RE: using pfx / pkcs12 as keystore - correction

2006-10-03 Thread Ambarish Mitra
Hi Felix, Have you tried these: http://mark.foster.cc/kb/openssl-keytool.html http://forum.java.sun.com/thread.jspa?forumID=2&tstart=15&threadID=161578&tr ange=15 These pages describe the ways to convert certs/keys from openssl format to Java keystore format (and vice versa). I hope these are

Re: using pfx / pkcs12 as keystore - correction

2006-10-03 Thread Felix Joussein
I have to correct my last post: Thanks for your answer. Unfortunatly it did not work out as excpeted. I have the choice of using either blackdown-jdk-1.4.2 or sun-jdk-1.5. Any of those versions REFUSES TO accepts my .p12 key. Maybe you could be so kind and write me a brief step- by- step of t

Re: using pfx / pkcs12 as keystore

2006-10-03 Thread Felix Joussein
Thans for your answer. Unfortunatly it did not work out as excpeted. I have the choice of using either blackdown-jdk-1.4.2 or sun-jdk-1.5. Any of those versions accepts my .p12 key. Maybe you could be so kind and write me a brief step- by- step of the required openssl commands, which bring succ

RE: using pfx / pkcs12 as keystore

2006-10-03 Thread Ambarish Mitra
"Unknown key spec: Invalid RSA modulus size" from JVM is due to outdated JVM version. JVM should be 1.4 or upwards. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Felix Joussein Sent: Wednesday, October 04, 2006 2:56 AM To: openssl-users@openssl.org Subject

SSL: connect failed..Please help..

2006-10-03 Thread Ferianto siregar
Dear all,   Thank you very much for your time. This is my first message in this forum.   All, I got error message in minisip command prompt when I tried using TLS (Transport Method = TLS and Network Port = 5061).But, without TLS , I can make a call with minisip. The error message says :   A.

error - 'no shared cipher' when from viewing ec cert

2006-10-03 Thread Siew San Yu
Hi, I've compiled successfully Apache (2.2) with OpenSSL (0.9.8b) on win32. Has tested it with success with a self-signed rsa cert. Proceed to generate a ec cert with secp160r1. Was unable to start Apache after changing settings in httpd-ssl.conf. Changes: SSLCertificateFile d:/www/Apache2/conf/s

Re: Interoperable w/ CryptoAPI

2006-10-03 Thread Kyle Hamilton
OpenSSL is as standards-conforming as it's possible to be, to my knowledge. Thus, if CryptoAPI is conformant, it should be essentially a no-op. -Kyle H On 10/3/06, Rich Conlan <[EMAIL PROTECTED]> wrote: Does anybody know how hard it is to make OpenSSL play nice with Window's CryptoAPI? In par

Interoperable w/ CryptoAPI

2006-10-03 Thread Rich Conlan
Does anybody know how hard it is to make OpenSSL play nice with Window's CryptoAPI?In particular, to make it so that a file encrypted under OpenSSL can be decrypted under CryptoAPI and vice-versa?Regards, Richard M. ConlanGoogle, Inc.

using pfx / pkcs12 as keystore

2006-10-03 Thread Felix Joussein
Hello List, Note: The following message has also been posted in java - itext library mailing list! I'm struggling now for almost one day with using an openssl generated .p12 file as my java keystore. I tried a lot of things with openssl and no doubt - I learned a lot, but at the end I found o

RE: Transfer Encoding : Chunked

2006-10-03 Thread David Schwartz
> I am implementing an HTTP 1.1 client in C++ using openssl for SSL. > > Sometimes the Http response I get back says that the > Transfer Encoding : chunked > > I really donot do anything extra here in this case. As usual I do a > SSL_Pending to see if any data is pending in the SSL buffer and if

Re: Segmentation Fault in SSL_CTX_load_verify_locations

2006-10-03 Thread Vincenzo Sciarra
Solved adding SSL_library_init (); thanks Marek Marcola ha scritto: Hello, Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 8321)] 0x4003f866 in SSL_CTX_load_verify_locations () from /usr/lib/libssl.so.0 Here is the code : #define CIPHER_L

Re: Segmentation Fault in SSL_CTX_load_verify_locations

2006-10-03 Thread Vincenzo Sciarra
CTX is NULL as you say! -> (null) Now say : 8423:error:140A90A1:SSL routines:SSL_CTX_new:library has no ciphers:ssl_lib.c:1366: Thanks Marek Marcola ha scritto: Hello, Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 8321)] 0x4003f866 in S

Re: Segmentation Fault in SSL_CTX_load_verify_locations

2006-10-03 Thread Marek Marcola
Hello, > Program received signal SIGSEGV, Segmentation fault. > [Switching to Thread 16384 (LWP 8321)] > 0x4003f866 in SSL_CTX_load_verify_locations () from /usr/lib/libssl.so.0 > > > > Here is the code : > > > #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" > #define CAFILE "/home/ken

Segmentation Fault in SSL_CTX_load_verify_locations

2006-10-03 Thread Vincenzo Sciarra
I have this problem of segmention fault : Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 8321)] 0x4003f866 in SSL_CTX_load_verify_locations () from /usr/lib/libssl.so.0 Here is the code : #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" #define CA

Re: iaik.asn1.CodingException: No ASN.1 AlgorithmID

2006-10-03 Thread Eshwaramoorthy Babu
Thanks Stephen. Your solution works.  Thanks, Babu   On 10/3/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Mon, Oct 02, 2006, Eshwaramoorthy Babu wrote:> Hi,> I have created a private key using the below command and signed the csr > >>openssl genrsa -out host.key> When I try to use the host.

AW: Transfer Encoding : Chunked

2006-10-03 Thread Sascha Kiefer
Well, the best idea is to make it right by really checking how many bytes are missing by implementing a special case when transder encodnd is chunked. You should have a look at the RFC to check how to handle chunked data. HTH, ..sk >Hi All, > >I am implementing an HTTP 1.1 client in C++ using

Transfer Encoding : Chunked

2006-10-03 Thread Vinu Thomas
Hi All, I am implementing an HTTP 1.1 client in C++ using openssl for SSL. Sometimes the Http response I get back says that the Transfer Encoding : chunked I really donot do anything extra here in this case. As usual I do a SSL_Pending to see if any data is pending in the SSL buffer and if not

FW: Minimazing OpenSSL Size

2006-10-03 Thread Amir Yiron
Title: FW: Minimazing OpenSSL Size Hello, I've integrated openssl server (openssl 0.9.7i)  in my embedded SW. Operation System is eCos. My need is to use a constant certificate for a secure web communication with clients. There's no need to dynamically create certifications. certificate