Q: CA signing of smart card hosted key pair?

2002-11-13 Thread Heiko Nardmann
corresponding to the private key on the card? So far I am using 'openssl x509' together with generate a certificate requestjust commented out the error handling in ca.c. But this is just a hack and I wonder whether there is a clean way to do this. - -- Heiko Nardmann (Dipl.-Ing

PHP classes for OpenSSL ?

2000-09-26 Thread Heiko Nardmann
I would like to access the OpenSSL API from within PHP code. Are there any PHP classes already existing for this? -- Heiko Nardmann (Dipl.-Ing.), [EMAIL PROTECTED], Software Development secunet Security Networks AG - Sicherheit in Netzwerken (www.secunet.de), Weidenauer Str. 223-225, D-57076

Re: OCSP patch kit for OpenSSL

2000-06-22 Thread Heiko Nardmann
for more info. > __ > OpenSSL Project http://www.openssl.org > User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL

Re: OCSP

2000-06-15 Thread Heiko Nardmann
oes anyone know of any free (beer or speech) OCSP > slim> implementations for Linux or AIX? > > I'm finishing up a patch kit for OpenSSL. Stay tuned, I plan to have > it ready by the end of this week at the latest. > -- Heiko Nardmann (Dipl.-Ing.), [EMAIL PROTECTED], Softw

slow authentication - session caching?

1999-09-27 Thread Heiko Nardmann
default caching inside SSLeay does somewhere exists a reference implementation for it? -- Heiko Nardmann (Dipl.-Ing.), [EMAIL PROTECTED], Software Development secunet Security Networks AG - Sicherheit in Netzwerken (www.secunet.de), Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13, Fax

Re: Scripting of s_client

1999-07-22 Thread Heiko Nardmann
P/1.0 > > (including 2* CRLF) I can do this interactively but would like to automate > the procedure. > Eg > openssl s_client -connect some.web.server:443 < httpRequestFile > > Questions I have are: > 1. Is what I'm trying to do reasonable? > 2. Can the effect be ac

Y2K compliance?

1999-04-20 Thread Heiko Nardmann
No, don't hit me!!! Another one asking for this annoying topic ... Does anyone know whether SSLeay has any Y2K problems? -- Ciao ... Heiko Nardmann (Dipl.-Ing.), Software Development secunet (www.secunet.de), Security Networks GmbH - Sicherheit in Netzwerken Weidenauer Str. 223-225, D-

openssl-SNAP-19990322-0930 works fine with HP-UX 11.00 (64bit)

1999-03-22 Thread Heiko Nardmann
'make tests' runs fine on the machine here. -- Ciao ... Heiko Nardmann (Dipl.-Ing.), Software Development secunet (www.secunet.de), Security Networks GmbH - Sicherheit in Netzwerken Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13, Fax : +49 27

single sources/multiple object dirs - how?

1999-03-22 Thread Heiko Nardmann
DIR)/test2.o This is a different approach which seems to work only with gmake. So the Apache approach (shadow tree + generic Makefile which calls the real Makefile) is the better one. -- Ciao ... Heiko Nardmann (Dipl.-Ing.), Software Development secunet (www.secunet.de), Security Networks GmbH -

Re: SmartCard

1999-02-25 Thread Heiko Nardmann
t; We used this interface to integrate our SETCOS Cards with B1 reader into Netscape. Integrating it into SSLeay was a bit more complicated since many functions assume to have the key in memory (accessing RSA parameters e.g.). -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet

Q: ssl3_send_server_certificate()

1999-02-19 Thread Heiko Nardmann
e 0 if ssl3_output_cert_chain() had problems. 1717 s->init_off=0; 1718 } 1719 1720 /* SSL3_ST_SW_CERT_B */ 1721 return(ssl3_do_write(s,SSL3_RT_HANDSHAKE)); 1722 } Can someone confirm that this does not raise problems? -- Ciao ... Heiko

Re: Q: handling of OBJ_ripemd160WithRSA_lmod_lexpv OIDs ?

1999-02-19 Thread Heiko Nardmann
Oops ... in my last patch there is still the '11' which is only there due to the misunderstanding (11h = 17d). So here are the patched patches. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223-225, D-57

Re: Q: handling of OBJ_ripemd160WithRSA_lmod_lexpv OIDs ?

1999-02-19 Thread Heiko Nardmann
he patch. Just another question (programming aspect): why are these types always C-int and not an enum? Using enums instead of int gives the possibility to let the compiler do some typechecking. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks

Re: Q: handling of OBJ_ripemd160WithRSA_lmod_lexpv OIDs ?

1999-02-19 Thread Heiko Nardmann
Oops up ... I missed that the 11 is hex and therefore decimal 17 which is ok according to the TeleTrusT document. So here is the patch for 19990218 snapshot if someone wants to integrate those OIDs. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de

Re: Basic knowledge about Apache-SSL

1999-02-19 Thread Heiko Nardmann
en? Noch ein Hinweis in eigener Sache am Rande: sollten Sie Interesse an Chipkarten-gestuetzter Verschluesselung, Signatur oder Authentisierung haben (auch im Apache Kontext), so koennen wir Ihnen auch weiter helfen, da wir im Rahmen eines Projektes fuer einen anderen Kunden eine Integration von Chipkarten in d

Re: snapshot 19990217 mini problem

1999-02-19 Thread Heiko Nardmann
Erwann ABALEA wrote: > > On Thu, 18 Feb 1999, Heiko Nardmann wrote: > > > In the 19990217 snapshot the Configure script has > > the path to perl hard coded to /usr/local/bin/perl. > > Since I have perl located at a different location > > this does not work

Re: Good Crypto Book

1999-02-19 Thread Heiko Nardmann
ry and Practice" Douglas R. Stinson, 1995 CRC Press ISBN 0-8493-8521-0 If you have a university in the neighbourhood have a look at it if it is what you need/want. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223

Q: handling of OBJ_ripemd160WithRSA_lmod_lexpv OIDs ?

1999-02-19 Thread Heiko Nardmann
tor of the certificate and come back if I know more about this value. The document I found talks about the values 2, 3, 5, 7, 9, 17 possible for this oid part. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223-225, D-57076

Q: CVS OpenSSL version: M_ASN1_New_Error() macro?

1999-02-17 Thread Heiko Nardmann
macros to circumvent these problems. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13 Fax : +49 271 48950-50

Q: CVS OpenSSL version: M_ASN1_New_Malloc() macro?

1999-02-17 Thread Heiko Nardmann
roduced by the macro M_ASN1_D2I_vars() which is missing in both the SSLeay version and the CVS version of the function ASN1_TYPE_new() in a_type.c. Is code missing here or do I miss something? -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH,

Q: CVS OpenSSL version: ERR_R_NESTED_ASN1_ERROR - where?

1999-02-17 Thread Heiko Nardmann
Hi! I just got some files from the CVS repository, e.g. a_gentm.c. Now I am looking for the constant ERR_R_NESTED_ASN1_ERROR. Which header file do I have to get for it? I already have asn.1 and asn1_mac.h. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de

Q: SSLeay-0.9.0b: problems with certificate algorithm

1999-02-17 Thread Heiko Nardmann
OBJ_bsearch() as far as I have understood the source code. -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13 Fax : +49 271 48950-50

Re: Q: SSLeay-0.9.0b: UTCTime usage in X.509

1999-02-17 Thread Heiko Nardmann
Dr Stephen Henson wrote: > > Heiko Nardmann wrote: > > > > Hi! > > > > I am using SSLeay-0.9.0b for a project. > > Now I found that decoding an X.509 certificate > > does not work since the decoding of the Validity > > field assumes UTCTime to b

Q: SSLeay-0.9.0b: UTCTime usage in X.509

1999-02-16 Thread Heiko Nardmann
CHOICE? Or: is there a patch which fixes this bug? -- Ciao ... Heiko Nardmann (Dipl.-Ing.) Software Development, secunet (www.secunet.de) Security Networks GmbH, Weidenauer Str. 223-225, D-57076 Siegen Tel. : +49 271 48950-13 Fax : +49 271 48950-50