Re: Trouble Importing CAcertificate

2003-11-13 Thread Mark Foster
On Thu, Nov 13, 2003 at 03:31:22PM -0500, [EMAIL PROTECTED] wrote: > Is there a way to import this CAcertificate into a keystore that was > generated using keytool, when the original CSR was generated using > OpenSSL? Since no one else has responded (yet) I'll go ahead and take a stab at this. The

Re: SSL_accept error

2003-11-13 Thread Brian Hatch
> One more thing. > > The error string is: > > "error:0002:lib(0):func(0):system lib" Suggest you call ERR_load_error_strings() and/or SSL_load_error_strings() so those become humanly readable... -- Brian Hatch Time flies like an Systems and

Re: SSL_accept error

2003-11-13 Thread Jason Jesso
One more thing. The error string is: "error:0002:lib(0):func(0):system lib" Thanks Jason Jesso wrote: My call to SSL_accept is giving a ERR_LIB_SYS. What could be causing this? I wrote other applications on the same host that use the same code and it works fine. The application that'

SSL_accept error

2003-11-13 Thread Jason Jesso
My call to SSL_accept is giving a ERR_LIB_SYS. What could be causing this? I wrote other applications on the same host that use the same code and it works fine. The application that's giving me this error is written in C++ and the one that works is written in C. __

Trouble Importing CAcertificate

2003-11-13 Thread jr
I am running two web servers on the same Linux machine. 1) is running Apache 1.3.23 (Unix) and 2) Jakarta-Tomcat-4.1.24. I have been able to successfully import and configure a Digital Certificate from Verisign into the Apache web server. When I attempt to import the Digital Certificate into the k

Re: verify the digital signature

2003-11-13 Thread Dr. Stephen Henson
On Thu, Nov 13, 2003, Jia L Wu wrote: > > Thanks, Nils. But which openssl command can I use to generate a public > key file or extract public key from certificate file? > The 'x509' command will extract the public key from a certificate: openssl x509 -in cert.pem -pubkey -noout >key.pem Steve

Re: verify the digital signature

2003-11-13 Thread Jia L Wu
Thanks, Nils. But which openssl command can I use to generate a public key file or extract public key from certificate file? On Thu, 13 Nov 2003, Nils Larsch wrote: > Jia L Wu wrote: > > Hi, > > I used the following command to creat a signature. > > > > "openssl dgst -sign -out " > > > > Howev

openssl s_time: strange behavior

2003-11-13 Thread Pär Ahrén
Hi! We are doing some different performance testing activites and one is "openssl s_time" to se how the reuse sessions gives a performance boost! The strange thing is that it looks slower when using reuse-session!!! This happens when I try to use it together with the "-www" option, very strange!

Slower when reusing SSL sessions

2003-11-13 Thread Pär Ahrén
Hi! We are doing some different performance testing activites and one is "openssl s_time" to se how the reuse sessions gives a performance boost! The strange thing is that it looks slower when using reuse-session!!! This happens when I try to use it together with the "-www" option, very strange!

RE: PEM pass phrase hard coded

2003-11-13 Thread Francis.Vanhemmens
I had such a request to have such server start alone without human intervention. If you want a little more secure solution. You can for example, hardcode a 3DES key in your server, to encrypt/decrypt the PEM pass phrase, and eventually mess the result a little (but in a way you can reconstruct

Re: verify the digital signature

2003-11-13 Thread Nils Larsch
Jia L Wu wrote: Hi, I used the following command to creat a signature. "openssl dgst -sign -out " However why the signature can not be verified using corresponding self-signed certificate. "openssl dgst -signature -verify " What's wrong? Thanks. What's the error message ? Btw: the '-verify' o

Win 2000 Smartcard Logon - need help...

2003-11-13 Thread Tobi Anton
Hi, I'm trying to logon to my Win 2000 server by using smartcard logon. It doesn't work yet and I don't know how to go on. This is what I got: I generated a client certificate with 0.9.8-dev. The openssl.conf looks like this: ... # PKIX recommendations harmless if included in all certificates

RE: SSL_write() must be done twice to work properly

2003-11-13 Thread Francis.Vanhemmens
Did you try to adjust the size of buffers you write/read on both sides ? For example to 4096 bytes. I had such sort of problem in some of my C/S applications. If i remember correctly, for example, i was sending 5k, and reading by 4k, first read was done ok, then select say there are data to read