RE: Question about #defines

2004-01-13 Thread Douglas Smith
Richard, Thanks for the response. I'm aware of the potential configuration issues. If I were to do as you suggest and simply use libcrypto (the thought had occurred to me already), then how can I integrate the building of libcrypto into my company's build process (it's actually quite complex)

RE: OpenSSL file destinations

2004-01-13 Thread John . Airey
> -Original Message- > From: John S. Wolter [mailto:[EMAIL PROTECTED] > Sent: 13 January 2004 14:19 > To: [EMAIL PROTECTED] > Subject: OpenSSL file destinations > > > I've downloaded the latest OpenSSL and I'm going to target an already > installed SUSE 8.1 for testing and then build a 9

RE: OpenSSL file destinations

2004-01-13 Thread Boyle Owen
> -Original Message- > From: John S. Wolter [mailto:[EMAIL PROTECTED] > > I am wondering if there is a document that describes where > the files of > OpenSSL should normally be placed? Look in the INSTALL file. The default location for Unix is /usr/local/openssl, but you can put it any

Re: OpenSSL file destinations

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 13 Jan 2004 09:19:26 -0500, "John S. Wolter" <[EMAIL PROTECTED]> said: johnswolter> I've downloaded the latest OpenSSL and I'm going to johnswolter> target an already installed SUSE 8.1 for testing and then johnswolter> build a 9.0 system. I've noticed that

RE: how to prevent smime from dropping body parts that look like a mail header

2004-01-13 Thread Ralf Hauser
Steve, Thx for the hint - I kind of solved it as below, but still don't know what the real reason for the problem is. Rgds r. > -Original Message- > From: Dr. Stephen Henson [mailto:[EMAIL PROTECTED] > Sent: Dienstag, 13. Januar 2004 13:15 ... > > Using smime to encrypt a body.txt file, alw

Re: Win32 OpenSSL Updates/Announcements...

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 13 Jan 2004 08:00:57 -0500, "John S. Wolter" <[EMAIL PROTECTED]> said: johnswolter> Thank you for the Win32 information, I just joined the johnswolter> list and had assumed Win32 announcements would be johnswolter> included but I guess I'll have to join the

OpenSSL file destinations

2004-01-13 Thread John S. Wolter
I've downloaded the latest OpenSSL and I'm going to target an already installed SUSE 8.1 for testing and then build a 9.0 system. I've noticed that the tarballs are not targeted to distributions. SUSE 's distribution does include an rpm file but the only way to know where to place files is to

Re: un-tar'ing not working for me

2004-01-13 Thread John S. Wolter
Thank you all for your prompt replies. Boyle Owen wrote: Plain text please... Obvious error? It's not a tar file. It's a gzipped tar file. The simplest way to unpack is to: gzip -dc openssl-0.9.7c.tar.gz | tar xvf - Alternatively; gunzip openssl-0.9.7c.tar.gz tar xvf openssl-0.9.7c.tar Rgds, Owe

RE: un-tar'ing not working for me

2004-01-13 Thread Lyngmo Ted
John S. Wolter wrote: > > I downloaded > 2791797 Sep 30 14:50:15 2003 openssl-0.9.7c.tar.gz [LATEST] ... > but when I use tar to list the files [...] > I get an error message [...] > I'm running SUSE 8.1 on this particular machine. To list the contents: tar ztvf openssl-0.9.7c.tar.gz To extr

Re: un-tar'ing not working for me

2004-01-13 Thread Bernhard Froehlich
John S. Wolter schrieb: I downloaded 2791797 Sep 30 14:50:15 2003 openssl-0.9.7c.tar.gz *[LATEST] ... *but when I use tar to list the files by entering tar --list --file=openssl-0.9.7c.tar.gz.tar I get an error message that states..

RE: un-tar'ing not working for me

2004-01-13 Thread Boyle Owen
Plain text please... Obvious error? It's not a tar file. It's a gzipped tar file. The simplest way to unpack is to: gzip -dc openssl-0.9.7c.tar.gz | tar xvf - Alternatively; gunzip openssl-0.9.7c.tar.gz tar xvf openssl-0.9.7c.tar Rgds, Owen Boyle Disclaimer: Any disclaimer attached to this mes

RE: un-tar'ing not working for me

2004-01-13 Thread John . Airey
-Original Message- From: John S. Wolter [mailto:[EMAIL PROTECTED] Sent: 13 January 2004 13:40 To: [EMAIL PROTECTED] Subject: un-tar'ing not working for me [snip] >What obvious error I'm I making using tar? It's a gzipped tar file. I would use this to extract the contents: tar -zxvf open

Re: un-tar'ing not working for me

2004-01-13 Thread L Nehring
The file is gzipped. You'll need to either ungzip it before using tar or use a command like `tar zxvf openssl-0.9.7c.tar.gz.tar` if your tar understands compression. Tar is a old command so options can be specified many different ways. I generally leave out the '-' since it doesn't care. 'z

Embedded OpenSSL

2004-01-13 Thread Alexis Lefort
Hi all, I am a newbie in OpenSSL and my job is to build a secured server embedded on an ARM processor. The OS I am using is RTEMS and OpenSSL is 0.9.7c. I have two questions. Because of the very limited storage capacity of the flash memory, I'd like to reduce the size of libraries. In order to

un-tar'ing not working for me

2004-01-13 Thread John S. Wolter
I downloaded 2791797 Sep 30 14:50:15 2003 openssl-0.9.7c.tar.gz  [LATEST] ... but when I use tar to list the files by entering tar --list --file=openssl-0.9.7c.tar.gz.tar I get an error message that states. tar: This does not look like tar archive tar: Skipping to the next header

Keep CRLs up-to-date

2004-01-13 Thread Arne Jørgensen
I'm using openssl as a command line tool to verify messages from within another program (the Gnus newsreader). I verify messages against CRL which I have downloaded from the issuer. The "problem" is that new CRLs are issued every 8-12 hours (the nextupdate-fied, normally they are updated more ofte

Re: Win32 OpenSSL Updates/Announcements...

2004-01-13 Thread John S. Wolter
Thomas: Thank you for the Win32 information, I just joined the list and had assumed Win32 announcements would be included but I guess I'll have to join the Win32 list. Second please add square brackets around [Win32 OpenSSL] to help visually I.D. the announce list messages. I get a couple of

Certificate of CA

2004-01-13 Thread Leonardo Javier Uzcategui Montes
I have two quesion: anyone knows which field, in the openssl.cnf file "put on" the link for the Issuer of Emitter (Declaration of the Emitter) this field is used for give more information about the CA. and a second questions is in the same file (openssl.cnf) which fiel or what statement is neces

OPENSSL_malloc from Delphi

2004-01-13 Thread tace tan
Hi, with reference to the previously posted question on OPENSSL_malloc(), I tried to use this function in Delphi but encounter error "Access violation in ntdll.dll ... " Using the CRYPTO_set_locking_callback example given in OpenSSL, I converted it to Delphi. Code: var lock_CS : arra

Re: how to run ocsp server with a correct architecture ?

2004-01-13 Thread Dr. Stephen Henson
On Tue, Jan 13, 2004, Aumont - Comite Reseaux des Universites wrote: > Hi > > The current version of "openssl ocsp" is based on stuff/index.txt so I > am affraid that the OCSP server must run on the same server as the > certificat authority, but in our case the CA server is running offline > (

Re: Certificate lookup/verification

2004-01-13 Thread Dr. Stephen Henson
On Tue, Jan 13, 2004, jiang lei wrote: > Hi all, > > My question is mainly about X509 stores and certificate lookups. > > I was developing an HTTP client on Windows2000 using OpenSSL. > To use windows certificate stores in my program, I used the Windows Crypto > API to enumerate through all root

how to prevent smime from dropping body parts that look like a mail header

2004-01-13 Thread Ralf Hauser
Hi, Using smime to encrypt a body.txt file, always the first part of that body disappeared since it looked like a mail header. If I change it to some other, arbitrary text, the entire mail body content arrives. What can I do to have my entire body text arrive even if it starts with <>? Looking a

Re: how to run ocsp server with a correct architecture ?

2004-01-13 Thread Vadim Fedukovich
On Tue, Jan 13, 2004 at 08:43:21AM +0100, Aumont - Comite Reseaux des Universites wrote: > Hi > > The current version of "openssl ocsp" is based on stuff/index.txt so I > am affraid that the OCSP server must run on the same server as the > certificat authority, but in our case the CA server is

Re: Question about #defines

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Jan 2004 10:45:49 -0700, "Doug Smith" <[EMAIL PROTECTED]> said: doug> Is there any documentation on what some of the #defines in the source do? doug> For example, what are these for: doug> doug> doug> doug> OPENSSL_NO_SHA doug> doug>

how to run ocsp server with a correct architecture ?

2004-01-13 Thread Aumont - Comite Reseaux des Universites
Hi The current version of "openssl ocsp" is based on stuff/index.txt so I am affraid that the OCSP server must run on the same server as the certificat authority, but in our case the CA server is running offline (nearly offline) for security reason. Another solution is to export the index.txt o