Re: Problem compiling tests for openssl-0.9.7b

2003-10-02 Thread Pierre
Richard Levitte - VMS Whacker wrote: In message <[EMAIL PROTECTED]> on Fri, 18 Apr 2003 02:42:22 +0200, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> said: pierre42d> >In message <[EMAIL PROTECTED]> on pierre42d> Wed, 16 Apr 2003 07:23:56 +0200, "[EMAIL PROTECTED]" pierre42d> <[EMAIL PROTECTED]> said: p

openssl on Intel I960

2003-10-02 Thread Muni Tripathi
Title: openssl on Intel I960 Hello All, I successfully compiled Openssl on Intel I960 for VxWorks (with cc960 compiler). However, when I execute it on the box, it's performace is extremely slow. Compared to other library it runs approx. 10 times slower on I960 Vxworks.  However, on other pla

Re: Patch for OPENSSL-0.9.6g

2003-10-02 Thread arun . mahajan
Dr Stephen, Thank you for the prompt reply. I will do as directed for 0.9.6G. Regards, Arun Mahajan > On Thu, Oct 02, 2003, [EMAIL PROTECTED] wrote: > > > Hi all, > > > > I have read the latest advisory that mentions the following 4 > > bugs in OpenSSL > > > > 1. ASN1-invalid-encoding re

Re: Patch for OPENSSL-0.9.6g

2003-10-02 Thread Dr. Stephen Henson
On Thu, Oct 02, 2003, [EMAIL PROTECTED] wrote: > Hi all, > > I have read the latest advisory that mentions the following 4 > bugs in OpenSSL > > 1. ASN1-invalid-encoding related > 2. Unusual-ASN1-tag related > 3. Malformed-public-key-in-a-certificate related > 4. SSL/TLS-protocol-handling relat

Patch for OPENSSL-0.9.6g

2003-10-02 Thread arun . mahajan
Hi all, I have read the latest advisory that mentions the following 4 bugs in OpenSSL 1. ASN1-invalid-encoding related 2. Unusual-ASN1-tag related 3. Malformed-public-key-in-a-certificate related 4. SSL/TLS-protocol-handling related The advisory also says that bug-4 will expose bugs 1, 2 and 3.

RE: How to get peer cert chain?

2003-10-02 Thread Dann Daggett
Hi All, In openssl-0.9.7c/demos/sign/sign.c the comments state (as does the man page): /* Just load the crypto library error strings, * SSL_load_error_strings() loads the crypto AND the SSL ones */ /* SSL_load_error_strings();*/ ERR_load_crypto_strings(); Yet if I try to load the ssl st

[Crypt::SSLeay] Windows XP - VS.NET 2003 setup problems

2003-10-02 Thread Kevin Lane
I'm hoping someone this list might be able to help me out. I've been working on getting this setup for about a week now and I feel like I'm just this close but I'm missing one key element and don't know what it is. I'm trying to get the Crypt::SSLeay module setup for Perl 5.8 (Active Perl) so

Re: compiling openssl-0.9.7c on redhat 3.0.3

2003-10-02 Thread Jonathan Sabo
Thanks alot, that did the trick. Thanks for your help, Jonathan Sabo Code 5580 NRL On Thu, 2 Oct 2003, Richard Levitte - VMS Whacker wrote: > In message <[EMAIL PROTECTED]> on Thu, 2 Oct 2003 20:25:08 +0200, "Dr. Stephen > Henson" <[EMAIL PROTECTED]> said: > > steve> On Thu, Oct 02, 2003, Jona

Re: OpenSSL libcrypto size

2003-10-02 Thread Lutz Jaenicke
On Thu, Oct 02, 2003 at 05:59:20AM +0200, Franta Hanzlik wrote: > Know anyone (or is any document about it) how succesfully compile openssl > with only some crypto modules, with respect on small library size? > > I tried compile versions 0.9.7b and 0.9.7c with various ./Configure options > (no-krb

Re: How to get peer cert chain?

2003-10-02 Thread Lutz Jaenicke
On Thu, Oct 02, 2003 at 10:05:55AM +0900, jiang lei wrote: > Windows HTTP client using openssl0.9.7b, a single server cert signed by > VeriSign. > > the path is: > > [VeriSign Class 3 Public Primary CA ] -> [www.verisign.com/CPS Incorp.by > Ref. LTD.(c)97 VeriSign] -> [my own cert] > >

Re: compiling openssl-0.9.7c on redhat 3.0.3

2003-10-02 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 2 Oct 2003 20:25:08 +0200, "Dr. Stephen Henson" <[EMAIL PROTECTED]> said: steve> On Thu, Oct 02, 2003, Jonathan Sabo wrote: steve> steve> > After configuring with the no-dso option I was able to get further but it steve> > ended with some errors: steve> >

Re: compiling openssl-0.9.7c on redhat 3.0.3

2003-10-02 Thread Dr. Stephen Henson
On Thu, Oct 02, 2003, Jonathan Sabo wrote: > After configuring with the no-dso option I was able to get further but it > ended with some errors: > > make[1]: Leaving directory `/home/sabo/openssl-0.9.7b/ssl' > making all in apps... > make[1]: Entering directory `/home/sabo/openssl-0.9.7b/apps' >

compiling openssl-0.9.7c on redhat 3.0.3

2003-10-02 Thread Jonathan Sabo
After configuring with the no-dso option I was able to get further but it ended with some errors: make[1]: Leaving directory `/home/sabo/openssl-0.9.7b/ssl' making all in apps... make[1]: Entering directory `/home/sabo/openssl-0.9.7b/apps' rm -f openssl if [ "linux-shared" = "hpux-shared" -o "linu

Re: how to generate certs with a "+" in the dn

2003-10-02 Thread Dr. Stephen Henson
On Thu, Oct 02, 2003, Francois Beretti wrote: > > Charles B Cranston wrote: > >Think AVAs might be Attribute Value Assertions but am not finding RDSs > >in much googleing -- is this X.509 stuff that didn't make it into PKIX > >or what? Asking for edification. > > > > > > I think he was talkin

RE: Solaris 8 and openssl-.97c problems

2003-10-02 Thread rick . edwards
OK here's the scoop - very strange. Set my LDFLAGS to -R/usr/local/lib make make install This fixed the libgcc_s file not found error, but not the libcrypto one. Now, set LDFLAGS to -R/usr/local/lib -R/usr/local/ssl/lib make make install This got rid of all my errors. I had to make it once, in

Re: how to generate certs with a "+" in the dn

2003-10-02 Thread Francois Beretti
Hi, I think he was talking about RDNs and not RDSs Francois Charles B Cranston wrote: Think AVAs might be Attribute Value Assertions but am not finding RDSs in much googleing -- is this X.509 stuff that didn't make it into PKIX or what? Asking for edification. __

Re: how to generate certs with a "+" in the dn

2003-10-02 Thread Charles B Cranston
Dr. Stephen Henson wrote: These things are called multi-valued RDSs of AVAs and several less polite names. Its been reported that some software doesn't handle them properly. Think AVAs might be Attribute Value Assertions but am not finding RDSs in much googleing -- is this X.509 stuff that didn't