SUMMARY: RE: Compiling openssl0.97e

2004-12-29 Thread North, Walter
Thanks to Greg Davis for the answer. The SNAP works just fine. Hey Walter, ran into the same thing myself, as did someone on the newsgroup. I'm sure you'll probably hear a few answers, but just in case... There's supposed to be a way to fix the Makefiles under the fips directories, but I di

Getting SSL_pending() to work

2004-12-29 Thread Reuben Worley
I'm wanting to use SSL_pending() to determine how many bytes are available to read. My code is structured like this: 1. Use select() on the file descriptor to see if it's readable. 2. Use SSL_peek() to get 1 byte ("prime the pump"). 3. Use SSL_pending() to determine how many bytes are avail

Solaris 10 & OpenSSL 0.9.7e

2004-12-29 Thread Adams, Jamie (Mission Systems)
While trying to compile OpenSSL 0.9.7e in Solaris 10 with Sun ONE Studio 8, the preprocessor kept barfing with "/usr/include/sys/feature_tests.h", line 329: #error: "Compiler or options invalid for pre-UNIX 03 X/Open applications and pre-2001 POSIX applications" cc: acomp failed for randfile.c

Compiling openssl0.97e

2004-12-29 Thread North, Walter
Hello all: I'm having a problem with openssl 0.97e using gcc 3.3.2 make 3.80 on AIX 5.2. I looks like a problem when it gets to doing fips. In config no-fips, fips, and nothing all produce the same result (see below) I searched the archives but did not find a

Re: problem with using openssl ecparam

2004-12-29 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Hi Nils, I installed openssl-SNAP-20041220.tar.gz from ftp://ftp.openssl.org/snapshot/. Is this version Ok? should be (I didn't test it, but it should work) What does "openssl version -a" give you ? or should I install some version like "openssl-0.9.7-stable-SNAP-20

Re:Re: problem with using openssl ecparam

2004-12-29 Thread redfish6
Hi Nils, I installed openssl-SNAP-20041220.tar.gz from ftp://ftp.openssl.org/snapshot/. Is this version Ok? or should I install some version like "openssl-0.9.7-stable-SNAP-20041228.tar.gz" or something else? Thanks in advance. Hung-Yu >> >> However, I got the following error m

Re: verify certificate with multiple crl from ona CA

2004-12-29 Thread Dr. Stephen Henson
On Wed, Dec 29, 2004, [EMAIL PROTECTED] wrote: > Hello! > I have a problem to verify certificate against crl file. > The situation is: >1)CA which I use have 2 certificates, one is old certificate but still not > expired and second is new certificate (becuase CA renew own certificate) >2)

Re: CRL Signature verification

2004-12-29 Thread Dr. Stephen Henson
On Wed, Dec 29, 2004, prakash babu wrote: > Hello All, > > The following is a snippet from the code that creates a crl. > > * > for (i=0; idb->data); i++) > { >

known_hosts with permissions greater than 0750

2004-12-29 Thread Nick Gray
I have a security requirement that all files in a users directory have permissions no greater than 0750. When ~/.ssh/known_hosts is created it is given 0644. Is there a reason for this? I can see why other would "need" access to this file at all. Nix __

verify certificate with multiple crl from ona CA

2004-12-29 Thread dyziak
Hello! I have a problem to verify certificate against crl file. The situation is: 1)CA which I use have 2 certificates, one is old certificate but still not expired and second is new certificate (becuase CA renew own certificate) 2)therefore, there are 2 CRL list (one for each CAcertificate)

CRL Signature verification

2004-12-29 Thread prakash babu
Hello All, The following is a snippet from the code that creates a crl.      *  for (i=0; idb->data); i++)    {    pp=(char **)sk_value(db->db->data,i)

Re: problem with using openssl ecparam

2004-12-29 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Hi friends, I just installed openssl version. openssl-SNAP-20041220.tar.gz. I want to test ECDSA certificate through command line. I saw the man page and ecparam.o in my installation. However, I gor the following error message when I issue command "openssl ecparam