Compile OpenSSL with Visual Stdio 8 & Windows Vista

2008-01-29 Thread Tyler Durden
Hello, I cannot compile and build openssl with Visual Studio 8 & Windows Vista business. I don't know if openssl is compatible with Windows Vista or now it is not possible use and run Openssl in this OS. I have run the configure without any problem and I used masm but I run "nmake -f ms\ntdll.mak

RE: RSA_verify problem

2008-01-29 Thread Chris Brown
I am still having a problem running RSA_verify which returns 'Data too large for modulus' errors. If I check the big number value of the 'signatureValue' and 'Modulus' they are 268628280 and 268628488 respectively which obviously explains the error I am receiving. I have changed my code from using

Re: trusted/chained server certificates, how do I load them on a server.

2008-01-29 Thread Victor Duchovni
On Wed, Jan 30, 2008 at 09:57:27AM +1300, Chris Pugmire wrote: > I have a server application using openssl, and I have a server > certificate which is chained to a root CA via intermediate certificates > > If I load the chained certificates onto the clients, all works well, but > then I have to

re: trusted/chained server certificates, how do I load them on a server.

2008-01-29 Thread Chris Pugmire
I have a server application using openssl, and I have a server certificate which is chained to a root CA via intermediate certificates If I load the chained certificates onto the clients, all works well, but then I have to do this on every client. I feel sure there is some trivial way to load

Re: getting errors when trying to create cert

2008-01-29 Thread Alex Samad
On Sun, Jan 27, 2008 at 01:38:21PM -0800, Montes, Lydia wrote: > Key created ok, with command: > > E:\ptc\apache\bin>openssl genrsa -des3 1024 > servername.key > > > > Then went to create cert: > > > Microsoft Windows [Version 5.2.3790] > (C) Copyright 1985-2003 Microsoft Corp. > > >

Re: It's possible to renew a ca ?

2008-01-29 Thread Victor Duchovni
On Tue, Jan 29, 2008 at 03:12:44PM -0500, Victor Duchovni wrote: > On Mon, Jan 28, 2008 at 05:02:05PM +0100, Guy Deleeuw wrote: > > > Hello all, > > > > I'm new on the list. > > I create a CA in 2003 and she have expired yesterday. > > > > It is possible to renew the CA without re create all cl

Re: It's possible to renew a ca ?

2008-01-29 Thread Victor Duchovni
On Mon, Jan 28, 2008 at 05:02:05PM +0100, Guy Deleeuw wrote: > Hello all, > > I'm new on the list. > I create a CA in 2003 and she have expired yesterday. > > It is possible to renew the CA without re create all clients certificates ? > With great care, yes. You must use the same private key,

It's possible to renew a ca ?

2008-01-29 Thread Guy Deleeuw
Hello all, I'm new on the list. I create a CA in 2003 and she have expired yesterday. It is possible to renew the CA without re create all clients certificates ? Thanks in advance for your respons Guy __ OpenSSL Project

About the fips openssl testsuite

2008-01-29 Thread 施威
Hi Openssl FIPS Team: I have successfully built the fips openssl on a HPUX box, and did a "make test", all the cases passed. but it seems to me that only 2 or 3 fips spicific testcases had been tested. so i checked the test/Makefile, and i didnt find any fips specific testing rules i

getting errors when trying to create cert

2008-01-29 Thread Montes, Lydia
Key created ok, with command: E:\ptc\apache\bin>openssl genrsa -des3 1024 > servername.key Then went to create cert: Microsoft Windows [Version 5.2.3790] (C) Copyright 1985-2003 Microsoft Corp. F:\opt\ptc>cd apache F:\opt\ptc\Apache>cd bin F:\opt\ptc\Apache\bin>openssl req -new -

[FWD] SSL communication error due to SSL alert 40

2008-01-29 Thread Lutz Jaenicke
Forwarded to openssl-users for discussion. Best regards, Lutz - Forwarded message from Kalaiselvan P <[EMAIL PROTECTED]> - To: [EMAIL PROTECTED] Subject: SSL communication error due to SSL alert 40 From: Kalaiselvan P <[EMAIL PROTECTED]> Date: Tue, 29 Jan 2008 17:40:45 +0530 Hi,

Re: How to store Multiple Certificates in PKCS12 File.

2008-01-29 Thread Milinda Pathirage
Hi Cr. Stephen, Thank you for your quick reply. It really helped me to solve my problem. Also mac verifying problem is caused by my mistake. I forgot to initialize things using following functions. SSLeay_add_all_algorithms(); ERR_load_crypto_strings(); Thanks in advance, Milinda Pathirage On

Re: How to store Multiple Certificates in PKCS12 File.

2008-01-29 Thread Dr. Stephen Henson
On Tue, Jan 29, 2008, Milinda Pathirage wrote: > Hi all, > Please apologize me if this is a dumb question. > I am currently involved in project which I need to create key store which > has functions like Java Key Store in C. My requirements is to store several > X509 certificates with owner's cert

Freeing internal SSL buffers?

2008-01-29 Thread ethrbunny
I have OpenSSL running inside of a SOCKET based server to encrypt the IO. Im finding that over time the memory use in the process grows w/re the amount of data served over the socket. When the 'listening' socket closes gracefully I see a small leak but nothing like the amount of growth that I see

Re: FIPS 1.1.2/1.2 validation progress

2008-01-29 Thread Steve Marquess
Kyle Hamilton wrote: As has been mentioned numerous times by Steve Marquess, the FIPS validation process is fraught with peril. It is entirely, from what I gather, rather like playing Chutes & Ladders with a constantly-changing board. I have been holding off on making any announcements rega

Re: openSSL SSL_accept problem on AIX 5.3

2008-01-29 Thread Marek . Marcola
Hello, > I am having some issues with a server application that is based on openSSL. > > Here are the details: > The server application uses OpenSSL ver. 0.9.7g and runs on AIX 5.3. > Sometimes when it processes a client request the SSL_accept() function > returns an error -1 and the SSL_get_err

Re: Doubt with VeriSign certificate and client-server: must I install it on server?

2008-01-29 Thread Marek . Marcola
Hello, > Using cURL with Linux, I want to make a webservice request to a remote > server which requires an X509 cert. > > I got a Trial SSL Certificate by Verisign and obtained three files which I > copied into my machine (client): > - ssl.key (private key, generated by my server) > - verisign.cr