Re: Printer-friendly documentation? (Newbie)

2006-05-29 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon schrieb: Hello Simon, > What I'm looking for is a way to get a PDF file or something like > that, so I can ask the printer to print 2-pages per page + > recto/verso, this way I can kill 75% less trees! ;) > That's what I was talking about when

Re: [error] Certificate Verification: Error (34): unhandled critical extension

2006-05-29 Thread Diarmuid Curtin
Hi Stephen,   It seems that the Extension 'Name Constraints' marked as critical is causing the issue.   What is strange is that openssl can verify the cert, however, it seems that potentially mod_ssl calls openssl differently?   When you say - "Yes X509_V_FLAG_IGNORE_CRITICAL will do it but you ma

Re: ASN1_ANY

2006-05-29 Thread Dr. Stephen Henson
On Mon, May 29, 2006, Saurabh Arora wrote: > hi all > > heres another lead , but with few problems : > > using this function we can set the type : > - > void ASN1_TYPE_set(a,type,value) > -- > where > ASN1_TYPE *a; > int type; > char *value; > > so wen i try this with the type -

Re: Certificate error FIXED

2006-05-29 Thread Lawrence Rose
Thanks Ted, Suresh, and Marek for your help!  I'm back on the merry-go-round again. -- larry Lawrence L. Rose 190 Park Avenue Daytona Development Florham Park, NJ 07932 AT&T Labs - Research

Re: Junk code after enc/dec by OpenSSL

2006-05-29 Thread Stefan Kuttler
On 0, Xu Gang <[EMAIL PROTECTED]> writes: > Hi, fellows. Thanks a lot for the hint. I'm using Blowfish in cfb mode. > Will there be any "padding not removed" problem with this cipher? > > Actually I'm very new here. I wonder if anyone can also clarify to me some > basic concepts as well. I real

Re: ASN1_ANY

2006-05-29 Thread Saurabh Arora
hi all heres another lead , but with few problems : using this function we can set the type : - void ASN1_TYPE_set(a,type,value) -- where ASN1_TYPE *a; int type; char *value; so wen i try this with the type - V_ASN1_SEQUENCE, what should i add in the field (char *)value ?? do i

Re: Certificate error

2006-05-29 Thread Marek Marcola
Hello, > $ openssl s_client -cert solar_client.pem -CAfile private/root.pem > Enter pass phrase for solar_client.pem: > CONNECTED(0003) > depth=0 /C=US/ST=NJ/L=Florham Park/O=AT&T > Research/CN=solarium.research.att.com > verify error:num=20:unable to get local issuer certificate > verify retu

Re: Certificate error

2006-05-29 Thread Lawrence Rose
Ted: Thanks for the s_server/s_client suggestion.  Here is the complete output.  The server appears to be ok but not the client???  $ openssl x509 -subject -issuer -dates -noout -in client.pem subject= /C=US/ST=NJ/L=Florham Park/O=AT&T Labs - Research/CN=solarium.research.att.com issuer= /C=

Re: Certificate error

2006-05-29 Thread Suresh
Hi, are you sure that you have replaced the new root.pem on the client side, and put new server CERTIFICATE and new PRIVATE KEY pair on the server side? - Suresh On Sun, 28 May 2006 22:21:22 -0400 Lawrence Rose <[EMAIL PROTECTED]> wrote: > Hi: > > I setup the four openSSL examples in Viega et

Re: ASN1_ANY

2006-05-29 Thread Saurabh Arora
hi all heres one lead .. which makes me to do r2i but NOT i2r ATTRIBUTE *attr; ATTRIBUTE1 *attr_1; attr->type = OBJ_nid2obj(NID_of_Attribute1); if ((attr->value=sk_ASN1_TYPE_new_null()) == NULL) goto err; if(!(attr_1 = ATTRIBUTE1_new())) goto err; /* after setting the field valu

ASN1_ANY

2006-05-29 Thread Saurabh Arora
hi i am having a problem in dealing ASN1_ANY implemntation. i need to put a wrapper of ATTRIBUTE type for two attributes(ATTRIBUTE1 and 2) in my X509V3 extension : -- EXTENSION :: = SEQUENCE SIZE(1..MAX) OF ATTRIBUTES ATTRIBUTE :: = SEQUENCE {

Re: Certificate error

2006-05-29 Thread Bernhard Froehlich
Lawrence Rose wrote: Hi: I setup the four openSSL examples in Viega et al with certs and ran fine until the 30 day certs expired. Now after I cut a new root.pem and sereverCA.pem I cannot pass certificate verification. Where have I gone wrong? I've tried everything these past several days