Der-coded .crt certificates

2004-03-29 Thread Johann Normann
Hi. Does anyone know the commands to export the root certificate to a DER-encoded binary file with the .crt ending? I run openssl on a Windows 2000 server. Johann Normann __ OpenSSL Project http

Re: installation problems

2004-03-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 29 Mar 2004 08:05:34 -0800, Brian Lauer <[EMAIL PROTECTED]> said: brian8192> During configuration you need to specify whether you want brian8192> shared libraries or archive files (./configure --shared). Correction: ./config shared brian8192> You can conve

[Announce] M2Crypto 0.13

2004-03-29 Thread Ng Pheng Siong
Hi, M2Crypto 0.13 is now available. M2Crypto is a Python interface to OpenSSL featuring the following: * RSA, DSA, DH, HMACs, message digests, symmetric ciphers (including AES). * SSL functionality to implement clients and servers. * HTTPS extensions to Python's httplib, urllib, and xmlrpc

Re: installation problems

2004-03-29 Thread Brian Lauer
During configuration you need to specify whether you want shared libraries or archive files (./configure --shared). You can convert an archive file to a shared object by doing this: gcc -o libssl.so --shared libssl.a gcc -o libcrypto.so --shared libcrypto.a Try that first, and if that fails for

installation problems

2004-03-29 Thread Colleen Nagle
Greetings, I have just installed openssl for linux-elf, and followed the install file instructions. I am utilizing a shopping cart that needs the libcrypto.so and libssl.so files. The only files I have in the lib directory are libcrypto.a, libssl.a and ssleay.conf. How do I generate the .so fil

Re: Can't open CER certificate

2004-03-29 Thread Dr. Stephen Henson
On Mon, Mar 29, 2004, Carlos Roberto Zainos H wrote: > Hi Dr Stephen : > > Thanks for your answer > > As you told me I ran the openssl x509 command in win32 command line, and the result > was the next: > > With a CA certificate: > C:\openssl\bin>openssl x509 -in c:\crzh\progs\ac.cer -noout

Re: OpenSSL 0.9.7d test failures on HP-UX 11.00 (hpux-parisc2-cc)

2004-03-29 Thread Marko Asplund
apparently my knowledge of HP compilers was a bit lacking. the hpux-parisc2-cc target seems to have been written with HP C/ANSI C, not HP aC++ compiler in mind. with the latest version (B.11.11.08) of HP C/ANSI C compiler OpenSSL 0.9.7d compiles without problems on HP-UX 11.00 using the hpux-pa

Can't open CER certificate

2004-03-29 Thread Carlos Roberto Zainos H
Hi Dr Stephen :   Thanks for your answer   As you told me I ran the openssl x509 command in win32 command line, and the result was the next:   With a CA certificate: C:\openssl\bin>openssl x509 -in c:\crzh\progs\ac.cer -noout -textunable to load certificate660:error:0906D06C:PEM routines:PEM_read_b

Re: openssl errors

2004-03-29 Thread Dr. Stephen Henson
On Mon, Mar 29, 2004, Neil Lowden wrote: > Steve > > Thanks for confirming my suspicions. > > I think it's likely I am missing variables rather than having set them > incorrectly. It doesn't seem appropriate to post my config here as that just > means someone else taking the effort to see what's

RE: openssl errors

2004-03-29 Thread Neil Lowden
Steve Thanks for confirming my suspicions. I think it's likely I am missing variables rather than having set them incorrectly. It doesn't seem appropriate to post my config here as that just means someone else taking the effort to see what's missing when I should be doing it. I have checked my fi

Re: openssl errors

2004-03-29 Thread Dr. Stephen Henson
On Mon, Mar 29, 2004, Neil Lowden wrote: > I am experimenting with the openssl extension in PHP with generally a great > deal of success. > > However, certain functions, which otherwise suceed, leave errors on the > openssl error stack. As you may know, PHP wraps most of the raw openssl > functio

openssl errors

2004-03-29 Thread Neil Lowden
I am experimenting with the openssl extension in PHP with generally a great deal of success. However, certain functions, which otherwise suceed, leave errors on the openssl error stack. As you may know, PHP wraps most of the raw openssl functions so I am not sure exactly which raw functions are pl

Mac IE 'Security failure. Data decryption error.'

2004-03-29 Thread Randall Perry
Getting the error 'Security Failure. Data decryption error.' in Mac Internet Explorer 5.2.3 when connecting to my apache https. All other browsers I've tested on Mac and PC (including IE) connect properly. Using apache 1.3.29 with mod_ssl-2.8.16-1.3.29, mm-1.3.0, openssl-0.9.7c on Mac OS X Server

Re: order of extensions

2004-03-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 29 Mar 2004 16:55:27 +0200 (MEST), "Claus Nagel" <[EMAIL PROTECTED]> said: claus-nagel> hi, is there a certain order, in which for example claus-nagel> extensions have to appear in the asn-code of a claus-nagel> acertificate? do basicConstraints for example

Re: order of extensions

2004-03-29 Thread Dr. Stephen Henson
On Mon, Mar 29, 2004, Claus Nagel wrote: > hi, is there a certain order, in which for example extensions have to appear > in the asn-code of a acertificate? do basicConstraints for example have to > appear before the keyUsage? No the order is arbitrary and applications should not make any assumpt

order of extensions

2004-03-29 Thread Claus Nagel
hi, is there a certain order, in which for example extensions have to appear in the asn-code of a acertificate? do basicConstraints for example have to appear before the keyUsage? and the same question for the subject and issuer information. do the country information have to appear for example bef

Re: IE's problem while visiting HTTPS

2004-03-29 Thread Dr. Stephen Henson
On Mon, Mar 29, 2004, linux guy wrote: > IE can not visit our HTTPS webserver while I create a self-signed certificate with a > RSA key > which size is less than 365 bits,but they works well when the RSA size is more than > or eaqual to > 365. I'm surprised it can handled 365 bits. For SSL