Re: www.harryanddavid.com SSL handshake failure error in non-blocking mode.

2006-01-12 Thread Krishna M Singh
Hi Thank for the inputs. Disabling TLS removes the problem. Apart from that i tried following With the default configuration set and page accessed through Netscape 7.2 the web page is not accessible and when refreshed the page is accessible. Every time the browser is closed and reopened the sam

Re: smime message with attachments

2006-01-12 Thread trob
I can tell you how, but you have to have nail. If you can get that I will tell you how I did. Also I don't know about signed, I encrypted mine. > > Hi , > > Can anyone provide a recipe for sending an smime signed message > with a plain text part and one or more attachments from a uni

smime message with attachments

2006-01-12 Thread Dimitris Zilaskos
Hi , Can anyone provide a recipe for sending an smime signed message with a plain text part and one or more attachments from a unix command prompt without using a mail client but just openssl and mail/sendmail? I have seen in the archives people asking and getting the answer that it

Re: how to decode/encode X509_ALGOR.parameter?

2006-01-12 Thread Dr. Stephen Henson
On Thu, Jan 12, 2006, Szabolcs Berecz wrote: > Ok, but how can I create a sequence? > > I have to create this structure and convert to DER: > sequence { > integer > octetstring > } > > For integer I can use ASN1_INTEGER_new, ASN1_INTEGER_set and > i2d_ASN1_INTEGER. The same for octetstri

Re: how to decode/encode X509_ALGOR.parameter?

2006-01-12 Thread Szabolcs Berecz
Ok, but how can I create a sequence? I have to create this structure and convert to DER: sequence { integer octetstring } For integer I can use ASN1_INTEGER_new, ASN1_INTEGER_set and i2d_ASN1_INTEGER. The same for octetstring. But how can I put these in a sequence? Could you please write

Re: how to decode/encode X509_ALGOR.parameter?

2006-01-12 Thread Dr. Stephen Henson
On Thu, Jan 12, 2006, Szabolcs Berecz wrote: > Hi! > > I can 'decode' it by hand and I could 'encode' it, too, but I'm sure > there is a better way. > Could you tell me where to look in the openssl source? > This is represented as the ASN1_TYPE structure which is roughly equivalent to the ASN1

how to decode/encode X509_ALGOR.parameter?

2006-01-12 Thread Szabolcs Berecz
Hi! I can 'decode' it by hand and I could 'encode' it, too, but I'm sure there is a better way. Could you tell me where to look in the openssl source? Szabi __ OpenSSL Project http://www.openssl.or

Re: Encryption not possible with RSA private key??

2006-01-12 Thread Dr. Stephen Henson
On Thu, Jan 12, 2006, Emmanuel Lepavec wrote: > Actually, I'm using libcrypto programmatically so I know for sure that > RSA_private_encrypt() returned -1 when not passing 'e' to the RSA > structure. (note that I set the other fields using simple assign as done > in the sample C test file included

Re: problems using rsa

2006-01-12 Thread Dr. Stephen Henson
On Thu, Jan 12, 2006, Mark wrote: > Samy, > > > Interesting ! > > I just tested with a newly created certificate request > > (newreq.pem) and it goes fine with 'rsa'command ! my version > > is 0.9.7g. Does this an issue with the version ? > > If someone knows please let us know... > > > >

Re: Encryption not possible with RSA private key??

2006-01-12 Thread Emmanuel Lepavec
Dr. Stephen Henson wrote: > > I've done a quick check setting rsa->e to NULL in rsautl and it seems to work > just fine: the security checks aren't performed if 'e' is NULL. That's using > the -sign option which goes through RSA_private_encrypt(). > > What made you think this function returned -1

RE: Problem in creating certificate

2006-01-12 Thread Konark
Thanks to all.   I got solution .  It is the problem with configfile:  I included config file using option  “ –config    “  option .   Regards, konark   ***     This e-mail and attachments

encryption ciphers

2006-01-12 Thread Yves Kreis
Goot morning, Can someone please explain what the encryption cipher DHE-RSA-AES256-SHA does/means or point me to a document explaining it. Many thanks. Best Regards, Yves Kreis __ OpenSSL Project

RE: Problem in creating certificate

2006-01-12 Thread Vishnubhatla, Vijaya Bhaskar
Hi, Check your PATH whether you included the openssl.cnf file, otherwise you include it with the option of -extfile . Hope it works Thanks, Bhaskar From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of KonarkSent: Thursday, January 12, 2006 3:47 PMTo: openssl-users@openssl.orgSu

RE: problems using rsa

2006-01-12 Thread Mark
Samy, > Interesting ! > I just tested with a newly created certificate request > (newreq.pem) and it goes fine with 'rsa'command ! my version > is 0.9.7g. Does this an issue with the version ? > If someone knows please let us know... > > I also given below the snapshot(edited) .. > > -Sa

RE: problems using rsa

2006-01-12 Thread Samy Thiyagarajan
Mark, Interesting ! I just tested with a newly created certificate request (newreq.pem) and it goes fine with 'rsa'command  ! my version is 0.9.7g. Does this an issue with the version ? If someone knows please let us know... I also given below the snapshot(edited) .. -Samy > CA.pl -newreq Ge

Problem in creating certificate

2006-01-12 Thread Konark
  While creating RSA:1024 certificate,I got this error   Command :  openssl req -newkey rsa:1024 -sha1 -keyout c:\test\rootkey.pem -out  c:\test\cert_ssl.pem   Error :   3284:error:0E06D06A:configuration file routines:NCONF_get_string:no conf or environment variable:.\c rypto\co

RE: problems using rsa

2006-01-12 Thread Mark
Samy, > even if it is a certificate request, 'rsa' command can handle it. > > I think the start line of the key may be corrupted (im not sure ) > u may try to create a new key and test the same. I may be wrong but the error message made it appear that the command was expecting a private key.

RE: problems using rsa

2006-01-12 Thread Samy Thiyagarajan
hi.. even if it is a certificate request, 'rsa' command can handle it. I think the start line of the key may be corrupted (im not sure ) u may try to create a new key and test the same. Samy "Mark" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 12.01.2006 10:32 Please respond to

RE: problems using rsa

2006-01-12 Thread Mark
Hi, > > openssl rsa servidor-key.pem > > but i get this error: > > > > unable to load Private Key > > 5237:error:0906D06C:PEM routines:PEM_read_bio:no start > > line:pem_lib.c:644:Expecting: ANY PRIVATE KEY > > How did you create your private key? Ignore this question. If newreq.pem is a c

RE: problems using rsa

2006-01-12 Thread Mark
Hi, > openssl rsa servidor-key.pem > but i get this error: > > unable to load Private Key > 5237:error:0906D06C:PEM routines:PEM_read_bio:no start > line:pem_lib.c:644:Expecting: ANY PRIVATE KEY How did you create your private key? Mark. __