Re: Certificate Authentication - SQL?

2005-05-19 Thread Bernhard Froehlich
Mike Koponick wrote: Hello Everyone, Please forgive me, I am a newbie. I would like to authenticate my users to a website SQL database via a certificate. Could I create a certificate that would allow a specific user (that the certificate was created for) to authenticate to a website that has th

Re: mini-ASN.1 compiler 0.9.8-dev

2005-05-19 Thread Dr. Stephen Henson
On Thu, May 19, 2005, pana wrote: > Hi, > I don't know how to use the mini-ASN.1 compiler in the openssl > 0.9.8-dev version. > I need to obtain DER octets to insert in my custom extensions. Their > structure is very simple, I use IA5String and BMPString. > For example I want something like ...=D

Re: openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Got it built under windows and is working fine now. Thanks very much! Simon. Simon McMahon Work: (07) 31311420 Mobile: (043) 2294180 >>> [EMAIL PROTECTED] 05/20/05 08:58am >>> Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedure. I did not build Ope

Re: openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedure. I did not build OpenSSL from source, I just downloaded the windows binary. Is it easy to upgrade to the snapshot? Is there an FAQ or instructions for this for Windows? Cheers, Simon. Simon McMaho

Certificate Authentication - SQL?

2005-05-19 Thread Mike Koponick
Hello Everyone,   Please forgive me, I am a newbie. I would like to authenticate my users to a website SQL database via a certificate.   Could I create a certificate that would allow a specific user (that the certificate was created for) to authenticate to a website that has the username/password

bio connect via proxy

2005-05-19 Thread rburchett
Hi Folks, I'm trying to talk (as a client) through a proxy server using OpenSSL bio's in windows. I see where it's possible to set up a bio using BIO_set_proxies and I tried doing BIO_set_proxies(myBio, myProxy) where myBio is a bio and myProxy is a "hostname:port" (e.g. localhost:80). I cannot

Re: simple question again

2005-05-19 Thread Joshua Juran
On May 19, 2005, at 4:03 PM, Miles Bradford wrote: So when you send the CSR including the Public Key - you would send them the (your) Private Key, also? Then they sign it with a Private Key they've created? and send it back? You don't give away your private key to anybody, not even the certifica

Re: Valgrind suppressions?

2005-05-19 Thread Brad Hards
On Mon, 16 May 2005 02:04 am, Nils Larsch wrote: > a lot of these warnings are caused by the fact that openssl uses > uninitialized memory when creating random numbers etc. . They should > be harmless but you may try to build openssl with the "-DPURIFY" to > reduce the number of warnings Thanks Nil

[ANNOUNCE] OpenSSL 0.9.8 beta 1 released

2005-05-19 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 1 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The first beta is now released. The beta release is available for d

RE: simple question again

2005-05-19 Thread Miles Bradford
So when you send the CSR including the Public Key - you would send them the (your) Private Key, also? Then they sign it with a Private Key they've created? and send it back? -Original Message- From: david [mailto:[EMAIL PROTECTED] Sent: Thursday, May 19, 2005 2:11 AM To: David Schwartz Cc

Re: simple question again

2005-05-19 Thread Vadym Fedyukovych
Joshua Juran wrote: On May 18, 2005, at 2:45 PM, Miles Bradford wrote: My question on top of that was - "How could someone intercept an encrypted message and get to the information inside the certificate without corrupting the encryption that the data is wrapped in - since once the perpetrator le

mini-ASN.1 compiler 0.9.8-dev

2005-05-19 Thread pana
Hi, I don't know how to use the mini-ASN.1 compiler in the openssl 0.9.8-dev version. I need to obtain DER octets to insert in my custom extensions. Their structure is very simple, I use IA5String and BMPString. For example I want something like ...=DER:00:55:00:... Someone can help me? bye pana

Re: Problems with the function i2d_DSA_PUBKEY(...)

2005-05-19 Thread Nils Larsch
Tyler Durden wrote: Hellos, I have some problems with the function i2d_DSA_PUBKEY. I want serialize the public key to send this to a client Java for this can read this public key. I get serialize with openSSL, but the Java client throw an exception of the bad encoded when read this. Java have some

Problems with the function i2d_DSA_PUBKEY(...)

2005-05-19 Thread Tyler Durden
Hellos, I have some problems with the function i2d_DSA_PUBKEY. I want serialize the public key to send this to a client Java for this can read this public key. I get serialize with openSSL, but the Java client throw an exception of the bad encoded when read this. Java have some functions to read P

Re: openssl smime data corruption bug

2005-05-19 Thread Dr. Stephen Henson
On Thu, May 19, 2005, Simon McMahon wrote: > Hi, > > There seems to be a very small limit on the size of data that can be handled. > > Using "OpenSSL 0.9.7f 22 March 2005" on windows. Don't know if this is > reproducible on Linux. > > I get the following result signing and encrypting a reasona

Re: simple question again

2005-05-19 Thread Mathias Sundman
On Wed, 18 May 2005, Ken Goldman wrote: All correct for authentication. There are times that public keys or certificates are encrypted using a DH protocol for privacy. You might not want a man in the middle to track where you go, and a certificate is your identity. Correct me if I'm wrong, but my

RE: simple question again

2005-05-19 Thread david
  > The particular pages or components retrieved over the SSL link (the one > retrieved through URLs beginning with 'https'), will be sent over encrypted > links. In addition, the endpoint will be validated. So that if you retrieve > 'https://www.amazon.com/anything/goes/here', you will receive a

Re: simple question again

2005-05-19 Thread alok
Hello :( As usual trolling.. The particular pages or components retrieved over the SSL link (the one retrieved through URLs beginning with 'https'), will be sent over encrypted links. In addition, the endpoint will be validated. So that if you retrieve 'https://www.amazon.com/anything/goes/

openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Hi, There seems to be a very small limit on the size of data that can be handled. Using "OpenSSL 0.9.7f 22 March 2005" on windows. Don't know if this is reproducible on Linux. I get the following result signing and encrypting a reasonably small file - a.txt (~5K attached). Note that the follow

Re: openssl smime bug on linux kernel 2.6.8-2

2005-05-19 Thread Marco Roeland
On Wednesday May 18th 2005 Eddy Tan wrote: > Is it a bug on the kernel or openssl? > > $ openssl smime -encrypt -in in.txt -out out.enc cert.pem > Segmentation fault At any rate this is an application bug, not a kernel bug. > I?m running debian linux (kernel 2.6.8-2-386) with openssl 0.9.7e-3