Re: SSL cert & key generation on an appliance

2003-10-16 Thread Charles B Cranston
Sorry if I am way off base, haven't looked at the thread carefully, but if you can get a self-signed certificate you might be able to pass it into openssl req and convert it to a CSR, then sign that with the higher level cert. The idea is that all you really need is the public key, and that is in t

Intructions for Borland C++ compiler does not build dlls!?

2003-10-16 Thread Ram Mulay
I need to build libeay32.dll and ssleay32.dll but following the instructions given in the openssl documentation builds libeay32.lib and ssleay32.lib. I am not familiar with make files and hence I do not know how to modify it to build dlls instead. Can somebody tell me how to get the dlls instea

Re: How to "reset" a BIO

2003-10-16 Thread Vadim Fedukovich
hi Kim, try setting it read-only before reset good luck, Vadim On Thu, Oct 16, 2003 at 11:45:22AM +0200, Hellan.Kim KHE wrote: > Hi > > I have a BIO populated with a PKCS#10 request. At the time I am parsing it, it don't > know if it is DER or PEM encoded, so I use the following code: > > pRe

Re: Problem with openssl 0.9.7c and 0.9.6k Solaris all versions

2003-10-16 Thread Richard.Spindler
Hi folks, I have solved this problem, in previous releases I did get this error, but then it continued to connect. In 0.9.7c and 0.9.6k it stopped dead here, I can stop this behaviour by commenting out two lines of code in ssl/s3_clnt.c, I have to investigate further as to what the effects of thi

How to "reset" a BIO

2003-10-16 Thread Hellan.Kim KHE
Hi I have a BIO populated with a PKCS#10 request. At the time I am parsing it, it don't know if it is DER or PEM encoded, so I use the following code: pReq = d2i_X509_REQ_bio(spBio, NULL); if(!pReq) { BIO_reset(spBio); pReq = PEM_read_bio_X509_REQ(spBio, NULL, NULL, NULL); } This works fine

creating certs for decryption keys

2003-10-16 Thread Nils Larsch
Hi, how can I create a (x509) certificate for a decryption key generated on a smartcard (of course not extractable) using the standard OpenSSL command line tools ? Creating a pkcs10 cert request is (in general) not possible, as the key can't create the signature needed for the self-signed pkcs10 r