Re: I want to build a man in the middle proxy server application.

2010-07-23 Thread Kyle Hamilton
Typically, https is proxied with the CONNECT method, and as such Apache typically blocks requests for proxying that have https URLs. I believe you might be able to force it with mod_rewrite, with "RewriteEngine on" and "RewriteRule (.*) $1 [P]" or something like that, but I'm not a mod_rewrite go

Re: Wildcard certs?

2010-07-23 Thread Kyle Hamilton
There's a company called StartCom (http://www.startssl.com/) who will do 2-year validity wildcard certs, upon verification of your identity and verification that you have control of the domain for which you are requesting certificates. Oh, and they're included in the latest Microsoft Root Certifi

Re: Wildcard certs?

2010-07-23 Thread Mounir IDRASSI
Hi, All major commercial CAs do provide wildcard SSL certificates and the price is usually high. Googling gives the following links for Comodo, Thawte and Verisign : - http://www.comodo.com/e-commerce/ssl-certificates/wildcard-ssl.php - http://www.thawte.com/ssl/wildcard-ssl-certificates

Wildcard certs?

2010-07-23 Thread Luis Daniel Lucio Quiroz
Just wondering who i must do request for a wildcard cert, for example to accept all the *.mydomain.com Regards, LD __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: I want to build a man in the middle proxy server application.

2010-07-23 Thread Luis Daniel Lucio Quiroz
Le vendredi 23 juillet 2010 06:29:11, vous avez écrit : > Sub : I want to build a man in the middle proxy server application. > > I have experimented so many methods to achieve this. But my application is > failing when I tried to browse from the browser (IE 8 and Firefox 3.7). > > I have configu

RE: I want to build a man in the middle proxy server application.

2010-07-23 Thread Rene Hollan
You DO realize that you will have to resign the remote cert, with a CA your clients trust, right? [SHAMELESS PLUG] Or, buy a WatchGuard product that does HTTPS/DPI ("Deep Packet Inspection"). It's how we scan for malware and block sites inside of HTTPs connections. [/SHAMELESS PLUG]. -Or

I want to build a man in the middle proxy server application.

2010-07-23 Thread rajmohan sk
Sub : I want to build a man in the middle proxy server application. I have experimented so many methods to achieve this. But my application is failing when I tried to browse from the browser (IE 8 and Firefox 3.7). I have configured my browser proxy settings to '4433' port. My application is

RE: Intermediate Cert

2010-07-23 Thread Rene Hollan
If you cert is not signed by a cert that is trusted by popular browsers, you will have to include all certs with it in the apache server config, up to, (not necessarily including) one that browsers trust. Now, this would generally mean all intermediate certs up to a trusted (root) cert. What y

Creating ASN.1 Set of Sets

2010-07-23 Thread decoder
Hello, so far, I've been using i2d_ASN1_SET to create a set of ASN1_INTEGER (to include it in a custom X509 certificate). The problem is, that I need to create a set of sets of ASN1_INTEGER now and I'd like to know whats the best way to do this. What I've tried is using a STACK of STACK of AS

Re: Problems building 1.0.0a on 64-bit Windows XP Pro

2010-07-23 Thread Bryan
On Thu, Jul 22, 2010 at 17:18, Kevin Layer wrote: > I searched the archives and didn't see anything like this. > > I can build on 32-bit XP with no problems. > >        set ASM=ml64 /c /Cp /Cx /Zi >        perl crypto\md5\asm\md5-x86_64.pl tmp32dll\md5-x86_64.asm > Use of uninitialized value $flav

Re: Intermediate Cert

2010-07-23 Thread Jakob Bohm
On 23-07-2010 13:54, Brent Clark wrote: Hiya I installed a Cert (Signed by Comodo) for a client. On restarting the webserver, Firefox was complaining about the new cert, but IE and Safari was not. A friend of mine, said I should try by downloading the intermediate cert from Comodo. and add SSL

Re: Why does my browser give a warning about a mismatched hostname

2010-07-23 Thread Jakob Bohm
On 23-07-2010 10:58, michu162 wrote: I generated the ssl request, I signed it in my CA (openssl) and uploaded signed certificate back to device. I generated also ca.der and uploaded it to my Internet browser. When I trying open ilo my browser give a warning about a mismatched hostname. I'm acce

Intermediate Cert

2010-07-23 Thread Brent Clark
Hiya I installed a Cert (Signed by Comodo) for a client. On restarting the webserver, Firefox was complaining about the new cert, but IE and Safari was not. A friend of mine, said I should try by downloading the intermediate cert from Comodo. and add SSLCACertificateFile to apache. Lo and behol

Access Violation issue

2010-07-23 Thread Anil Tambe
Hello openssl users , We are facing a access violation issue , your thoughts/comments will be helpful .. Below are the details and sequence of events before the Access Violation occurs ... - myexe.exe calls myfunction() which loads and unloads mydll.dll at run time

Why does my browser give a warning about a mismatched hostname

2010-07-23 Thread michu162
I generated the ssl request, I signed it in my CA (openssl) and uploaded signed certificate back to device. I generated also ca.der and uploaded it to my Internet browser. When I trying open ilo my browser give a warning about a mismatched hostname. I'm accessing this device via IP address. I don