RE: ssl negotiation failed with Microsoft IIS

Steve, I have tried the s_client and I works with IIS. I forgot to mention that all the SSL/TLS negotiation and record processing is basically my own implementation. Well, the so-called "bug" is an additional two bytes of length inserted between the HanshakeProtocol header and actual KeyExchage

Re: ssl negotiation failed with Microsoft IIS

On Fri, May 14, 2004, Igor G wrote: > Hi, > > I am writing a small ssl/tls client and it does communicate with > OpenSSL/apache without any problem using all possible ciphers. However it > fails to connect to the IIS. The IIS just drops a connection after > ClientKeyExchane+ChangeCipher+Finish

Creating an x509 certificate

Hello I have Redhat 9, it has installed openssl-0.9.7a, but for testing OpenTSA I have to install openssl again with a patch. Then I installed openssl-0.9.7c with the opentsa patch, then for configuring opentsa I have to create a certificate including the TimeStamping extended key usage X.5

ssl negotiation failed with Microsoft IIS

Hi, I am writing a small ssl/tls client and it does communicate with OpenSSL/apache without any problem using all possible ciphers. However it fails to connect to the IIS. The IIS just drops a connection after ClientKeyExchane+ChangeCipher+Finished message without any alerts. The IIS does not p

Re: Certificate Revocation

Aaron Smith wrote: > We have been using OpenSSL to generate certificates for various > applications here with a home grown CA (created using openssl ca). We > recently started upgrading our servers from Redhat 7.3 to RHEL 3.0. The > machine that used to house the CA directories used openssl

Cedric Bondier is out of the office.

I will be out of the office starting 05/14/2004 and will not return until 05/24/2004. I will respond to your message when I return. __ OpenSSL Project http://www.openssl.org User Support Mailing

Certificate Revocation

We have been using OpenSSL to generate certificates for various applications here with a home grown CA (created using openssl ca). We recently started upgrading our servers from Redhat 7.3 to RHEL 3.0. The machine that used to house the CA directories used openssl version 0.9.6b (RedHat R

Re: error when i try to sign a cert

On Fri, May 14, 2004, Oliver Bogosavljevic wrote: > hello mailinglist! > > i am trying to create a selfsignd cert but when i try this error occures > > 18292:error:0E06D06C:configuration file routines:NCONF_get_string:no > value:conf_lib.c:329:group=CA_default name=unique_subject > > but the ce

Re: SMIME and user certs.

On Fri, May 14, 2004, David Gianndrea wrote: > Dr. Stephen Henson wrote: > > >If you create an email sign it and save as a draft then find the draft and > >save it as a .eml file you can try: > > > >openssl smime -pk7out -in message.eml -out mess.pem > > > >openssl asn1parse -in mess.pem > > > >y

Re: SMIME and user certs.

Dr. Stephen Henson wrote: If you create an email sign it and save as a draft then find the draft and save it as a .eml file you can try: openssl smime -pk7out -in message.eml -out mess.pem openssl asn1parse -in mess.pem you'll see things like des, rc2 and so on in there. Thanks Dr. Steve, I almost

error when i try to sign a cert

hello mailinglist! i am trying to create a selfsignd cert but when i try this error occures 18292:error:0E06D06C:configuration file routines:NCONF_get_string:no value:conf_lib.c:329:group=CA_default name=unique_subject but the cert seems to be ok any ideas thx olli ___