Converting private key to Netscape's key3.db

2005-03-18 Thread Ricardo M. Stella
I found most info on how to extract a certificate (certutil) and possibly how to extract the private key from Netscape's format. But I'm trying to do the opposite. We have some certificate and keys already established (openssl) and want to use them with iPlanet's directory server. It seems that

Re: asn.1 recursive type and choice

2005-03-18 Thread Dr. Stephen Henson
On Fri, Mar 18, 2005, Eric Alata wrote: > Hello, > > I would like to use openssl/asn1 with these types: > > TA ::= CHOICE { > f1 SET OF TA, > f2 TA, > f3 INTEGER > } > > TB ::= SEQUENCE { > f1 INTEGER, > f2 CHOICE { > f2_1 INTEGER, > f2_2 BOOLEAN > } > } > > I have two prob

Re: asn.1 recursive type and choice

2005-03-18 Thread Dr. Stephen Henson
On Fri, Mar 18, 2005, Eric Alata wrote: > Hello, > > I would like to use openssl/asn1 with these types: > > TA ::= CHOICE { > f1 SET OF TA, > f2 TA, > f3 INTEGER > } > That's ambiguous so nothing can handle it. If you delete the f2 option you would be OK. Steve. -- Dr Stephen N. Henson.

asn.1 recursive type and choice

2005-03-18 Thread Eric Alata
Hello, I would like to use openssl/asn1 with these types: TA ::= CHOICE { f1 SET OF TA, f2 TA, f3 INTEGER } TB ::= SEQUENCE { f1 INTEGER, f2 CHOICE { f2_1 INTEGER, f2_2 BOOLEAN } } I have two problems but I don't have found any responses on Internet. 1) The definition of TA

x509.h and x509v3.h

2005-03-18 Thread Chevalier, Victor T.
Can someone please tell me how x509.h and x509v3.h or point me to the right page...google is not giving very good results...Thank you. __ OpenSSL Project http://www.openssl.org User Support Mailing L

Re: Out of the Office

2005-03-18 Thread Victor Duchovni
On Fri, Mar 18, 2005 at 11:54:40AM -0600, Brian Hurt wrote: > Also, IIRC there is a way to mark messages as > automatically generated, so they won't generate automatically generated > responses. We might want to consider having the mailing list messages > marked as such- I'm not sure how easy

Re: Out of the Office

2005-03-18 Thread Brian Hurt
On Fri, 18 Mar 2005, Dunceor . wrote: YOU FUCKIN IDIOT. TURN THAT SHIT OF, THAT IS LIKE THE 10TH MAIL TODAY. some people just don't have the brains. Um, it's an automatically generated message. Which means spewing flames at them isn't going to help. Could we temporarily remove this person from

RE: Out of the Office

2005-03-18 Thread Kumar, Sunil
Is this stuff in an infinite loop? Like he\she sends this message to OpenSSL that in turn gets sent to all including (the the userid "[EMAIL PROTECTED]") then another mail will be sent to Openssl saying the same thing from that user id. Will it ever end? Is there a way this email can be disabled a

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Re: Out of the Office

2005-03-18 Thread Dunceor .
YOU FUCKIN IDIOT. TURN THAT SHIT OF, THAT IS LIKE THE 10TH MAIL TODAY. some people just don't have the brains. On Fri, 18 Mar 2005 09:21:13 -0800, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > I am currently out of the office and will return on April 1st. If you have > any technical questions

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Re: Any way to not cache peer cert for unverified clients?

2005-03-18 Thread Victor Duchovni
On Fri, Mar 18, 2005 at 06:02:06PM +0100, Lutz Jaenicke wrote: > > I could void the warranty by: > > > > #ifdef DONT_TRY_THIS_AT_HOME > > X509_free(session->peer); > > session->peer = 0; > > #endif > > buflen = i2d_SSL_SESSION(session, 0); > > ... > > > > but I don't beli

error

2005-03-18 Thread Plantier, Spencer
How do I fix this error? Enter pass phrase: Verifying - Enter pass phrase: Verify failure User interface error 25130:error:0906906F:PEM routines:PEM_ASN1_write_bio:read key:pem_lib.c:329: # Thanks Spencer Plantier System Network Administrator 301 Gregson Dr Cary, NC 27511 Office 919-379-851

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Re: Any way to not cache peer cert for unverified clients?

2005-03-18 Thread Lutz Jaenicke
On Tue, Mar 15, 2005 at 10:24:11AM -0500, Victor Duchovni wrote: > > Is there an officially condoned mechanism to avoid caching the peer > certificate of unverified clients? I want to cache the session keys, > but if the peer certificate is not verified, there is not much point in > burning storag

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Re: [EMAIL PROTECTED]: Question?]

2005-03-18 Thread Lutz Jaenicke
On Fri, Mar 18, 2005 at 10:50:19AM +0100, Lutz Jaenicke wrote: > - Forwarded message from "Oberoi, Navita" <[EMAIL PROTECTED]> - > > X-Original-To: [EMAIL PROTECTED] > X-Original-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] > From: "Oberoi, Navita" <[EMAIL PROTECTED]> > To: "'[E

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

Re: create private key with password

2005-03-18 Thread Bernhard Froehlich
François NOEL wrote: Hi everybody, I'm a french student and i would like to know how can I generate a privete RSA key with a password ? ps : with openSSL command line Thanks a lot ! Have a look at http://www.openssl.org/docs/apps/genrsa.html But what do you want to do with the key? Ted ;) -- PGP

Re: [openssl-users] create private key with password

2005-03-18 Thread Erwann ABALEA
Bonjour, Hodie XV Kal. Apr. MMV est, François NOEL scripsit: > Hi everybody, I'm a french student and i would like to know how can I > generate a privete RSA key with a password ? ps : with openSSL command line openssl genrsa --help -- Erwann ABALEA <[EMAIL PROTECTED]>

Out of the Office

2005-03-18 Thread ehodge
I am currently out of the office and will return on April 1st. If you have any technical questions or problems, please contact [EMAIL PROTECTED], or Ryan Truong ([EMAIL PROTECTED]). Thanks, Edgar __ OpenSSL Project

create private key with password

2005-03-18 Thread François NOEL
Hi everybody, I'm a french student and i would like to know how can I generate a privete RSA key with a password ? ps : with openSSL command line Thanks a lot ! __ OpenSSL Project http://www.openss

[EMAIL PROTECTED]: Question?]

2005-03-18 Thread Lutz Jaenicke
Forwarded to the OpenSSL users mailing list Best regards, Lutz - Forwarded message from "Oberoi, Navita" <[EMAIL PROTECTED]> - X-Original-To: [EMAIL PROTECTED] X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] From: "Oberoi, Navita" <[EMAIL PROTECTED]> To: "'[EMAIL