Re: how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-17 Thread Bernhard Froehlich
kadir iscmng wrote: Hi , I have download mod_ssl .. But I cant install this package , is there any solution to install this package on Win32/win2003 environment ? From my understanding, I should use a $ shell to compile PERL and MOD_SSL So From Where I can get this shell ? [...] http:

how to install MOD_SSL on Windows2003 server .. plz help!

2006-01-17 Thread kadir iscmng
Hi , I have download mod_ssl .. But I cant install this package , is there any solution to install this package on Win32/win2003 environment ? >From my understanding, I should use a $ shell to compile PERL and MOD_SSL So From Where I can get this shell ? >From the INSTALL.32 file , it suggests m

Multithreaded app segfault on ssl3_dispatch_alert

2006-01-17 Thread Alberto Alonso
I have a multithreaded client/server app. I do have the ssllock_cs and ssllock_count allocated using the CRYPTO_num_locks() for how many. On the client I do use a shared CTX structure between threads, is that a problem? I am getting segfaults and gdb doesn't give me a lot of info, I guess the sta

OpenSSL 0.9.8a Crashes Apache--and a Fix

2006-01-17 Thread Aaron Greenspan
Hello, I'm pretty sure I've found a bug in something, though I'm not positive. So, I'll just relate my experience troubleshooting over the past few days, and hope someone can investigate further. I'm working on a Cobalt RaQ 550 server, which runs a version of Red Hat Linux. (I've removed the

RE: Calling 'openssl' utility as a C function?

2006-01-17 Thread kadir iscmng
Hi, I have downloaded the mod_ssl-2.8.23-1.3.33.tar.gz, but my apache version is 1.3.27 ,so do I have to get mod_ssl-2.8.23-1.3.27.tar.gz version ? while applying the patch , I followed the following instruction " cd /usr/local/ tar -xvzf mod_ssl-2.8.12-1.3.27.tar.gz cd mod_ssl-2.8.12-1.3.27/ ./

RE: Calling 'openssl' utility as a C function?

2006-01-17 Thread kadir iscmng
Hi , Thanks for you time , So, Can you plz help me how to enable mod_ssl .. I think This is the problem we r facing . Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Girish Venkatachalam Sent: Tuesday, January 17, 2006 8:31 PM To: openssl-

RE: RAND_Load_File using /dev/random

2006-01-17 Thread David Schwartz
> Hi, > > my book tells me to call > > RAND_load_file("/dev/random", 1024) > > this appears to take much too long. is there anything wrong? how many > bytes do i need? It depends upon how secure you need to be and your threat model. Likely, 128 bytes is more than enough. If security is no

Re: RAND_Load_File using /dev/random

2006-01-17 Thread JCA
On 1/17/06, Felix Dorner <[EMAIL PROTECTED]> wrote: Hi,my book tells me to callRAND_load_file("/dev/random", 1024)this appears to take much too long. is there anything wrong? how manybytes do i need?thanks,felix__ OpenSSL Project  

RAND_Load_File using /dev/random

2006-01-17 Thread Felix Dorner
Hi, my book tells me to call RAND_load_file("/dev/random", 1024) this appears to take much too long. is there anything wrong? how many bytes do i need? thanks, felix __ OpenSSL Project http://www

Re: x509 CRL v2

2006-01-17 Thread Dr. Stephen Henson
On Tue, Jan 17, 2006, Daniel Garca Franco wrote: > > I would like to use other CRL Revoke Reason as "superseded", > "unspecified", etc... with the > CRL Entry Extension InvalidityDate, not that the use of CRL Entry > Extension InvelidityDate > force to set the CRL Revoke Reason to keyCompro

Re: PKCS#7

2006-01-17 Thread Rabellino Sergio
Bernhard Froehlich wrote: [EMAIL PROTECTED] wrote: Hi! I need to convert PKCS#7 attached signatures to PKCS#7 detached signatures. Is it possibly? Is there any example? Thanks anyway! Since noone else answered I'll thay the little I believe to know about the subject... ;) I don't

Re: PKCS#7

2006-01-17 Thread Dr. Stephen Henson
On Tue, Jan 17, 2006, Bernhard Froehlich wrote: > [EMAIL PROTECTED] wrote: > > > > >Hi! > > > >I need to convert PKCS#7 attached signatures to PKCS#7 detached > >signatures. > > > >Is it possibly? Is there any example? > > > >Thanks anyway! > > I don't think doing this is possible using the op

Re: PKCS#7

2006-01-17 Thread Bernhard Froehlich
[EMAIL PROTECTED] wrote: Hi! I need to convert PKCS#7 attached signatures to PKCS#7 detached signatures. Is it possibly? Is there any example? Thanks anyway! Since noone else answered I'll thay the little I believe to know about the subject... ;) I don't think doing this is possible

RE: Calling 'openssl' utility as a C function?

2006-01-17 Thread Girish Venkatachalam
Dear Kadir, Did you enable mod_ssl while building httpd? Is mod_ssl listed in "httpd -l"? Most likely httpd doesn't recognize the directive "SSLEngine" since mod_ssl is not able to see it. Hope this helps. Also this mail belongs to Apache mailing list. :-) regards, Girish --- kadir iscmng

Re: Calling 'openssl' utility as a C function?

2006-01-17 Thread Bernhard Froehlich
kadir iscmng wrote: Hi , We got SSL Certification from the Verisign .. Now , We have problem with the installation of .Cert Our WEB server uses Apache server on Windows 2003 server Operation System . I tried to install that CERT according to the Steps on Verisign Site .. When I try to mo

RE: Calling 'openssl' utility as a C function?

2006-01-17 Thread kadir iscmng
Hi , We got SSL Certification from the Verisign .. Now , We have problem with the installation of .Cert Our WEB server uses Apache server on Windows 2003 server Operation System . I tried to install that CERT according to the Steps on Verisign Site .. When I try to modify the httpd.config f

Re: Calling 'openssl' utility as a C function?

2006-01-17 Thread Gerrit E.G. 'Insh_Allah' Hobbelt
I ported OpenSSL a few years back to embedded environments for EtcBin/EbsNet (http://www.ebsnetinc.com/); what I did (among other things) is extend the use of the 'MONOLITH' #define to create a single has-it-all demo application with a telnet-based interface. Yes, this requires some code change

Re: x509 CRL v2

2006-01-17 Thread Daniel García Franco
Dr. Stephen Henson wrote: On Mon, Jan 16, 2006, Daniel Garca Franco wrote: Hello! I use the v2 of CRL, and i have to revoke the certificates with 2 extension, CRL Revoke Reason and InvalidityDate, i Know how to pass the first extension to openssl when i revoke a certificate, but i don´t kn