Re: SSL: Not Able to Connect with Secure Site from C++ / Solaris

2007-06-14 Thread Vishal V
Dear Zack, Thanks for your inputs but I think the problem lies somewhere else Please see the analysis result below 1. Telnet Result: Server>>telnet remote_server.com 8444 Trying 140.11.111.11... Connected to remote_server.com. Escape character is '^]'. Connection closed by foreign host. Does it

Re: SSL: Not Able to Connect with Secure Site from C++ / Solaris

2007-06-14 Thread Zack Payton
Sounds to me like a network problem. Try to telnet to the server you are trying reach on whichever port to validate network connectivity. netcat also works very well for general tcp testing. socat/stunnel are also very useful for network testing with ssl connections. Good Luck! Z On 6/14/07, V

Re: Client Certificate requested! Or not?

2007-06-14 Thread Jan F. Schnellbaecher
Hi Stephen, Dr. Stephen Henson wrote: > > Servers can renegotate an SSL connection and request a client certificate > later. This might be due to a script or clcking on a "login" link for example. > Oh, I didn't remember this! Thanks for your quick help. Jan signature.asc Description: Open

Re: Client Certificate requested! Or not?

2007-06-14 Thread Dr. Stephen Henson
On Thu, Jun 14, 2007, Jan F. Schnellbaecher wrote: > Hello, > > When I use my browser to go to https://creditportal.bankofamerica.com/ I am > redirected to a page telling me that there is something wrong with my client > certificate (the fact is that I don't have one). > > But when I am looking

SSL: Not Able to Connect with Secure Site from C++ / Solaris

2007-06-14 Thread Vishal V
Hi Experts, I am a newbie with SSL/ gSOAP and would like your help in the problem described below Problem Statement Program stops with error during process of connection establishment with the secured server Requirement: Use gSOAP to connect with a secure site from a C++ progr

Re: Generating RSA key fingerprint from certificate file

2007-06-14 Thread Victor Duchovni
On Thu, Jun 14, 2007 at 09:00:51AM -0400, Chris Hatko wrote: > When I ssh into a box it presents me with a rsa finger print as below: > > The authenticity of host 'samplehost (xxx.xxx.xxx.xxx)' can't be > established. > RSA key fingerprint is 2f:e4:d2:75:5a:a1:55:b4:42:54:69:91:72:dd:72:4a > > I

Generating RSA key fingerprint from certificate file

2007-06-14 Thread Chris Hatko
When I ssh into a box it presents me with a rsa finger print as below: The authenticity of host 'samplehost (xxx.xxx.xxx.xxx)' can't be established. RSA key fingerprint is 2f:e4:d2:75:5a:a1:55:b4:42:54:69:91:72:dd:72:4a I'd like to confirm which certificate is being used on this box. To do this

Client Certificate requested! Or not?

2007-06-14 Thread Jan F. Schnellbaecher
Hello, When I use my browser to go to https://creditportal.bankofamerica.com/ I am redirected to a page telling me that there is something wrong with my client certificate (the fact is that I don't have one). But when I am looking at a tcp dump I cannot find that the server asks for a client cert

RE: Urgent Help in regarding openssl library

2007-06-14 Thread lavanya.golla
Hi, Thank you for the repsonse. But what can be the reason for bad key. Can it be that client encrypted with a different session key and the server is decrypting with another session's key. Mostly we are seeing this fault when fresh negotiation happens. Thanks & Regards, Lavanya Golla. _

RE: Urgent Help in regarding openssl library

2007-06-14 Thread Marek Marcola
Hello, > In continuation with the error we have motioned before we have the > below query:- > > If an SSL record has no padding bytes then how does openSSL handle it? If we are talking about block cipher used to establish SSL connection like DES or AES then padding is always used. When any side (

Re: util/libeay.num

2007-06-14 Thread Brendan Kennedy
Thanks Victor. I am on Linux, so I will ignore these updates. Best Regards, Brendan On 6/14/07, Victor B. Wagner <[EMAIL PROTECTED]> wrote: On 2007.06.14 at 11:15:25 +0100, Brendan Kennedy wrote: > Hi All, > > I'm trying to install a patch for 0.9.7c on 0.9.8a OpenSSL. This > involves doing th

Re: util/libeay.num

2007-06-14 Thread Victor B. Wagner
On 2007.06.14 at 11:15:25 +0100, Brendan Kennedy wrote: > Hi All, > > I'm trying to install a patch for 0.9.7c on 0.9.8a OpenSSL. This > involves doing things by hand. Anyway, there is the following update: > > > What is libeay.num used for and can I add this change to the end of > the list, in

util/libeay.num

2007-06-14 Thread Brendan Kennedy
Hi All, I'm trying to install a patch for 0.9.7c on 0.9.8a OpenSSL. This involves doing things by hand. Anyway, there is the following update: diff -pburN -x certs openssl-0.9.7c/util/libeay.num openssl-0.9.7c-pkcs11_engine/util/libeay.num --- openssl-0.9.7c/util/libeay.num 2003-09-28 04:25