Anyone successfully unsubscribed from this list?

2003-11-21 Thread Mike Klein
I sent numerous messages to the list moderator and get replies back (saying "be patient...my owner may be asleep", etc.)...but sheesh it's been like months already. __ OpenSSL Project http://www

Re: subjectAltName=email:move

2003-11-21 Thread Joseph Bruni
Do I ever feel like an idiot. I was building a minimalist configuration file for you and, lo, it started working -- on all versions of 0.9.7 that I have been experimenting with (a,b,c). After a little more experimentation to figure out why this suddenly started working, I uncovered my mistake:

Re: subjectAltName=email:move

2003-11-21 Thread Dr. Stephen Henson
On Sat, Nov 22, 2003, Dr. Stephen Henson wrote: > On Sat, Nov 22, 2003, Dr. Stephen Henson wrote: > > > On Fri, Nov 21, 2003, Joseph Bruni wrote: > > > > > I've been poking around in the v3_alt.c file to try to determine why the email > > > address is not getting copied or moved into the extens

Re: subjectAltName=email:move

2003-11-21 Thread Dr. Stephen Henson
On Sat, Nov 22, 2003, Dr. Stephen Henson wrote: > On Fri, Nov 21, 2003, Joseph Bruni wrote: > > > I've been poking around in the v3_alt.c file to try to determine why the email > > address is not getting copied or moved into the extension. After sprinkling in a > > few debug statements, it look

Re: subjectAltName=email:move

2003-11-21 Thread Dr. Stephen Henson
On Fri, Nov 21, 2003, Joseph Bruni wrote: > I've been poking around in the v3_alt.c file to try to determine why the email > address is not getting copied or moved into the extension. After sprinkling in a few > debug statements, it looks like the copy_email() function is broken and never enters

subjectAltName=email:move

2003-11-21 Thread Joseph Bruni
I've been poking around in the v3_alt.c file to try to determine why the email address is not getting copied or moved into the extension. After sprinkling in a few debug statements, it looks like the copy_email() function is broken and never enters the "while" loop. Even though the DN has an 'em

Re: RE : RAND_status always returns 1

2003-11-21 Thread Marc Gaudichet
Ok guys, thank you for your very precious help. Take care. Marc Gaudichet > -Message d'origine- > De : Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED] > Envoyé : vendredi 21 novembre 2003 12:33 > À : Marc Gaudichet > Cc : [EMAIL PROTECTED] > Objet : Re: RE : RAND_status always

Re: subjectAltName=email:move

2003-11-21 Thread Joseph Bruni
I had tried that as well with no success, which is what is leading me to believe this is a bug. In the CSR, I have the emailAddress field set in the DN. In the CA section of the configuration file, I have subjectAltName=email:move in the section referenced from the x509_extensions option: x509

Re: RE : RAND_status always returns 1

2003-11-21 Thread Brian Hatch
> Yes, of course, there are special conditions that allow sloppy > randomness. If you look at some of the OpenSSL test programs, you > will see that we seed with static strings. I was speaking from a more > general point of view, and perhaps I should not have said something as > harsch as "Never

Handshake failures

2003-11-21 Thread Sriram R
Hi all,I get a fatal handshake_failure from server when I try to connect it from my client. I have attached the verbose debug output from client to server. In summary, client_hello and server_hello done messages for sslv3 are received properly. After that when client sends the change_cipher_spec w

Re: openssl s_time: strange behavior

2003-11-21 Thread Lutz Jaenicke
On Fri, Nov 21, 2003 at 01:40:32PM +0100, Pär Ahrén wrote: > Lutz Jaenicke wrote: > > > > > (Values changing for higher "time" values but the tendency is clear: > > session reuse _is_ a performance booster... > > The strange thing is that if I don't do "-www /" it works fine > This is agains a

Re: openssl s_time: strange behavior

2003-11-21 Thread Pär Ahrén
Lutz Jaenicke wrote: > (Values changing for higher "time" values but the tendency is clear: > session reuse _is_ a performance booster... The strange thing is that if I don't do "-www /" it works fine This is agains a domino-server for reference = Looks ok: No "-www" ==

Re: match a certificate to a private key

2003-11-21 Thread Dr. Stephen Henson
On Thu, Nov 20, 2003, Joseph Bruni wrote: > Given an RSA private key, you can regenerate its matching public key > with this: > > % openssl rsa -in privatekey.pem -pubout >key1.pem > > The public key in a certificate can be extracted with this: > > % openssl x509 -in certificate.pem -pubout -n

Re: RE : RAND_status always returns 1

2003-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 21 Nov 2003 11:05:40 +0100, "Marc Gaudichet" <[EMAIL PROTECTED]> said: mgaudichet> >>Hmm, I doubt very much that running RAND_poll() multiple mgaudichet> >>times on top of itself gives that much more entropy. mgaudichet> mgaudichet> Concerning this, RAND_po

Re: RE : RAND_status always returns 1

2003-11-21 Thread Marc Gaudichet
>>Hmm, I doubt very much that running RAND_poll() multiple times on top of itself gives that much more entropy. Concerning this, RAND_poll() behaves as follows on Windows systems: - call to NetStatisticsGet for LanManWorkstation and LanManServer services; - call to CryptGenRandom t

Re: RE : RAND_status always returns 1

2003-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 20 Nov 2003 22:11:57 -0800, Brian Hatch <[EMAIL PROTECTED]> said: bri> bri> >mgaudichet> Do you have a better solution than above (e.g. hardcode bri> >mgaudichet> some kind of random data and use it with RAND_seed()...), bri> >mgaudichet> or does it seem ok

Re: subjectAltName=email:move

2003-11-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 20 Nov 2003 19:56:23 -0700, Joseph Bruni <[EMAIL PROTECTED]> said: jbruni> I've been trying to get the "subjectAltName=email:move" directive to jbruni> work in the "ca" command with no luck, so I think this might be a bug. jbruni> jbruni> It seems that the