Re: Encoding DSA structures

2004-01-15 Thread Dr. Stephen Henson
On Thu, Jan 15, 2004, Matt Margush wrote: > Hi, > > I searched the mailing list archives but couldn't find this question. > When I run the following code, I get an "EXC_BAD_ACCESS" signal at line > 29. If I reverse the order (encode the private key first, then the > public key), then the er

RE: Encoding DSA structures

2004-01-15 Thread Bommareddy, Satish (Satish)
Try using: p = buffer = OPENSSL_malloc(length); instead satish -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Margush Sent: Thursday, January 15, 2004 1:36 PM To: [EMAIL PROTECTED] Subject: Encoding DSA structures Hi, I searched the mailing list a

Encoding DSA structures

2004-01-15 Thread Matt Margush
Hi, I searched the mailing list archives but couldn't find this question. When I run the following code, I get an "EXC_BAD_ACCESS" signal at line 29. If I reverse the order (encode the private key first, then the public key), then the error happens on the call to encode the public key. So

Re: SSL_accept(), IE and simultaneous connections

2004-01-15 Thread Scott Lamb
On Jan 15, 2004, at 12:14 PM, Michael Lee wrote: I got WSAECONNABORTED (10053) on Windows. It only happens when I connect to my server with IE 6 (default settings) but not Mozilla 1.5 (default settings). Any help is appreciated as it is a show-stopper for my server! Thanks! ECONNABORTED is appare

Re: SSL_accept(), IE and simultaneous connections

2004-01-15 Thread Michael Lee
I got WSAECONNABORTED (10053) on Windows. It only happens when I connect to my server with IE 6 (default settings) but not Mozilla 1.5 (default settings). Any help is appreciated as it is a show-stopper for my server! Thanks! Michael - Original Message - From: "Scott Lamb" <[EMAIL PROTE

hpux 11 64 bit install problem

2004-01-15 Thread Rob Janes
I've solved the problem, but it would be nice if somebody could update the Configure script so it doesn't happen again. The persistent problem imho is that the shared library linking is persistently wrong. I've seen it on all of 0.9.6 and now on 0.9.7. I am currently trying 0.9.7c. problem numb

Re: utf8string and ia5string

2004-01-15 Thread Karsten Künne
On Thursday 15 January 2004 12:15, Jochen Keutel wrote: > Hello, > RFC3280 requires ALL DIRECTORY STRINGS to be encoded as > UTF8 - this doesn't mean "all subject and issuer fields" but > only those with syntax DirectoryString. > > domaincomponent is defined as attribute with syntax IA5String - >

Re: utf8string and ia5string

2004-01-15 Thread Karsten Künne
On Thursday 15 January 2004 12:15, Jochen Keutel wrote: > Hello, > RFC3280 requires ALL DIRECTORY STRINGS to be encoded as > UTF8 - this doesn't mean "all subject and issuer fields" but > only those with syntax DirectoryString. > > domaincomponent is defined as attribute with syntax IA5String - >

RE: utf8string and ia5string

2004-01-15 Thread Jochen Keutel
Hello, RFC3280 requires ALL DIRECTORY STRINGS to be encoded as UTF8 - this doesn't mean "all subject and issuer fields" but only those with syntax DirectoryString. domaincomponent is defined as attribute with syntax IA5String - so openssl is correct. Regards, Jochen. > Hi, > > since the be

utf8string and ia5string

2004-01-15 Thread Karsten Künne
Hi, since the beginning of this year RFC 3280 requires all subject and issuer fields in PKIX-compliant certificates to be encoded as utf8string. Now I tried to setup a compliant CA with openssl but it still encodes the domainComponent parts of the subject and issuer as ia5string even if I have

Re: Using OpenSSL and smartcards with pkcs#11

2004-01-15 Thread Kevin Stefanik
Did you check out the documentation provided by opensc? http://www.opensc.org/docs.php You may want to use the opensc lists as well, since openssl plays a supporting (though large) role in the process. Kevin On Thursday 15 January 2004 04:34 am, Amira Solomovici wrote: > Hi, > > Thanks for the

Re: Using OpenSSL and smartcards with pkcs#11

2004-01-15 Thread Igal Ore
Amira Solomovici wrote: Hi all, I have been having difficulty in finding a tutorial explaining how to use the openssl application with smartcards, and I hope that someone could help me with the following: What I am basically trying to do is use a smartcard for logging into my Linux machine. I h

Re: Embedded OpenSSL

2004-01-15 Thread Alexis Lefort
Thanks a lot! It seems to be what I was looking for. :) Mathias Brossard a écrit: On Tue, 2004-01-13 at 14:44, Alexis Lefort wrote: Because of the very limited storage capacity of the flash memory, I'd like to reduce the size of libraries. In order to do that, I tried:

RE: Using OpenSSL and smartcards with pkcs#11

2004-01-15 Thread Amira Solomovici
Hi, Thanks for the tips - I have Red Hat 9.0, and I can always upgrade my openssl. Could anyone help me with my original questions - how to make openssl + opensc + pkcs#11 + smartcard working? Thanks, Amira. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thu

RE: Using OpenSSL and smartcards with pkcs#11

2004-01-15 Thread John . Airey
> -Original Message- > From: The Doctor [mailto:[EMAIL PROTECTED] > Sent: 15 January 2004 05:18 > To: [EMAIL PROTECTED] > Subject: Re: Using OpenSSL and smartcards with pkcs#11 > > > On Thu, Jan 15, 2004 at 07:03:22AM +0200, Amira Solomovici wrote: > > Hi all, > > > > I have been having

Re: Embedded OpenSSL

2004-01-15 Thread Mathias Brossard
On Tue, 2004-01-13 at 14:44, Alexis Lefort wrote: > Because of the very limited storage capacity of the flash memory, I'd > like to reduce the size of libraries. In order to do that, I tried: [...] > (I only need RSA, DES, 3DES, AES, SHA and MD5) [...] > libcrypto.a was only 300ko less big than if

Problem with compling openssl 0.9.7.c with the crytlib.o

2004-01-15 Thread Daniel . Tieber
Hi guys =) I`m a newbee in this mailinglist but i try to do my best. I have a little problem with complinig openssl 0.9.7.c I use Win 2k and i tried to compile it with cygwin... First I made "./configure" and than make... Yesterday I searched the whole day how to solve this problem, but I was not a