-01 Thread Dr. Stephen Henson
On Wed, Oct 01, 2003, Jonathan Sabo wrote: > > Hello, > > I am trying to get openssl-0.9.7c to compile on a redhat 3.0.3 system and > I am getting the following error: > > make[2]: Leaving directory `/home/sabo/openssl-0.9.7b/crypto/dh' > making all in crypto/dso... > make[2]: Entering director

compiling openssl-0.9.7c on redhat 3.0.3

2003-10-01 Thread Jonathan Sabo
Hello, I am trying to get openssl-0.9.7c to compile on a redhat 3.0.3 system and I am getting the following error: make[2]: Leaving directory `/home/sabo/openssl-0.9.7b/crypto/dh' making all in crypto/dso... make[2]: Entering directory `/home/sabo/openssl-0.9.7b/crypto/dso' gcc -I.. -I../.. -I..

Re: Distributing OpenSSL and staying out of jail

2003-10-01 Thread Rich Salz
You should ask your lawyers to read the license that comes with OpenSSL. If they claim to need "official" answers, ask them why, and ask them how they would handle the analogous situation for something like Microsoft Office. :) The only way to be in compliance with US export regulations is to f

Distributing OpenSSL and staying out of jail

2003-10-01 Thread Jerry Asher
Hi, I've read the license now, and I am still unclear on a few license issues and several legal/export issues. I am hoping someone here can lend a hand. We are planning on creating an application that uses stunnel and openssl on Windows. The goal is to allow users to click on a single download