Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- Greg Stark <[EMAIL PROTECTED]> wrote: > It would be easier to help you if you can get output > from ssldump > (www.rtfm.com/ssldump) for the failing connection > attempt. Attached is the output of ssldump. Since I can not get the keys out of IIS All the data is still encrypted. Thanks for any

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- "Kenneth R. Robinette" <[EMAIL PROTECTED]> > You must be running a version I have never seen or a > real old one. IIS 4.0 which is the latest version that runs under NT4. The behavior you are describing sounds like IE, which is much nicer about letting you export keys. Mike

Re: Problems with SSL V3 and IIS

2001-08-09 Thread Michael Shanzer
--- "Kenneth R. Robinette" <[EMAIL PROTECTED]> wrote: > > Yes, it does support pkcs-12 but Microsoft refers to > them as .pfx. > Simple use the openssl command Eric referenced and > use a > filename such as out.pfx or rename a .p12 to .pfx > > Ken >From the IIS key manager menu, there is a o

Re: Problems with SSL V3 and IIS

2001-08-08 Thread Michael Shanzer
--- Eric Rescorla <[EMAIL PROTECTED]> wrote: > You should be able to use 'openssl -pkcs12' to > extract the > keys. IIS does not export it's keys into a PKCS#12 file. At least I have not found a way to export them into a PKCS #12 file. Not sure what the file format is. Mike _

SSLv3 to IIS 4

2001-08-08 Thread Michael Shanzer
I am writting a simple application that needs to talk to a IIS web server using client authentication. I cannot seem to get client authentication to work. I have tried: 1) the cert in browser and it works OK. 2) turning off the required client auth on IIS and it still fails (SSL_read returns