RE: New in SSl ....

2000-02-23 Thread GOMEZ Henri
If you're running Redhat you got the easy way : 1) You need to install openssl and openssl-devel RPM: http://www.modssl.org/contrib/openssl-0.9.4-1.i386.rpm http://www.modssl.org/contrib/openssl-devel-0.9.4-1.i586.rpm 2) For apache you need an SSL version of Apache : h

RE: sslified imap server

1999-12-02 Thread GOMEZ Henri
You could try to use jonama as a ssl relay www.multimania.com/jonama/ - Henri Gomez ___[_] EMAIL : [EMAIL PROTECTED] (. .) PGP KEY : 4912D659...oOOo..(_)..oOOo... PGP Fingerprint : 8CAD0D50356DA7E45C540B010FFE39E8

Openssl & PDF

1999-11-25 Thread GOMEZ Henri
Did someone start to work on adding Digital Certificates on PDF documents using OpenSSL ? http://partners.adobe.com/asn/developer/acrosdk/docs.html Regards - Henri Gomez ___[_] EMAIL : [EMAIL PROTECTED] (. .) PGP KEY : 4912D659...oOOo..(_)..o

RE: Using tcpd and stunnel wrappers together

1999-06-07 Thread GOMEZ Henri
Take also a look at jonama http://www.multimania.com/jonama __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

RE: RPM spec file for openssl-0.9.3

1999-05-25 Thread GOMEZ Henri
Oups. The problems related to the 'DOS' format of the spec file. Construction in run :-) __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]

RE: RPM spec file for openssl-0.9.3

1999-05-25 Thread GOMEZ Henri
Hi !!! Just tried but got : : command not found870: Bad exit status from /var/tmp/rpm-tmp.12870 (%prep) Seems to have probs with sed '/#!\usr.' PS: I tried on RH5.2/6.0 both with openssl 0.9.2 RPM !!! See you __ OpenSSL

RPM for RH6.0 -> imap

1999-05-20 Thread GOMEZ Henri
Hi !!! Ralph kindly accepted to host the imap-4.5-4 RPMs needed by IMP/PHP3/APACHE+MODSSL users. They are located in : http://www.modssl.org/contrib/ Nota : The official imap RPM packager, Brian Bruns [[EMAIL PROTECTED]], tell me it will use my spec file for imap (4.6-1 now) and sus will cre

RPM for RH6

1999-05-19 Thread GOMEZ Henri
Hi !!! Just uploaded latest RPMs for apache-mod_ssl and openssl 0.9.2. Built on a RH5.2 box but with patches to make them for on RH6.0. They must run on 5.2 and 6.0 systems. PS: Users of mod-php3, you also have to get imap-4.5-4 I will upload to incoming.redhat.com, since imap released by Redhat

RE: Form to generate certs

1999-04-14 Thread GOMEZ Henri
> On www.OpenCA.org when will be available... > [GOMEZ Henri] I read your previous posts. Take a look at my jonama SSL Proxy (http://www.multimania.com/jonama). Could team latter with your openca project... [GOMEZ Henri

Form to generate certs

1999-04-13 Thread GOMEZ Henri
Hi !!! Where can I found HTML/CGI script to generate client certs (pem/p12) with openssl. At least can I pass parameters to ssleay/openssl (like cert password and so one) on command line ??? Thanks __ OpenSSL Project

openssl 0.9.2b RPM ???

1999-03-24 Thread GOMEZ Henri
Who did it for i386 Thanks. ... . . S.L.I.B . . [_] . 5 Place Charles Béraudier . . (+ +) . 69428 Lyon Cedex 03 . ..oOOo..(_)..oOOo.. .

RE: Fresh meat -- Java SSL using OpenSSL (SSLeay)

1999-03-10 Thread GOMEZ Henri
> You put the so/dll in your library path on your host, and > java will load'it at runtime. It's not 'mobile' code :( > [GOMEZ Henri] Thanks to point out the dll/so pre-installation. It will be a first answer to a common problem. Having a fre

RE: Fresh meat -- Java SSL using OpenSSL (SSLeay)

1999-03-10 Thread GOMEZ Henri
Since JAVA SSL use OpenSSL/SSLeay DLL, how can we made it work under a standard browser ? Allways no 100% pure Java SSL implementation but there is a premice (http://security.dstc.edu.au/projects/java/jcsi.html) See you

MSIE import worked !!!

1999-03-03 Thread GOMEZ Henri
I fixed my import problem with .p12 cert files. My french version of MSIE 4.0 (4.72.2106.8) didn't accept private key with more than 512 bits. (Thanks to Kaur Virunurm [[EMAIL PROTECTED]]) I modify my script to use only 512 bits and all work fine. Question: What about security of these certs ?

DER encoding:

1999-03-03 Thread GOMEZ Henri
I'm trying to generate a certificate for IE 4. The .p12 generated by the following script is successfully imported in NS. But the DER encoded cert generated from .pem' one via $ssleay x509 -in $sslcrtdir/$user.crt -outform DER -out $sslcrtdir/$user.der Any Idea... PS: I run my own self signed

RE: Relaying only certifieds

1999-02-17 Thread GOMEZ Henri
> Sounds like you would need a dedicated server or virtual directory. > [GOMEZ Henri] Ya, a sort of relay to private resources to users around the net. > Why would you let the clients that do not provide a cert > continue access?!? > [GOMEZ Henri] Yes, I do

Relaying only certifieds !!!

1999-02-15 Thread GOMEZ Henri
Hi !!! I want to restrict access to some inetd services (ie telnet/pop/imap) on one of my servers to some users over the Net. Using Redhat, I've allready have installed apache 1.3.4 + mod_ssl 2.2.2 (apache-mod_ssl-1.3.4-2.2.2-0.i386.rpm) and SSLeay 0.9b (SSLeay-0.9.0b-4.i386.rpm + SSLeay-devel