Re: missing steps with CRLs

2010-02-04 Thread Adam Grossman
On Thu, 2010-02-04 at 15:59 -0500, Adam Grossman wrote: > On Thu, 2010-02-04 at 20:17 +0100, Dr. Stephen Henson wrote: > > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > > > On Thu, 2010-02-04 at 18:09 +0100, Dr. Stephen Henson wrote: > > > > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > > >

RE: PKCS#12 Problems

2010-02-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dan Letkeman > Sent: Thursday, 04 February, 2010 14:36 > So i'm transferring it with FTP, could that be the problem? Any other > way to transfer it to a windows machine? > On Thu, Feb 4, 2010 at 11:24 AM, Patrick Patterson > wrote: > > How a

Re: missing steps with CRLs

2010-02-04 Thread Adam Grossman
On Thu, 2010-02-04 at 20:17 +0100, Dr. Stephen Henson wrote: > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > On Thu, 2010-02-04 at 18:09 +0100, Dr. Stephen Henson wrote: > > > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > > > > > hello once again, > > > > > > > > i am trying to get CRLs wo

Re: PKCS#12 Problems

2010-02-04 Thread Dan Letkeman
I tried re ordering the commands and tried renaming it to pfx and it doesn't make any difference. openssl pkcs12 -in proxy.p12 -info -clcerts This seems to work fine. It asked me for the password, shows me the Certificate, then asked me for the pem pass phrase, and shows me the Private Key. So i

Legacy renegotiation in 0.9.8m and "notlsext"

2010-02-04 Thread Victor Duchovni
It was not clear to me whether the new code in 0.9.8 to support secure renegotiation requires "tlsext" support, or is still enabled even with OpenSSL 0.9.8m Configured with "notlsext" (I can't deploy a "tlsext" build of 0.9.8m, because this breaks binary compatibility of shared libraries with prev

Re: missing steps with CRLs

2010-02-04 Thread Dr. Stephen Henson
On Thu, Feb 04, 2010, Adam Grossman wrote: > On Thu, 2010-02-04 at 18:09 +0100, Dr. Stephen Henson wrote: > > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > > > hello once again, > > > > > > i am trying to get CRLs working for client certs. i have read about a > > > million different ways of

Re: missing steps with CRLs

2010-02-04 Thread Adam Grossman
On Thu, 2010-02-04 at 18:09 +0100, Dr. Stephen Henson wrote: > On Thu, Feb 04, 2010, Adam Grossman wrote: > > > hello once again, > > > > i am trying to get CRLs working for client certs. i have read about a > > million different ways of doing this, but this is how i am doing it: > > > > X509_C

Re: PKCS#12 Problems

2010-02-04 Thread Patrick Patterson
On February 4, 2010 11:38:36 am Dan Letkeman wrote: > Ok, when I try to import it into Internet Explorer and I get this > error: "The file type is not recognizable. Select another file" > That's really strange - although it SHOULDN'T make an iota of difference, rename your .p12 to .pfx, and see

Re: missing steps with CRLs

2010-02-04 Thread Dr. Stephen Henson
On Thu, Feb 04, 2010, Adam Grossman wrote: > hello once again, > > i am trying to get CRLs working for client certs. i have read about a > million different ways of doing this, but this is how i am doing it: > > X509_CRL *x509_c; > X509_STORE *store = SSL_CTX_get_cert_store(ctx); > X509_LOOKUP*

Re: PKCS#12 Problems

2010-02-04 Thread Dan Letkeman
Ok, when I try to import it into Internet Explorer and I get this error: "The file type is not recognizable. Select another file" So i'm guessing I did something wrong. The CA certificate for the company we bought the certificate from is already in the Astaro and in Internet Explorer's CA list.

missing steps with CRLs

2010-02-04 Thread Adam Grossman
hello once again, i am trying to get CRLs working for client certs. i have read about a million different ways of doing this, but this is how i am doing it: X509_CRL *x509_c; X509_STORE *store = SSL_CTX_get_cert_store(ctx); X509_LOOKUP* lu = X509_STORE_add_lookup(store, X509_LOOKUP_file()); X50

Re: OpenSSL PKCS11 engine implementation

2010-02-04 Thread samuel smith
Hi Christian, I have gone through the engine_pkcs11 source code and I was not able to find any RSA encryption and decryption implemented by this engine . Thanks in advance Samule On Thu, Feb 4, 2010 at 8:39 PM, Christian Hohnstaedt < christ...@hohnstaedt.de> wrote: > Hi Samuel, > > you are awar

Re: OpenSSL PKCS11 engine implementation

2010-02-04 Thread Christian Hohnstaedt
Hi Samuel, you are aware of the PKCS#11 engine from the OpenSC project ? http://www.opensc-project.org/engine_pkcs11 If this is not already the engine you want to implement, maybe its sources could give some hints and inspirations. Christian On Thu, Feb 04, 2010 at 06:24:13AM -0800, Sa

Re: PKCS#12 Problems

2010-02-04 Thread Patrick Patterson
On February 3, 2010 05:57:36 pm Dan Letkeman wrote: > The server i'm trying to import it into is and Astaro Firewall. > www.astaro.com. I have also just tried to import it into Internet > Explorer on Windows XP and I get an error. > Again - what error do you get - just saying that you get an error

OpenSSL PKCS11 engine implementation

2010-02-04 Thread Samuel123smith
Hi ALL, I was trying to write openssl pkcs11 engine implementation for RSA . Now ,I am stuck with the implementating RSA padding which is required for RSA encryption,decryption ,signing and verifying. I was trying to find the mechanism which is needed for each padding. RSA_PKCS1_PADDING ---> M

Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-02-04 Thread Ujwal Chinthala
Hi, I used X509_add1_ext_i2d(x509Cert, NID_subject_key_identifier, keyid, 0, 0); to set the SKID value and it works now!! Thanks for all the help!! -Ujwal

Stunnel 4.31 released

2010-02-04 Thread Michal Trojnara
The ChangeLog entry: Version 4.31, 2010.02.03, urgency: MEDIUM: * New features - Log file reopen on USR1 signal was added. * Bugfixes - Some regression issues introduced in 4.30 were fixed. SHA-1 value for stunnel-4.31.tar.gz: f51fc544a0554f6eee2bfca1fcb8ddcb8386ce32 Home page: http://stunn