Has anyone been able to run pkwrite.c with 0.9.7d?

I'm hoping someone has a clue for me.  I can't get the example pkwrite to work correctly, even given a PEM from elsewhere in the distribution. I'm compiling with Visual C 6.0 with SP 6, and I removed the compiler options (a tip I picked up elsewhere in this list to prevent a crash.) Having compiled

Announce list for releases ?

Hi folks, is there an announce mailing list or something similare where notifications on new releases are posted ? I'm doing (mostly) automated packaging/distro building and I don't really have the time to look at the website every day :) thx -- ---

Certificate Request Control

I have a situation where my trusted root has two different kinds of intermediate CAs (identity and email, say) that issue identity and email signing certificates, respectively. I would like to only allow users to authenticate to my Apache web servers with the identity certificate. The certifica

Re: DOD Root Certificates and OpenSSL

Since your problem is 'client certificates not available', you should set SSLVerifyClient to 'optional' This will let the server to continue the handshake even if the client does not have a certificate. - Padma --- Golub Heath <[EMAIL PROTECTED]> wrote: > Sorry in advance but I am fairly new to

WG: Apache SSL

Title: Apache SSL Greetings,       try to compile Apache+ mod_ssl+openssl yourself?   What the apache logs says? The log say's you if the cert ist loaded or not and when why not.   And dont forget:   http://www.sendmail.org/~ca/email/other/cagreg.html     Greetings Stephan   -Ursprüng

adding a new cipher

Hi all, I'near to integrate my AES-CCM in openssl, but I need a little help. I've created my file AES_CCM_encrypt (I'm sure it's ok), I saved it in crypto/aes and added the prototipe in crypto/aes/aes.h Then I modified the following files: file crypto/objects/objects.txt modified line 660 !Alias

Re: DOD Root Certificates and OpenSSL

On October 22, 2004 10:54 am, Golub Heath wrote: > Sorry in advance but I am fairly new to OpenSSL and though I have read > a lot .. .I just can't seem to get it right. Any help, even direction > pointing (eg. a URL) would be greatly appreciative. You needn't worry, what you're asking is far from

What does is it?

Is there anyone who can tell me what do this line mean (they belongs to /crypto/objects/objects.txt) ? line 659 !Alias csor 2 16 840 1 101 3 line 660 !Alias nistAlgorithms csor 4 line 661 !Alias aes nistAlgorithms 1 In particular, for what stands the number 4 in line 660? Have a nice

Apache SSL

Title: Apache SSL I'm attempting to install Apache-ssl on Debian 3.1 but I can't seem to install a new certificate. I'm following the directions at http://www.lavrsen.dk/twiki/bin/view/Motion/SecureWebcamFeeds but after I finish creating and installing a new self-signed certificate I get the

CSR generation not happy

Hi, We're having some trouble generating a public.csr, so that we can install an SSL Certificate on our web server. Verisign has no suggestions. We've googled the error below with no results. Anyone have any ideas? Here's the command and the error result: [EMAIL PROTECTED]:/usr/lib/ssl/certs# o

DOD Root Certificates and OpenSSL

Sorry in advance but I am fairly new to OpenSSL and though I have read a lot .. .I just can't seem to get it right. Any help, even direction pointing (eg. a URL) would be greatly appreciative.   Problem: client certificates not available during SSL handshake   Description: I have a server c

Re: SSL without Key?

If by "anonymous" SSL connection you mean that the client does not need to have a certificate, you just cut the process short. Stop right before the server sends the client the list of CAs for which it is prepared to accept user certificates. In other words, the client authentication part of the SS

Re: Problems with EDH-RSA-DES-CBC-SHA cipher

On Fri, Oct 22, 2004, Tyler Durden wrote: > Hi, > I have created a server and a client that connection and communicate > well if I use this ciphers: > "NULL-MD5", "NULL-SHA", "EXP-RC4-MD5", "RC4-MD5", "RC4-SHA", > "EXP-RC2-CBC-MD5", "IDEA-CBC-SHA", "EXP-DES-CBC-SHA", "DES-CBD-SHA", > "DES-CBC3-SH

=?iso-8859-1?Q?Re:_Re:_Re:_RE:_collect2:_ld_returned_1_exit_status?=

Hi, sorry I am new to unix and openSSL, so I don´t know what "curl" and "pkg-config" is. What I have discovered is, that I have a libcrypto.a file in my OpenSSL directory as well as in the Cygwin dir. If I understand it correctly the error may be the fact that it compiles and links with the wrong

Problems with EDH-RSA-DES-CBC-SHA cipher

Hi, I have created a server and a client that connection and communicate well if I use this ciphers: "NULL-MD5", "NULL-SHA", "EXP-RC4-MD5", "RC4-MD5", "RC4-SHA", "EXP-RC2-CBC-MD5", "IDEA-CBC-SHA", "EXP-DES-CBC-SHA", "DES-CBD-SHA", "DES-CBC3-SHA", "AES128-SHA"," AES256-SHA". The client and the ser

Re: =?iso-8859-1?Q?Re:_RE:_collect2:_ld_returned_1_exit_status?=

you seem to complie and link the curl with the wrong libcrypto part. There seems to be a bug in the configure of curl which, in case that you have installed an openssl version in /usr/local/ssl and a pkg-config. Even if you specify -with-ssl=/somewhere, curl will use the include and lib of bo

Re: SSL without Key?

Hi ! To enable anonymous connections, the server must accept connections without requesting the client's certificate. This is what I use when I init my SSL context : SSL_CTX_set_verify (ssl_ctx, SSL_VERIFY_NONE, VerifyCertCallback); I think that it is the solution but I am new in OpenSSL..