Don Dhondt/US/BULL is out of the office.

2006-03-24 Thread Don . Dhondt
I will be out of the office starting 03/24/2006 and will not return until 04/03/2006. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.

RE: Question on error creating server key

2006-03-24 Thread Jeff Gross
New error.. this one is related to the definition of the KEY_DIR. If I just make the key_dir in vars read: set KEY_DIR=C:\OpenVPN\easy-rsa\keys I get the following error: Error opening CA private key C:\OpenVPN\easy-rsa\keysca.key 596:error:02001002:system library:fopen:No such file or direct

signature verification with EVP_VerifyFinal fails

2006-03-24 Thread Antonio A
hi friends of openssl, i am working with smart card to authenticate users to get access my application. the steps to authenticate a user are these: i) creating a random piece of information inside smart card (through PKCS#11) ii) signing the previous piece of information with private key stored i

RE: Question on error creating server key

2006-03-24 Thread Jeff Gross
Yes, I'm ironing it out now. One problem seems to be the path statements under c:\program Files No matter how I format it, it's placing quotes "C:\Program Files\Openvpn\.." So I just reinstalled the package to the root of c, now I'm at c:\Openvpn\Easy-Rsa ,and things are going much smoother.

Blackberry 7520 and failed in SSLv3 read client certificate A

2006-03-24 Thread David Gianndrea
Im trying to figure out why im unable to make an ssl connection to one of my servers with a Blackberry 7520. If I use Firefox or IE I can make the connection with out a problem, but with the Blackberry it fails with " failed in SSLv3 read client certificate". At first I thought it was the apache

Re: extensions-attributes-on the fly

2006-03-24 Thread Saurabh Arora
On 3/24/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Fri, Mar 24, 2006, Saurabh Arora wrote:> hi>> problem:> -> - I want to add custom attributes in the standard x509 extensions, without> patching the source code. > - I want to add new extension along with standard x509 extensio

Re: Question on error creating server key

2006-03-24 Thread Dr. Stephen Henson
On Fri, Mar 24, 2006, Jeff Gross wrote: > Hi, > > I'm new to all this, thank God I found this forum > > When I build the server key using command : build-key-server server > > I keep getting the following error: > > Error opening CA private key "C:\Program Files\OpenVPN\easy-rsa\keys

Re: extensions-attributes-on the fly

2006-03-24 Thread Dr. Stephen Henson
On Fri, Mar 24, 2006, Saurabh Arora wrote: > hi > > problem: > - > - I want to add custom attributes in the standard x509 extensions, without > patching the source code. > - I want to add new extension along with standard x509 extension, without > patching the source code. > say, addi

extensions-attributes-on the fly

2006-03-24 Thread Saurabh Arora
hiproblem:-- I want to add custom attributes in the standard x509 extensions, without patching the source code.- I want to add new extension along with standard x509 extension, without patching the source code. say, adding an attribute :attribute ::= SEQUENCE {type    attributetype ,val

Question on error creating server key

2006-03-24 Thread Jeff Gross
Hi, I'm new to all this, thank God I found this forum When I build the server key using command : build-key-server server I keep getting the following error: Error opening CA private key "C:\Program Files\OpenVPN\easy-rsa\keys"/ca.key 2648:error:0200107B:system library:fopen:Unknown

Re: [Newbie] Conversion PEM --> DER (pkcs7) fails with demo certificate

2006-03-24 Thread Rainer Menzner
Olaf Gellert wrote: Rainer Menzner wrote: 2) Create a binary encoded DER file as a public certificate: openssl.exe pkcs7 -inform PEM -outform DER -in pca-cert.pem -out test1.cer -text Well, what do you need? If you just want a DER file for a single certificate, just use: openssl x509