RE: Newbie question X509 certificate stores SOLVED

2005-12-29 Thread Chris Morrison
> > There seems to be a problem with whatever has been used to save the data. > It > is prepending the byte 0, 1 to the start of the structure. If you skip > these > OpenSSL has no problems parsing the PKCS#7 data. > Worked a treat. I downloaded an older version of the PKZIP application note, a

Re: Chicken and egg issue

2005-12-29 Thread Dr. Stephen Henson
On Thu, Dec 29, 2005, WebSpider wrote: > On 12/29/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > > > That leaves the possibility of a new node (A') impersonating an existing > > node. > > To avoid that you need to be able to identify nodes securely. > > > > How you do that varies. For HTTPS

Well, Time to make a fool of myself: Installation on host?

2005-12-29 Thread Steve Fellows
    Is it possible to install OpenSSL on a host? For instance, I live in the uk and use the host, "f2s" (www.f2s.com) and would like to install OpenSSL there, purely because their secure server is £200 per year! I can't afford that ;) Now, if it is possible, could someone please point me in t

Re: Chicken and egg issue

2005-12-29 Thread WebSpider
On 12/29/05, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > On Thu, Dec 29, 2005, WebSpider wrote: > > > The issue I'm running into is as follows: A new node (A) is about to > > make it's first connection to an already existing node (B). The new > > node knows the IP address and port number by use

Re: Chicken and egg issue

2005-12-29 Thread Dr. Stephen Henson
On Thu, Dec 29, 2005, WebSpider wrote: > Hi there! > > The issue I'm running into is as follows: A new node (A) is about to > make it's first connection to an already existing node (B). The new > node knows the IP address and port number by use of a configuration > file. > > The already existing

Re: Chicken and egg issue

2005-12-29 Thread Bear Giles
WebSpider wrote: How can I make the new node (A) send an encrypted request to the already existing node (B) while node A does not have any public key/certificate information about the already existing node (B), and still make sure that I am actually talking to B, and not some Man-In-The-Middle ?

Chicken and egg issue

2005-12-29 Thread WebSpider
Hi there! First of all, happy holidays ;) We're in the middle of the holiday season, so I do hope that there are some people around that are still reading the list, maybe even while being on holiday ;-) I'm having a chicken-egg problem, that I'm hoping someone on this list can help me with. I'm

PKI question, trusting subordinate CA

2005-12-29 Thread Hagai Yaffe
Hello,   I am using OpenSSL to implement SSL in my application, I would like to enable trusting subordinate CA in my server (I do not want to trust the root CA and other subordinate CA’s, only a specific subordinate CA), I have used the verify callback and I can do this, but I have anothe