FW: help in openssl installation

2005-01-13 Thread XU Xiaogang-A19881
Hi All, When I try to install the openssl in window2000 under cygwin platform. The following errors outputted. Pls help to solve it. Thanks. Best Regards, Xiaogang (Nick) XU making all in crypto... make[1]: Entering directory `/

RE: The time of the openssl-ciphers is constant?

2005-01-13 Thread David Schwartz
> Thanks, I had forgotten that the time that I am calculating it is not > the time of the CPU and I was calculating the time of the data send > with the time that is lost with other processes that the linux > scheduler assign. > Somebody how I can profile only the time spent by SSL_write and SSL_r

SSL Error

2005-01-13 Thread Castillo, Mike
 Hello All,   I am getting an error in my Apache log:   Mod_ossl: Unable to establish SSL protocol (server name) Mod_ossl: SSL call to NZ function nzos_Handshake failed with error 28864     Any idea why this is happening?       Thanks   _   Michael A.

Re: How to get a stack of CA certificates from PKCS12_parse?

2005-01-13 Thread pattyzheng
Steve, Thank you very much for your response. The reason I didn't use sk_X509_num() instead of ((STACK *)ca)->num is because I will change the the program to load libeay32.dll instead of linking my program with library libeay32.lib. sk_X509_num() is a macro and it is the replacement of func

Re: How to get a stack of CA certificates from PKCS12_parse?

2005-01-13 Thread Dr. Stephen Henson
On Thu, Jan 13, 2005, [EMAIL PROTECTED] wrote: > Hello all, > > I want to load and parse certificates from a file(.p12) using > d2i_PKCS12_fp(..) and PKCS12_parse(..). The file contains two certificates. I > want to obtain all of the certificates from the file. But after I called > PKCS1

SSL_write error

2005-01-13 Thread Scott Morgan
I'm getting an intermittent error when sending data via SSL_write. The call returns -1, which translates via SSL_get_error to 5 (SSL_ERROR_SYSCALL, suggesting a problem at the BIO level of the connection) however the error stack is empty so I'm stuck at how to find out what's gone wrong. The co

How to get a stack of CA certificates from PKCS12_parse?

2005-01-13 Thread pattyzheng
Hello all, I want to load and parse certificates from a file(.p12) using d2i_PKCS12_fp(..) and PKCS12_parse(..). The file contains two certificates. I want to obtain all of the certificates from the file. But after I called PKCS12_parse(..) I only got one certificate. I couldn't get the s

Re: SSL on a hosted site

2005-01-13 Thread Ken Goldman
> Date: Wed, 12 Jan 2005 16:25:06 -0700 > From: [EMAIL PROTECTED] > > Furthermore any felon in jail can have his lawyer register a company > and then obtain a legit cert from pretty much any official > certification authority. True, but not as bad as it sounds. The felon could register a web s

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Bernhard Froehlich
Shaun Lipscombe wrote: <>[...] One last question... it's to do with client certificates. If I have two websites, say, and they both require client certificates signed by the CA "ABC. Ltd" there is nothing stopping a client certificate being used for authorization to access both sites even though th

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Dr. Stephen Henson
On Thu, Jan 13, 2005, Shaun Lipscombe wrote: > * Dr. Stephen Henson wrote: > > > On Thu, Jan 13, 2005, Shaun Lipscombe wrote: > > > > > Another question I have is I have seen documentation on the net showing > > > CSR's being generated that catenate the private key and PEM encoded > > > certific

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Shaun Lipscombe
* Dr. Stephen Henson wrote: > On Thu, Jan 13, 2005, Shaun Lipscombe wrote: > > > Why is it that a Microsoft box requires SSL certificates be imported > > from a PCKS12 file when all other operating systems and software are OK > > with a PEM certificate? > > It doesn't. You can do that of course

Re: Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Dr. Stephen Henson
On Thu, Jan 13, 2005, Shaun Lipscombe wrote: > I have used openssl to setup a CA to sign site certificates and client > certificates. All is working just great , however I have a couple of > questions to ask so that I dont go insane. > > Why is it that a Microsoft box requires SSL certificates b

Using OpenSSL on unix to manage certs for Windows boxes (CSR's and PKCS12)

2005-01-13 Thread Shaun Lipscombe
I have used openssl to setup a CA to sign site certificates and client certificates. All is working just great , however I have a couple of questions to ask so that I dont go insane. Why is it that a Microsoft box requires SSL certificates be imported from a PCKS12 file when all other operating s

Re: The time of the openssl-ciphers is constant?

2005-01-13 Thread Tyler Durden
Thanks, I had forgotten that the time that I am calculating it is not the time of the CPU and I was calculating the time of the data send with the time that is lost with other processes that the linux scheduler assign. Somebody how I can profile only the time spent by SSL_write and SSL_read? Thank

Re: SSL on a hosted site

2005-01-13 Thread Thomas J. Hruska
At 05:18 PM 1/12/2005 -0700, L Nehring writeth: >Have look at this http://www.schneier.com/paper-pki-ft.txt >and some other papers on the that site. I run my own CA because I >neither trust nor can I afford Verisign. There's no technical difference >in the certs. > >best regards, >Lance >http://w

Re: Win32 OpenSSL feature request

2005-01-13 Thread Thomas J. Hruska
At 07:05 PM 1/12/2005 +0100, Peter Sylvester writeth: > >The first thing is to make the dll's it stdcall friendly. :-) >(at least that the state of the art 3 years ago?) Well, stdcall-friendly is not necessary for COM. I was thinking a nice wrapper DLL that implemented a COM server and made the a