server fingerprint and SSL certs

2004-07-09 Thread Grant
I generated a CSR and private key on my old (current) server, and I'm having trouble getting the certificate and key to not error on my new server. Do the CSR and private key need to be generated from the server they will be installed on? - Grant ___

Re: OpenSSL Funding Proposal

2004-07-09 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 9 Jul 2004 11:56:23 -0500 (EST), "Mark H. Wood" <[EMAIL PROTECTED]> said: mwood> It seems to me that the reason we will not reach cross- mwood> certification nirvana is that it means the market incumbents mwood> would become enablers for new competitors. Ho

Re: Use of Engine

2004-07-09 Thread Joe smith
Hi, Thanks again. This might sound like a very basic question but if I am right...the way to disable engine is to specify a -noengine flag while configuration rit? Also, does that automatically define the OPENSSL_NO_ENGINE flag?   Thanks for all the help.   JoeGeoff Thorpe <[EMAIL PROTECTED]> wrote

Netscape browsers failing with DHE-RSA-AES128-SHA cipher

2004-07-09 Thread Olkovikas, James
Hello all, Netscape browsers fail on our site if the DHE-RSA-AES128-SHA cipher is enabled on the browser. I have tried to use the "openssl ciphers" command on the web server to push this cipher to the end of the list, without any luck. Am I attacking the problem correctly, or am I way off base?

Re: Openssl target architecture support

2004-07-09 Thread J Harper
Hi Areg, This doesn't answer your direct question, but you may want to check out MatrixSSL; it is designed specifically for embedded SSL and VxWorks. http://www.matrixssl.org We actually wrote MatrixSSL as a complement to OpenSSL for embedded platforms, so hopefully you'll find it useful. J

extract an IV and Key session from a DER file.

2004-07-09 Thread El hallabi-Kettani Abderrahmane
Hello friends, I want to extract an IV and a key session from a DER file for decryption, and wich corresponds for example to aes-256-cbc algorithm . i dumpasn1 the file , so i have an ASN1 format,from that i want to extract them not manually :), may be the function EVP_CIPHER_asn1_to_param is usuab