Re: Can openssl-0.9.8e be compiled and used under microsoft windows?

2007-03-09 Thread Park Lee
On March 10, 2007 5:31:28 AM, Geoffrey Coram wrote: >On 03/09/2007 04:19, LiPing <[EMAIL PROTECTED]> wrote: >> Building OpenSSL for Windows CE requires the following external >> tools: >> * Microsoft eMbedded Visual C++ 3.0 * wcecompat compatibility >> library (www.essemer.com.au) * Optionall

RE: Local CA versus thrusted authority CA

2007-03-09 Thread David Schwartz
> However, in a strict local configuration like my testing environment the > concept of trust is non relevant. I'm able to consider my CA and > certifictae > trustfull. And so the problem is only technical. > Basically how to complete (technical) trust between both ? It depends upon the precise c

Re: Local CA versus thrusted authority CA

2007-03-09 Thread Patrick Patterson
On Friday 09 March 2007 17:48:04 you wrote: > On Friday 09 March 2007 16:27:24 Patrick Patterson wrote: > (snip) > > > Not really, what you need to do is ensure that the CA certificate used is > > in the Trusted CA Certificate store on the client. > > > > If you add your own CA to the clients trust

Bad signature rsa_sign.c 235

2007-03-09 Thread Martin Stromberger
Hi, When I try to change the CN in a certificate signing request I get these errors: 7424:error:04077068:rsa routines:RSA_verify:bad signature:rsa_sign.c:235: 7424:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:a_verify.c:168: Example: a) Generate a new certificate signing r

Re: Local CA versus thrusted authority CA

2007-03-09 Thread Bruno Costacurta
On Friday 09 March 2007 19:15:15 David Schwartz wrote: (snip) > No, nothing has to be "aligned". As the error message says, the problem is > that the certificate "is not issued by a trusted authority". > > > Am I correct in this assumption ? > > If yes, what (fields and/or policy ?) needs to be al

Re: Local CA versus thrusted authority CA

2007-03-09 Thread Bruno Costacurta
On Friday 09 March 2007 16:27:24 Patrick Patterson wrote: (snip) > > Not really, what you need to do is ensure that the CA certificate used is > in the Trusted CA Certificate store on the client. > > If you add your own CA to the clients trusted certificate store, this > message will go away. What

Using OpenSSL Engines in OpenSSH

2007-03-09 Thread Stricklin, Raymond J
I am trying to get OpenSSH working with hardware SSL accelleration. There is still a lot I don't understand about how the whole setup is intended to work, and I am hoping some folks on this list will be able to answer some of my questions and help me get further down the path. Basically, I have O

Re: Can openssl-0.9.8e be compiled and used under microsoft windows?

2007-03-09 Thread Geoffrey Coram
So, I have successfully compiled 0.9.8d under Windows CE 2.11 for ARM, MIPS, and SH4 (haven't tried SH3). I'm using them for nPOP/nPOPuk, and e-mail client, so I configured it this way: perl Configure no-rc5 no-idea no-ec VC-CE I would like to make these available for other users, but it seems

Re: Can openssl-0.9.8e be compiled and used under microsoft windows?

2007-03-09 Thread Geoffrey Coram
On 03/09/2007 04:19, LiPing <[EMAIL PROTECTED]> wrote: > Building OpenSSL for Windows CE requires the following external > tools: > * Microsoft eMbedded Visual C++ 3.0 * wcecompat compatibility > library (www.essemer.com.au) * Optionally ceutils for running > automated tests (www.essemer.com.a

Re: How to read a EC_KEY from a certificate

2007-03-09 Thread Jordi Jaen Pallares
Hi Nils, 2007/3/9, Nils Larsch <[EMAIL PROTECTED]>: Jordi Jaen Pallares wrote: > File offset before reading : 0 > File offset after reading : 47 > Error in d2i_X509_fp... > 10976:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:1291: > 10976:error:0D07803A:asn1 encod

Re: How to read a EC_KEY from a certificate

2007-03-09 Thread Nils Larsch
Jordi Jaen Pallares wrote: ... Anyway, I will need to extract (sooner or later) the respective EC keys from the certificate, use X509_get_pubkey() + EVP_PKEY_get1_EC_KEY() (note: both function increase the reference count of the object) ... [EMAIL PROTECTED]:~/Work/test$ ./opencert Opened key

RE: Local CA versus thrusted authority CA

2007-03-09 Thread David Schwartz
> Error validating server certificate for 'https://acer9100:443': > - The certificate is not issued by a trusted authority. Use the >fingerprint to validate the certificate manually! > Certificate information: > - Hostname: acer9100 > - Valid: from Mar 9 14:29:17 2007 GMT until Mar 8 14:2

Re: Local CA versus thrusted authority CA

2007-03-09 Thread Patrick Patterson
On Friday 09 March 2007 10:12:49 Bruno Costacurta wrote: > Hello to everyone, > > I created a client certificate with my own local CA to configure an Apache > + https but receive the following (ie. when working with subversion using > https): > > ... > Error validating server certificate for 'https

Local CA versus thrusted authority CA

2007-03-09 Thread Bruno Costacurta
Hello to everyone, I created a client certificate with my own local CA to configure an Apache + https but receive the following (ie. when working with subversion using https): ... Error validating server certificate for 'https://acer9100:443': - The certificate is not issued by a trusted autho

AIX 5.x file encryption problem

2007-03-09 Thread Harald Latzko
Hello list! I have problems encrypting files with the following command: openssl smime -encrypt -in /tmp/infile -out /tmp/testencrypted -nodetach -binary -des3 -outform DER /tmp/mypub.cer This command is running in several versions of openSSL successfully on several platforms (Linux, MacOS X, Wi

RE: Can openssl-0.9.8e be compiled and used under microsoft windows?

2007-03-09 Thread LiPing
On Fri, 9 Mar 2007 11:14:39 +0300, Victor B. Wagner wrote: > You can also compile with mingw32 and then use DLLs and import> libraries, > created with mingw with Visual studio.> > 2. Can I use openssl under > microsoft windows mobile OS? > > Read the file INSTALL.WCE which is included > into Op