RE: which device openssl 0.9.7c prefers /dev/random or /dev/urandom

2003-12-04 Thread David Schwartz
> Ok thanks for the quick response, but still i have again the same doubt in > the order of preferencing the definition for DEVRANDOM. > > I just came to know they two behave differently as ive listed below. So > since /dev/random produce high quality random numbers, then > should it appear > fir

PPC SSL Problem - Please help

2003-12-04 Thread Mahabhashyam Anupama
I am trying to set up openSSL 0.9.7c on Pocket PC 2002 (WCE 3.0). After completing confgiure, namake, etc There were some error messages during testing (..\ms\testce at test enc stage). First error: "cemkdir: failed to create directory 183" Second error is: at test enc stage it stops and exit

Re: "Signature did not match the certificate request" on Solaris 2.8 SPARC

2003-12-04 Thread Daniel Needles
Dr. Henson, Thanks for your earlier help. Although the command you specified did generate a key, Explorer failed from my NT station to open the secure page. It would give the standard Page Cannot Be Displayed Message. Even more wierd if I specified: https://192.168.0.2:443 it would correctly comp

Remove

2003-12-04 Thread Ian Manseau
Remove

Re: which device openssl 0.9.7c prefers /dev/random or /dev/urandom

2003-12-04 Thread usha
Ok thanks for the quick response, but still i have again the same doubt in the order of preferencing the definition for DEVRANDOM. I just came to know they two behave differently as ive listed below. So since /dev/random produce high quality random numbers, then should it appear first in the list

Re: Error loading files using X509_STORE_load_locations

2003-12-04 Thread Ashutosh Jaiswal
Hi Amar, Inserting absolute path name for the CA cert did the trick. thanks! Ashu Amar Desai wrote: > > Hi > >> Hi, >> I'm trying to load the CA certificate and create a store using the >> X509_STORE_load_locations() function, but the function seems to fail. I >> am using absolute path of the CA

Re: Usage of AES question

2003-12-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 05 Dec 2003 12:06:16 +1300, Jason Haar <[EMAIL PROTECTED]> said: Jason.Haar> On Fri, 2003-12-05 at 03:25, Vadim Fedukovich wrote: Jason.Haar> > > As far as I know AES is a symmetrical Algorithm which does not use Jason.Haar> > > Public Keys. So the password

Re: Error loading files using X509_STORE_load_locations

2003-12-04 Thread Amar Desai
Hi Hi, I'm trying to load the CA certificate and create a store using the X509_STORE_load_locations() function, but the function seems to fail. I am using absolute path of the CA directory as an argument, which is different from the /etc/ssl/certs location. Is it necessary to put the CA certs in t

Re: Usage of AES question

2003-12-04 Thread Jason Haar
On Fri, 2003-12-05 at 03:25, Vadim Fedukovich wrote: > > As far as I know AES is a symmetrical Algorithm which does not use > > Public Keys. So the password you give (or more probably a hash of the > > password) will be the key for en- and decrypting the data. > > Doing so would result in a one

Error loading files using X509_STORE_load_locations

2003-12-04 Thread Ashutosh Jaiswal
Hi, I'm trying to load the CA certificate and create a store using the X509_STORE_load_locations() function, but the function seems to fail. I am using absolute path of the CA directory as an argument, which is different from the /etc/ssl/certs location. Is it necessary to put the CA certs in the /

Re: Configure VC-WIN32 shared -- not supported.

2003-12-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 4 Dec 2003 16:37:19 -0500 , "jain, anuj" <[EMAIL PROTECTED]> said: Jain_Anuj> I have been using version 0.9.6g of openssl and for win2k I Jain_Anuj> used "Configure VC-WIN32 shared" to configure. I recently Jain_Anuj> upgraded to 0.9.7c and the "Configure VC

Configure VC-WIN32 shared -- not supported.

2003-12-04 Thread jain, anuj
Hi, I have been using version 0.9.6g of openssl and for win2k I used "Configure VC-WIN32 shared" to configure. I recently upgraded to 0.9.7c and the "Configure VC-WIN32 shared" gives the following message : >8-- You gave the option 'shared'. Normally, that would g

Re: Zero length certificates

2003-12-04 Thread Dr. Stephen Henson
On Thu, Dec 04, 2003, Charles B Cranston wrote: > Peter Sylvester comments that a -set_serial option got added > to x509 -- my systems people somehow think it optional to > install man pages, but I did find it using the --help option > of the program itself. It is documented in the man page at >

[no subject]

2003-12-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 04 Dec 2003 20:23:07 +, "banti modi" <[EMAIL PROTECTED]> said: bantimodi> I am new to openSSL i am trying to generate a random DES bantimodi> key i get segmentation fault. I m using following code bantimodi> bantimodi> bantimodi> int main() bantimodi>

RE:

2003-12-04 Thread Pierre Gauthier
I'm not an openssl pro but I'm pretty sure you should do this: //This means that PRNG is seeded DBS_cblock pKey; DES_random_key(&pKey); Pierre -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of banti modi Sent: 4 décembre, 2003 15:23 To: [EMAIL PROTECTED]

[no subject]

2003-12-04 Thread banti modi
Sir, I am new to openSSL i am trying to generate a random DES key i get segmentation fault. I m using following code int main() { int iStatus = RAND_status(); if(iStatus != 1) { return 0; } //This means that PRNG is seeded DBS_cblock* pKey; DES_random_key(pKey); } here RAND_status() function r

Re: Zero length certificates

2003-12-04 Thread Charles B Cranston
Peter Sylvester comments that a -set_serial option got added to x509 -- my systems people somehow think it optional to install man pages, but I did find it using the --help option of the program itself. It is documented in the man page at the openssl web site. My memory is now that I had to use a

OpenSSL with Apache/PHP

2003-12-04 Thread David Mattes
Hi, I'm using Apache2 with PHP4 and OpenSSL-0.9.7a on Linux. I'm trying to sign client certificate requests with PHP script on the server. I have a couple questions. 1) On Linux, how do I tell PHP where the openssl.cnf file is, or where is the default location on Linux? I've tried setting en

Re: Zero length certificates

2003-12-04 Thread Charles B Cranston
Dr. Stephen Henson wrote: > You should where possible use the command line switches > rather than "expect" because the prompts of the various > commands may change. > You can generate requests via template configuration > files and there are various ways to supply passphrases. While I agree 100% w

RE: remove

2003-12-04 Thread Alberto Rubio
remove end __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: Blowfish/Base64 troubles...

2003-12-04 Thread Mike Maloy
Richard Levitte - VMS Whacker wrote: amann> input should come out of blowfish as 16 bytes base64 comes in groups of 4 characters for each group of 3 or less input bytes. Well, at the moment, I think my boss found the problem. My code predicted the number of bytes to be returned from the encry

Re: Zero length certificates

2003-12-04 Thread Dr. Stephen Henson
On Thu, Dec 04, 2003, Brandon wrote: > Charles , > > Here is the complete file, there are two additional calls to openssl after > the req is generated. > You should where possible use the command line switches rather than "expect" because the prompts of the various commands may change. You can

Re: Zero length certificates

2003-12-04 Thread Charles B Cranston
Best I can tell from looking at the code, the failure is somewhere in this block (which I have edited a bit for readability): # Convert the signed cert to a pkcs12 certificate # so Netscape and IE can import. (and clean up some files) `rm -f "./temp/$input{'email'}.pem"`; `cat ./temp/$in

RE: Zero length certificates

2003-12-04 Thread Brandon
Charles , Here is the complete file, there are two additional calls to openssl after the req is generated. Brandon #!/usr/bin/perl # This script takes html form data and generates a pem encoded certificate request. MAIN: { require "cgi-lib.pl"; use Expect; #read in all the variables set by th

Re: Usage of AES question

2003-12-04 Thread Amar Desai
I hope this will help you. http://www.openssl.org/docs/crypto/EVP_BytesToKey.html You can use passphrase along with some random data to derive a key and then use that key to encryptand to decrypt data. Regards Amar > Hi, > > i need to encrypt a file using AES, and I want to use some sort of p

Re: Usage of AES question

2003-12-04 Thread Rich Salz
i need to encrypt a file using AES, and I want to use some sort of private key which encrypts and decrypts, with a passphrase. You mean like PKCS#12? /r$ -- Rich Salz, Chief Security Architect DataPower Technology http://www.datapower.com XS40 XML Security Gateway

Re: Usage of AES question

2003-12-04 Thread Bernhard Froehlich
Vadim Fedukovich wrote: On Thu, Dec 04, 2003 at 02:28:16PM +0100, Bernhard Froehlich wrote: Bart Matthaei wrote: Hi, i need to encrypt a file using AES, and I want to use some sort of private key which encrypts and decrypts, with a passphrase. I found documentation on how to generate RSA

Outlook express and digital ID

2003-12-04 Thread Michal Lukas
Dear OpenSSL users, does anyone use MS Outlook Express 5 or 6.00 with digital ID?? I have still troubles with correct configuration of this mail client to sending messages with digital ID. I have to say that I am working on document 'how-to use digital id with outlook express' for users at my