Re: Error in Installing openssl-0.9.7-stable-SNAP-20050822

2005-08-23 Thread Pan Pap
The problem below appears to be related with my using VC toolkits 2003 and VC 6 and not up-to-date libraries..Resolved by using VC 7 (i.e., VS .net 2003). Just in case any one else needs that info.Pan Pap <[EMAIL PROTECTED]> wrote: Dear All,   I would be greatful if you can point out a fix for th

Odd behaviour with diffie-hellman on 64-bit HP-UX 11iv1

2005-08-23 Thread Mononen Jussi
Hi all, I'm using OpenSSL 0.9.8 on a 64-bit HP-UX 11i v1 platform as a part of my effort to compile libssh2 c-library (http://www.libssh2.org/) that is using openssl resources. OpenSSL compiles nicely and passes 'make test'. When trying to use it to create a ssh2 connection, I get complaints from

RE: Automation question

2005-08-23 Thread prakash babu
Hi,   While creating self signed certificates and certificate requests use -subj to specify the the subject name and -nodes for not prompting for password (private key will not be encrypted) If you want the password to be encrypted generate the rsakey using genrsa command with -passout option and u

Re: SSL version 3 application data.

2005-08-23 Thread Victor Duchovni
On Wed, Aug 24, 2005 at 12:38:59AM +0200, Jostein Tveit wrote: > The application data is encrypted. Everything after the 5th byte > is ciphertext. > > 17 (application data) > 03 (major version) > 00 (minor version) > 00 20 (length 16bits) > ... (32 bytes of encrypted data) > With a 16 byte (128

Re: SSL version 3 application data.

2005-08-23 Thread Jostein Tveit
Matt Rodriguez <[EMAIL PROTECTED]> writes: > I've been looking at the specifications and figuring out what the > data in the application > data record means. If anybody can explain this to me in greater > detail, that would > be great. The application data is encrypted. Everything after the 5th b

SSL version 3 application data.

2005-08-23 Thread Matt Rodriguez
I'm using s_client and s_server tools to create a ssl connection and send data over a ssl connection. I'm observing the traffic using ssldump with the -Adx flags. The first time I type text into s_client program I see 2 application data records. I'm not sure what the purpose or what is in the f

RE: Automation question

2005-08-23 Thread Brian DeGeeter
You need to set the cnf so it won't prompt. Here's a little excerpt from a shell script: cat <<@eof >$CONFFILE # openssl x509 extfile params extensions = extend [req] # openssl req params prompt = no distinguished_name = dn-param [dn-param] # DN fields C = US ST = WA L = Yadda O = Yadda OU = Cha

RE: Automation question

2005-08-23 Thread McCann, Brian
In reply to you both, the PHP part I got down..that's not the problem. It's what to tell openssl to do. I'm trying now to make a cnf file to make a CA without prompting, then to make a certificate req and sign it without prompting...at least now I know I'm in the right direction. Thanks! --Brian

Re: Automation question

2005-08-23 Thread Thomas J. Hruska
Oliver Leitner wrote: -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 McCann, Brian wrote: | Hi all...I'm new to the list and for the most part OpenSSL as well...so | sorry if I use the wrong terminology. I've searched the list archives, | as well as Google, and cannot figure this out. I'm

Re: Automation question

2005-08-23 Thread Oliver Leitner
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 McCann, Brian wrote: | Hi all...I'm new to the list and for the most part OpenSSL as well...so | sorry if I use the wrong terminology. I've searched the list archives, | as well as Google, and cannot figure this out. I'm trying to create a | CA

Automation question

2005-08-23 Thread McCann, Brian
Hi all...I'm new to the list and for the most part OpenSSL as well...so sorry if I use the wrong terminology. I've searched the list archives, as well as Google, and cannot figure this out. I'm trying to create a CA certificate, as well as certificates for users using a script (called from a web

[no subject]

2005-08-23 Thread Tao Long
Hi, All I just recently started working with SSL. Unfortunately, the online documentation is not quite complete as I expected. Maybe I am just not looking at the right place. If so, can someone point me to some tutorials that are good for new comers? I downloaded some sample code. One thing

Problem with OIDs during CA root certificate renewal

2005-08-23 Thread Arsen Hayrapetyan
Hello, I have a problem with OIDs during CA root certificate renewal. I am using openssl 0.9.6b. I've performed the following steps: 1) Converting existing certificate to CSR: openssl x509 -x509toreq -in old_cert.pem -signkey PrivKey.pem -out careq.csr 2)Signing the request with existing private k