Re: [openssl-users] OpenSSL FIPS test failure starting from version 1.0.2g

2016-03-29 Thread Aaron
Thank you very much, Viktor. It works. Regards, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-FIPS-test-failure-starting-from-version-1-0-2g-tp65320p65325.html Sent from the OpenSSL - User mailing list archive at Nabble.com. -- openssl-users mailing list To

[openssl-users] OpenSSL FIPS test failure starting from version 1.0.2g

2016-03-28 Thread Aaron
ror 1 make[1]: Leaving directory `/tzedek_ocsdev/qun/crs/797167/openssl_diff/openssl-1.0.2g.test/test' make: *** [tests] Error 2 Anyone knows how to fix the issue please? Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-FIPS-test-fai

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-16 Thread Aaron
Thank you very much, jjf. Regards, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62402.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-16 Thread Aaron
Hello, Anyone knows how to check what is updated in commit 9501418ea2287658d1a11ce888ff97fa49e9164d ? Any help is appreciated. Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62344.html Sent from the

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-16 Thread Aaron
og I wonder if you could show me what is updated in the commit or let me know how to check it? Your help is appreciated. Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62336.html Sent fro

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-15 Thread Aaron
core developer). Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62326.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-15 Thread Aaron
Hi, Anyone knows how to check what is updated in commit 544058202be49a6 ? Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62291.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

2016-01-14 Thread Aaron
know how to fix the issue? Thanks a lot in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289.html Sent from the OpenSSL - User mailing list archiv

Re: [openssl-users] OpenSSL 1.0.1q build fails on RS6000, SunSparc and HPIA

2016-01-04 Thread Aaron
Thank you very much, Michael. It works. Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-1-0-1q-build-fails-on-RS6000-SunSparc-and-HPIA-tp62001p62018.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] OpenSSL 1.0.1q build fails on RS6000, SunSparc and HPIA

2016-01-04 Thread Aaron
L/openssl-1.0.1q/crypto' make: *** [depend] Error 1 Anyone knows how to solve this issue? Any suggestion is appreciated. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-1-0-1q-build-fails-on-RS6000-SunSparc-and-HPIA-tp62001.html Sent from the Ope

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-23 Thread Aaron
Hello Andy and David, As the feature owners, would you please give me some tips for how to use the functionality of the feature? Thanks, Aaron The Changes between 1.0.1l and 1.0.2 [22 Jan 2015] ... *) Support for SPARC Architecture 2011 crypto extensions, first implemented in SPARC

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-21 Thread Aaron
ption in Oracle website was obsolete. But my test results could not verify my idea. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Can-OpenSSL-applications-utilities-use-SunSPARC-crypto-accelerators-tp59163p59218.html Sent from the OpenSSL - User mailing

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-19 Thread Aaron
utilize the crypto accelerator? Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Can-OpenSSL-applications-utilities-use-SunSPARC-crypto-accelerators-tp59163p59198.html Sent from the OpenSSL - User mailing list archive at Nabble.com. _

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-15 Thread Aaron
pport (ubsec) UBSEC hardware engine support (gost) Reference implementation of GOST engine 2) This is the default 'openssl' installed in Solaris 11.1 ksol1% /usr/bin/openssl engine (t4) SPARC T4 engine support (dynamic) Dynamic engine loading support (pkcs11) PKCS #11 engine support Anybo

[openssl-users] How to let OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-14 Thread Aaron
enSSL utility 'openssl' built by me does not use the hardware crypto accelerators at all. I wonder if anyone knows the reason. Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-let-OpenSSL-applications-utilities-use-SunSPARC-crypto-ac

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

2015-07-14 Thread Aaron
Some additional information here. When testing the default openssl installed in /usr/bin/ on Solaris 11, I saw a much better result below. Hence I believe OpenSSL utility 'openssl' built by me does not use the hardware crypto accelerators at all. Anyone knows the reason? Thanks, Aar

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

2015-07-14 Thread Aaron
#x27;openssl' on Solaris 11.1 using the following commands. Configure no-idea no-mdc2 no-rc5 no-asm solaris64-sparcv9-cc -KPIC make clean make make test make install Anyone knows how to let OpenSSL applications or utilities use SPARC crypto accelerator? Thanks in advance, Aaron -- Vie

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

2015-06-22 Thread Aaron
Found this, so the feature has been implemented. Aaron Changes between 1.0.1l and 1.0.2 [22 Jan 2015] ... *) Support for SPARC Architecture 2011 crypto extensions, first implemented in SPARC T4. This covers AES, DES, Camellia, SHA1, SHA256/512, MD5, GHASH and modular exponentiation

[openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

2015-06-22 Thread Aaron
ing to 'Support for SPARC Architecture 2011 crypto extensions'. My question is if the support for SPARC architecture crypto extensions has been Implemented yet? Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Has-the-support-for-SPARC-

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-15 Thread Aaron
>Does your test case result in ECDHE being used when you change only >the protocol on both ends from ssl3 to tls1? Yes, I tested and verified this. Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-u

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-12 Thread Aaron
Thanks so much, Viktor. Hence, this is an expected behavior change. In this case I will update my application. Aaron. -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58637.html Sent from the OpenSSL - User mailing

Re: [openssl-users] The default cipher of executable 'openssl'

2015-06-11 Thread Aaron
the issue in 1.0.2 is not the same as the issue in 1.0.1m. The issue started to appear in 1.0.2 rather than 1.0.2a. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58631.html Sent from the

Re: [openssl-users] The behavior change of command line utility -- 'openssl'

2015-06-10 Thread Aaron
I wonder if this is an expected behavior change or it is a bug. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58578.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] The default cipher of executable 'openssl'

2015-06-10 Thread Aaron
e the default cipher back to ECDHE-RSA-AES256-SHA? Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-default-cipher-of-executable-openssl-tp58557.html Sent from the OpenSSL - User mailing list archive at Nabble.com. _

[openssl-users] Default ciphersuite has changed from 1.0.1l to 1.0.2a?

2015-05-07 Thread Aaron
() I noticed that in routine ssl_get_cipher_by_char() the internal cipher name it gets is DHE_RSA_AES256_SHA which should be corresponding to DHE_RSA_WITH_AES_256_CBC_SHA. My question is if this behavior change is expected? Thanks in advance, Aaron -- View this message in context: http://openssl

[openssl-users] Is there any plan for FIPS to be supported on Linux-aarch64?

2015-04-05 Thread Aaron
, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Is-there-any-plan-for-FIPS-to-be-supported-on-Linux-aarch64-tp57389.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users mailing list To

RE: Apache SSL proxy to Weblogic fails

2014-09-23 Thread Stromas, Aaron
work. Best regards, -a Aaron Stromas | RSA The Security Division of EMC | Practice Consultant | Identity & Fraud Protection Practice | M – 240 271 64 58 | aaron.stro...@rsa.com<mailto:aaron.stro...@rsa.com> From: owner-openssl-us...@o

RE: Apache SSL proxy to Weblogic fails

2014-09-19 Thread Stromas, Aaron
artHandshake(Unknown Source) at weblogic.server.channels.DynamicSSLListenThread$1.run(DynamicSSLListenThread.java:130) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201) at weblogic.work.ExecuteThread.run(ExecuteThread.java:173 Best regards, -a A

Apache SSL proxy to Weblogic fails

2014-09-19 Thread Stromas, Aaron
te: SSL negotiation finished successfully [Thu Sep 18 09:32:14 2014] [info] [client 141.1.3.134] Connection closed to child 2 with standard shutdown (server aaproxiedel1:443) Best regards, -a ____ Aaron Stromas | RSA The Security Division of EMC | Practice Cons

RE: New and bleeding - Install Win64 problems

2014-04-15 Thread Aaron Bahmer
Call me wimpy, but after six hours of fighting the compiling process, I went with the slproweb binary. New certificates are also in place. Thanks for the help--I'm no longer bleeding! == Aaron Bahmer Director, Instructional Technology Eastern Wyoming College http://ewc.wy.edu | (307) 532-8

New and bleeding - Install Win64 problems

2014-04-14 Thread Aaron Bahmer
e to run. If I change to the 32bit installation from its instruction file, the nmake command still fails with this same error. Could this still be a path problem? Or??? Thanks. == Aaron Bahmer Director, Instructional Technology Eastern Wyoming College http://ewc.wy.edu | (30

CRYPTO_set_mem_functions() Doesn't Work in Version 1.0.1b

2013-10-04 Thread Aaron
on/default/Modules/_ssl.c: Anyone have encountered the same issue? Will this be fixed? Thanks a lot, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/CRYPTO-set-mem-functions-Doesn-t-Work-in-Version-1-0-1b-tp46745.html Sent from the OpenSSL - User mailing list

Re: KDF algorithms

2013-07-05 Thread Aaron
Thanks so much for answering my question, Matthew. -- View this message in context: http://openssl.6102.n7.nabble.com/KDF-algorithms-tp45762p45779.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __ OpenSS

KDF algorithms

2013-07-03 Thread Aaron
800-56A) Now my company is going to use OpenSSL instead. I checked OpenSSL and it seems to me that OpenSSL doesn't support these KDF algorithms. My question is - is there any way to implement these algorithms in OpenSSL? Thanks so much in advance, Aaron -- View this message in co

Re: nonblocking implementation question

2009-05-28 Thread Aaron Wiebe
d be surprised if this wasn't a common bit of misunderstanding for developers. -Aaron __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@

Re: nonblocking implementation question

2009-05-28 Thread Aaron Wiebe
On Tue, May 26, 2009 at 5:27 PM, Victor Duchovni wrote: > On Tue, May 26, 2009 at 05:02:59PM -0400, Aaron Wiebe wrote: > >> >> You're looking for a BIO_s_mem. >> > >> > No, he is looking for BIO_new_bio_pair(3) and SSL_set_bio(3). So, apologies for ha

Re: nonblocking implementation question

2009-05-26 Thread Aaron Wiebe
into the openssl api. I expect the API to do one thing and one thing only: provide me the necessary information to handle an SSL connection. Not handle it for me. Not sure if I'm asking this well... -Aaron __ OpenSSL Pr

nonblocking implementation question

2009-05-26 Thread Aaron Wiebe
ists API's that will let me take this route. If anyone knows of an implementation out there like this, I'd love to see it. Thanks! -Aaron __ OpenSSL Project http://www.openssl.org User

openssl-0.9.8k.tar.gz

2009-04-13 Thread Chuck Aaron
I have saved this file off the openssl site to my documents. I am trying to copy the *.gz file with secure fx from my documents and the Alpha server using vms 8.3 and it will not allow me to transfer the file. Any ideas on how I get it there to unzip it? Thanks, Chuck __

test

2009-04-13 Thread Chuck Aaron
__ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

SSL and LDAP

2008-04-25 Thread aaron . angel
Greetings... We are trying to sync up the SSL and LDAP configurations and we are having problems with the SSL certificates allowing Access when LDAP has Locked the Account. Do you have any suggestions ? Thanks Aaron Angel -- "NOTICE: The information contain

Openssl

2008-04-18 Thread Chuck Aaron
What is the command please to view the entire contents of a certificate? Thank you, Chuck Kyle Hamilton wrote: ergh. My apologies for not catching that. You're right, it shouldn't matter on the client side. Okay... going back to basics (I'm sorry if this seems a bit patronizing, I honestly

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
The system is 11.11. I'm *pretty* sure everything has been compiled with gcc. I'm compiling apache with gcc, but OpenLDAP and Openssl might have been compiled with something different. The apache install that works was definitely also compiled with gcc and uses the same install of OpenSSL and Ope

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
ot;waiting..." state. This installation has no mention in the ldd output of links to the 0.9.8 so it should be, as far as I can tell, using ONLY the 0.9.7 system, OS installed Openssl libraries. Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

RE: SSL Library Error

2007-09-12 Thread Aaron Smith
ssage- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 4:12 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 03:34:13PM -0400, Aaron Smith wrote: > Looking at the output of LDD closer,

RE: SSL Library Error

2007-09-11 Thread Aaron Smith
EMAIL PROTECTED] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 4:12 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 03:34:13PM -0400, Aaron Smith wrote: > Looking at the output of LDD closer, it looks like the httpd binary is > lin

RE: SSL Library Error

2007-09-11 Thread Aaron Smith
D] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 1:57 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 01:43:50PM -0400, Aaron Smith wrote: > I apologize in advance if this is not the correct forum for this > question. I haven't had

SSL Library Error

2007-09-11 Thread Aaron Smith
I apologize in advance if this is not the correct forum for this question. I haven't had much luck in the apache forums. I have an apache 2.0.55 installation that I'm attempting to recompile on an HP-UX 11 system. It has mod_ssl 2.0.66 and I have OpenSSL 0.9.8d installed in /opt/openssl098d. Th

Custom oid in openssl.cnf

2007-06-12 Thread Aaron Barnes
A quick question for everyone... In the openssl.cnf, by default there is a new_oids section with a testoid line to serve as an example. So if I have a unique assigned oid, can I just remove the # on the testoid1 line? I recall reading someone mentioning using a line of dc=(oid number) instead.

Re: Recall: do_cipher function

2007-05-01 Thread Aaron Turner
_ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing &a

Re: openssl tool vs. EVP API missmatch for desx & des-ede3-cbc

2007-04-30 Thread Aaron Turner
crap... hit send not save... rest of the email is below On 4/30/07, Aaron Turner <[EMAIL PROTECTED]> wrote: I'm having a problem under OS X (10.4.9/Intel) where Openssl 0.9.8e (compiled from source) is returning different encrypted values using the cli (openssl enc) and the EVP in

openssl tool vs. EVP API missmatch for desx & des-ede3-cbc

2007-04-30 Thread Aaron Turner
I'm having a problem under OS X (10.4.9/Intel) where Openssl 0.9.8e (compiled from source) is returning different encrypted values using the cli (openssl enc) and the EVP interface for desx and des-ede3-cbc. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap ed

Openssl root and subordinate, CA creation problem

2007-02-14 Thread Aaron Barnes
I've setup an openssl root and a subordinate CA. I have successfully signed CA certificate for the subordinate from the root (used the -newreq option), however when I execute the 'ca.pl -newca' it doesn't set up the subordinate authority at all. When it asks for the CA certificate filename, I poi

Newca error, -create_serial

2007-02-05 Thread Aaron Barnes
Let me preface first by saying I did see some previous users had this problem also. I've even gone so far as to completely wipe the system and start fresh only to have the same issue. Running a FreeBSD 6.2 server with OpenSSL 0.9.8d. After I do the installation, I execute the CA.pl -newca opti

RE: OpenSSL with Windows subordinates

2006-12-29 Thread Aaron Barnes
laced elsewhere? It didn't work when I placed it in the v3_ca section. Thanks, Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 15:47 To: openssl-users@openssl.org Subject: Re: OpenSSL wi

RE: OpenSSL with Windows subordinates

2006-12-28 Thread Aaron Barnes
ow many tiers I want to set up in the overall PKI. I'll also email you copies of the certificates separately. Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 12:34 To: openssl-users@openssl

RE: OpenSSL with Windows subordinates

2006-12-28 Thread Aaron Barnes
, the OpenSSL root issued the certificate as a simple 'machine' cert, not as a subordinate CA. Am I on the right track? Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 11:55 To: ope

RE: OpenSSL with Windows subordinates

2006-12-28 Thread Aaron Barnes
ficate's basic constraint extension has not been observed." Does this mean I may have something configured incorrectly in the openssl.cnf file? One bit of good news though is that I no longer have to export the certificate into .der format; the .pem file worked just fine. Aaron

RE: OpenSSL with Windows subordinates

2006-12-27 Thread Aaron Barnes
ot;The certificate is not a CA certificate". I also executed the command you suggested and tried installing the .der file; it gives the same error. Regards, Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: We

OpenSSL with Windows subordinates

2006-12-27 Thread Aaron Barnes
I have an OpenSSL CA running on a BSD 6.1 machine as the root, and am trying to have that act as the parent to subordinate Windows online enterprise CAs. The installation went fine. I signed the Windows subordinate CA cert request with SSL, then converted it to pkcs12 to be installed. That's

RE: Wierd Linking issue with 0.9.8d

2006-12-21 Thread Aaron Smith
Ah! Excellent! That did indeed correct that annoying error. Thank you. Aaron Smith[EMAIL PROTECTED] System Administrator (269) 337-7496 Kalamazoo College -Original Message- From: [EMAIL PROTECTED

Wierd Linking issue with 0.9.8d

2006-12-21 Thread Aaron Smith
did I do wrong with the install here to cause this to happen? ---- Aaron Smith[EMAIL PROTECTED] System Administrator (269) 337-7496 Kalamazoo College

N00B needs csr/key help

2006-11-01 Thread Aaron Martinez
assword file is hardcoded soemhow into the key and it would be found? I would just try these things, but of course i have to go through the whole process of generating a new csr and getting new keys every time i do that from godaddy. Thanks in

RE: Certificate Verification

2006-10-12 Thread Aaron Smith
add the CA certificate to cacert.pem default openssl CA certificate   Simply:   cat MScaCERT.pem >> cacert.pem     2006/10/12, Dr. Stephen Henson <[EMAIL PROTECTED]>: On Wed, Oct 11, 2006, Aaron Smith wrote: > Ok.  This is hopefully a

Certificate Verification

2006-10-11 Thread Aaron Smith
    Ok.  This is hopefully a simple question, and one that I see quite a bit in the archives.  However, everything I’ve tried and gleaned from searching the archives have come up nothing.  I have  server certificate from a Microsoft Domain Controller that was created via MS’s certif

OpenSSL 0.9.8a Crashes Apache--and a Fix

2006-01-17 Thread Aaron Greenspan
ompatibility issue" alluded to on the OpenSSL home page?) Though I'm not sure what the technical difference is between the system types, all of which sound generic to me, I think someone should probably look into it if no one has already. Hope this helps someone... Aaron Aaron Gree

How to disable id and password check

2006-01-10 Thread Chuck Aaron
Can anyone tell me how to disable id and pw checking when entering a specific web site. I'd like to turn it completely off. Thanks, Chuck Mark wrote: my last mail seem to be lost somewhere.. I got it! Hi all, Im testing an SSL server with s_client. I want to implement client authent

RE: validifying RSA key fingerprint

2005-05-04 Thread Aaron P. Martinez
On Wed, 2005-05-04 at 14:18 -0700, Miles Bradford wrote: > User a class A or B IP > If you're offsite - your 192.X.X.X probably won't work. The IP addresses provided were for problem explanation purposes only. if you like, use x.x.x.x. > > -Original Message- >

validifying RSA key fingerprint

2005-05-04 Thread Aaron P. Martinez
5jBGukR7qGaF9oz+h3Q06mqZauu+BeLt147ChuqHXT0hO08TLfM= so how can i convert the ssh-rsa into a fingerprint to compare the two. Or maybe there's even an easier way? TIA, Aaron Martinez ps, i know the above fingerprint and the following

description of error numbers?

2005-02-26 Thread Aaron Voisine
Where can I find a description of the various error numbers? Here's what I'm getting in my apache logs: OpenSSL: error:14094418:lib(20):func(148):reason(1048) l8r Aaron -- There's no trick to being a humorist when you have the whole government working for you

SSL and OSU

2005-02-24 Thread Chuck Aaron
them to ssl (https) and leave the other application http or will I have to make it all https if I chose that route? Thanks in advance, Chuck Aaron

Re: Question about generating keys, certificate requests

2005-01-04 Thread Aaron Smith
own. And my attempt to ask this question of the > pre-purchase email tech support returned a 'dartboard' answerit had > absolutely nothing to do with my question..must have been picked out > by throwing a dart at a list of canned answers > > Than

Re: Certificate Revocation

2004-05-17 Thread Aaron Smith
That did the trick. Thanks a lot! On Fri, 2004-05-14 at 12:52, Olaf Gellert wrote: > Aaron Smith wrote: > > We have been using OpenSSL to generate certificates for various > > applications here with a home grown CA (created using openssl ca). We > > recently started

Certificate Revocation

2004-05-14 Thread Aaron Smith
d regenerate all of my certificates? -- ----- Aaron Smith vox: 269.226.9550 ext.26 Network Directorfax: 269.349.9076 Nexcerpt, Inc. http://www.nexcerpt.com

RE: Where are the reason codes?

2004-04-27 Thread Miller,Aaron
Did you call ERR_load_crypto_strings ()? Without it, you won't get the descriptive text. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Putnam Sent: Tuesday, April 27, 2004 10:27 AM To: [EMAIL PROTECTED] Subject: Where are the reason codes? I a

Re: Test

2003-09-11 Thread Chuck Aaron
yes, it made it. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

RE: 0.9.6j vs 0.9.7b

2003-06-04 Thread Aaron Axelsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is there a major difference between the two? My guess would be that eventually everthing will move to the 0.9.7 series. If that’s the case, I would think it makes more sense to upgrade to the 0.9.7 series - --- Aaron Axelsen AIM: AAAK2 Email

0.9.6j vs 0.9.7b

2003-06-03 Thread Aaron Axelsen
?  Thanks is advance your your assistance, it is much appreciated. - --- Aaron Axelsen AIM: AAAK2 Email: [EMAIL PROTECTED] Want reliable web hosting at affordable prices? www.modevia.com Web Dev/Design Community/Zine www.developercube.com -BEGIN PGP SIGNATURE- Version: PGPfreeware 7.0.3

0.9.6j vs 0.9.7b

2003-06-03 Thread Aaron Axelsen
appreciated.   ---Aaron AxelsenAIM: AAAK2Email: [EMAIL PROTECTED]Want reliable web hosting at affordable prices?www.modevia.com   Web Dev/Design Community/Zine www.developercube.com  

Re: OpenSSL: Support, Mailing Lists

2002-06-06 Thread Aaron Smith
I just installed mod_ssl on my Mac OS X server and when I try to access it for testing I get the following error message: SSL_connect:error in SSLv2/v3 read server hello A 404:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:460: Any suggestions? Thanks, Aaron

Re: Attempting to use EVP Context initialisation functions under 0.9.6d

2002-05-29 Thread Chuck Aaron
REMOVE > Tim Gillott wrote: > > Greetings. > > I am having trouble initialising both Digest Contexts and Digests > using the EVP wrappers. I am using 0.9.6d under Windows XP Pro. I > can't seem to find the functions EVP_MD_CTX_init, EVP_MD_CTX_create > or EVP_DigestInit_ex in any of the includ

new version applying:

2002-05-21 Thread Chuck Aaron
Hello, I am currently running 9.6A. how do I go about downloading the newest 9.6d version and applying it to my alphas? CJA __ OpenSSL Project http://www.openssl.org User Support Mailing List

bad decrypt error

2002-04-24 Thread Morris, Aaron W.
would be appreciated.   Aaron

OpenSSL problem with SSH

2002-03-14 Thread Aaron M. Hirsch
advance for the help! -- Aaron M. Hirsch Systems Administrator SchlumbergerSema 11146 Thompson Ave. Lenexa, KS 66219 Phone: (913) 312-4717 Mobile: (913) 284-9094 Fax:(913) 312-4701 __ OpenSSL Project

ssh install problems

2002-03-14 Thread Aaron M. Hirsch
advance for the help! -- Aaron M. Hirsch Systems Administrator SchlumbergerSema 11146 Thompson Ave. Lenexa, KS 66219 Phone: (913) 312-4717 Mobile: (913) 284-9094 Fax:(913) 312-4701 __ OpenSSL Project

Mac OS X 10.0.4

2001-10-10 Thread Aaron Guy Davies
Will OpenSSL compile for OS X 10.0.4? When I try ./config, it says Operating system: Power Macintosh-whatever-Darwin This system (Darwin) is not supported. See file INSTALL for details. When I try ./Configure, I don't see anything about Darwin. There's a Rhapsody option, but that fails during ma

RE: DES - 3DES (novice)

2001-10-04 Thread Aaron Kronis
-CBC3-SHA on the right? If this IS right, then will I need to create a working certificate for the client next? SSL_CTX_set_cipher_list(yourCTX, "RC4-MD5:DES-CBC3-SHA"); Thanks very much, I'm sure this is simple and I just need to get these few answers to move forward. A

Need to use 3des not des

2001-10-03 Thread Aaron Kronis
Hello, I have compiled and run a demo program that encrypts a string of text and sends it across a socket connection where it is encrypted. This is obviously using the ssl.h library. What I need to do is change the encryption from DES to 3DES. I cannot yet figure out where to do this. Is there

Re: Installation over Linux Slackware

2001-04-23 Thread Aaron Nye
I am running the most current release on that very operating system, any reason you are not running OpenSSL 0.9.X instead of SSLeay? On Monday 23 April 2001 03:32, you wrote: > I'm trying to install SSLeay-0.8.1 on Linux-Slackware. > Compiling is not right because file standards.h is missi

Resolved. Was: Need a certificate verification help

2001-03-14 Thread Aaron Stromas
Dr S N Henson wrote: > http://www.openssl.org/support/faq.html#PROG7 > > for what I suspect is the cause of the error. > Yes, it was. OpenSSL_add_all_algorithms() solved it. Thank you. -- Aaron Stromas| "Tick-tick-tick!!!... ja, Pantani is we

Re: Need a certificate verification help

2001-03-13 Thread Aaron Stromas
Dr S N Henson wrote: > Aaron Stromas wrote: > > > > Sorry, it's a typo, of course. I'm using X509_verify_cert(&ctx). Was it > > supposed to work, i.e., successfully verify? > > > > See what error you get and see if: > > openssl verify -CAfil

Re: Need a certificate verification help

2001-03-13 Thread Aaron Stromas
Sorry, it's a typo, of course. I'm using X509_verify_cert(&ctx). Was it supposed to work, i.e., successfully verify? -a Dr S N Henson wrote: > Aaron Stromas wrote: > > > > I am probably making a silly mistake but I've been stuck on it for quite > > a lo

Need a certificate verification help

2001-03-13 Thread Aaron Stromas
though the cert loaded in x was issued by the CA whose cert is in ca (openssl 0.9.5), I'm still getting "Nope". I must be misunderstanding something, but what is it? TIA, -a -- Aaron Stromas| "Tick-tick-tick!!!... ja, Pantani is weg..." Oracle Corp |

x509

2000-12-11 Thread Aaron Galea
            5 x.509 Certificate - Attribute                    10 Does anyone know what is the difference between them??? or if there is any document that explain this???   Thanks, Aaron

Re: Compilation Errors on Winnt

2000-11-29 Thread Aaron Galea
During Winnt compilation it gives you a number of unresolved externals. The best way is to create a library "crypto.lib" and ensure you set up all the correct paths in the settings. Quite a tedious task!!! - Original Message - From: "Louis Lam" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>

DSA vs RSA

2000-11-28 Thread Aaron Galea
.   I am not sure about this, so any help would definitely clarify my ambiguities.   Thanks, Aaron

Re: .CRT

2000-11-27 Thread Aaron Galea
Thanks everyone for the help about .Crt Aaron - Original Message - From: "Massimiliano Pala" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, November 27, 2000 6:22 PM Subject: Re: .CRT > > Aaron Galea wrote: > > > > Hi, > > &

PEM_read_X509

2000-11-23 Thread Aaron Galea
Has anyone experienced this before? Not actually sure about the parameter that I need to add for it to compile successfully. Probably a NULL but I am having so much of these that I am wondering why there is so much of a mismatch between the headers and actual code.   Aaron

rsa to pkcs8 question

2000-11-10 Thread Aaron Jackson
hat format the private key is in? Can I tell how a key is password encrypted? Can I directly generate a pkcs8 key using openssl? Any info would be helpful. Thanks. Aaron __ OpenSSL Project

Sorry... PKCS5 cert chain question

2000-11-06 Thread Aaron Jackson
icate chain" and how does one create the chain? Thanks in advance for any information. Aaron __ OpenSSL Project http://www.openssl.org User Support Mailing List

  1   2   >