Re: How to disable DNS certificate check?

2008-09-08 Thread Ricardo Stella
philipina wrote: > Hello, > > I'm using an application (that I could recompile) which is using OpenSSL. My > problem is that for some computers I have an internet access but no DNS > server. In this case I configure the application to connect to > https://xxx.xxx.xxx.xxx (ip address) instead of htt

Re: Need to upgrade openssl on my Solaris10 server

2008-09-05 Thread Ricardo Stella
[EMAIL PROTECTED] wrote: > > Hello, > > We have security holes that need to be fixed on our Solaris 10 > server. I have applied the Solaris 10 "Recommended and Security" > patch bundle that was updated on 09/02/08. One of the security holes > is will openssl. How do I upgrade it? Currently

Re: Verisign Certificate

2007-08-07 Thread Ricardo Stella
Kaushal Shriyan wrote: > Hi Kiran > > Now the verisign has given me the certificate as SSL.der format so can > you please provide me the working example using openssl to convert it > into SSL.pem > format taking my file SSL.der in question > > Thanks again Verisign has extensive information on h

Re: Problems building openssl-0.9.8b on RedHat Enterprise

2007-04-10 Thread Ricardo Stella
Maximo Migliari wrote: > Dear users, > > I'm having problems installing openssl-0.9.8b on RedHat Enterprise, > kernel 2.6.9-11.ELsmp > > When I type: ./config I get the following output: > > -- > # ./config > Operating system: i686-whatever-linux2 > Configuring for linux-elf > Con

Re: support for Solaris on Opteron?

2006-04-07 Thread Ricardo Stella
Scott Danforth wrote: > I've been trying to build openssl 9.8a on an opteron-based Solaris 10. > I've tried the 64 bit solaris x86 configuration, and various 32-bit > gcc configurations (the gcc-2 that comes on Sun's Software Companion > CD only has 32 bit libraries), but nothing works. I get fart

Re: Having problem compillin in solaris 10.

2005-09-02 Thread Ricardo Stella
GCC v3.4.3 is installed in /usr/sfw/bin with an Entire Distribution install. You don't need to install the Companion CD. BTW, Solaris 10 ships with openssl v0.9.7d and also installed in /usr/sfw (and based on an Entire Distro install - no need for the Companion CD). My .02... Andreas Almroth w

Re: Having problem compillin in solaris 10.

2005-09-02 Thread Ricardo Stella
FYI, I installed openssl v0.9.8 in three separate V20z with a single Opteron 244, running Solaris 10. All three boxes got Entire Distro installs from CDs. I'm using Solaris 10 stock gcc. # gcc -v IReading specs from /usr/sfw/lib/gcc/i386-pc-solaris2.10/3.4.3/specs Configured with: /builds/sfw

Re: For those of you using Solaris 10.

2005-08-31 Thread Ricardo Stella
I had no problems on three V20z (Opteron based). I did have problems on a Dell Optiplex though. I'm using Sun's version of GCC which is newer than the one in sunfreeware The problem was regarding values.c, which is documented. Fix it like this: wget http://www.openssl.org/~appro/values.c ksh -

Re: Openssl 0.9.8 compilation options

2005-07-28 Thread Ricardo Stella
Went thru this last night... See the PROBLEMS file, as is still happening with Solaris 10 on x86 INTEL. It does not happen on x86 AMD64 though. Download http://www.openssl.org/~appro/values.c and then patch your GCC installed with ksh -f values.c Then start all over... BTW, this is with Sun'

Re: The Warning and Patches

2002-08-01 Thread Ricardo Stella
Subscribe to CERT... They also sent out a warning... "Fisk, Kevin" wrote: > > As you are probably aware, someone sent a security warning yesterday > regarding OpenSSL along with patches. I am reluctant to apply these types > of patches unless I am sure they are genuine. A patch can just as e

Re: warning: overflow in ....

2001-03-15 Thread Ricardo Stella
What compiler are you using ? Also, you probably want to use -fPIC for a config option. Finally, note that Solaris 8 does not have a random/urandom device. Search the archive for possible solutions (an old SUN package, or ANDIRand) My .02... Satoshi Seto wrote: > > Hellow. My name is Satosh

Re: error when install ssl on SunOS5.8

2001-03-09 Thread Ricardo Stella
28, Fax +49-6151-16-6036 > __ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [E

Re: ÁÔÐÇÈËÊÂÐÅÏ¢¿ìµÝ--¸öÈ˰æ

2001-03-01 Thread Ricardo Stella
ote: > > > -- ------ Ricardo Stella O.I.T. (609)896-5000 x7436 _suAve_ Rider University *** SPAM will not be tolerated *** begin:vcard adr;dom:;;;Lawrenceville;NJ;08648; adr:;;2083 Lawreceville Road;Lawrenceville;NJ;08648; n:St

To 'no-idea' or not to 'no-idea' in the US ?

2001-02-20 Thread Ricardo Stella
Dumb FAQ probably... Now that the RSA patent expired, we can use compile without rsaref. But should we still compile with 'no-idea' here in the US ? TIA... -- ------ Ricardo Stella O.

SUNWski package ?

2001-02-06 Thread Ricardo Stella
1 0 16:01:30 ?0:06 /usr/lib/security/cryptorand /dev/urandom (Note that I tried switching /dev/random to /dev/urandom). Any clues ??? -- ------ Ricardo Stella O.I.T. (609)896-

/dev/random for Solaris x86 ?

2001-02-06 Thread Ricardo Stella
What solution is out there for the Intel port of Solaris 7 or 8 ? Thanks... -- -- Ricardo Stella O.I.T. (609)896-5000 x7436 _suAve_ Rider University *** SPAM

Re: certificate chaos...

2000-10-26 Thread Ricardo Stella
http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- -- Ricardo Stella

Re: Move from Netscape to Openssl

2000-10-17 Thread Ricardo Stella
So with the CA's server's private key and cert (converted in pem format) I would be able to use them as the CA for openssl, therefore issue certs based on this ? Thanks... Dr S N Henson wrote: > > Ricardo Stella wrote: > > > > We were using Netscape Cert. Server 1.

Re: Installation - from a newcomer!

2000-10-13 Thread Ricardo Stella
It doesn't get any more clear than the instructions... RTM !!! http://www.modssl.org/source/exp/mod_ssl/pkg.mod_ssl/INSTALL.Win32 > Ramender Kishore wrote: > > Hey all, > > I am new to the field of open-ssl. So kindly help me out with my > installation problem. I am trying to install the m

Re: Question about "make install" of OpenSSL

2000-10-05 Thread Ricardo Stella
TW, where can I find those information about how to intergret OpenSSL > into an application like Apache? I know that the general idea is tp > apply some patches to Apache code, add OpenSSL code to it, and them > compile them. (I could be wrong anyway) > > Excuse me if I look stupi

Re: Question about "make install" of OpenSSL

2000-10-05 Thread Ricardo Stella
tp://www.openssl.org > User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- -- Ricardo Stella O.I.T. (609)896-5000 x7436 _suAve_ Rider University *** Remove &#x

Stupid question (or not) ?

2000-09-17 Thread Ricardo Stella
I never got an answer so let's try again... Now that RSA released it's patent to the public, how do we compile openssl without RSARef ??? TIA... begin:vcard adr;dom:;;;Lawrenceville;NJ;08648; adr:;;2083 Lawreceville Road;Lawrenceville;NJ;08648; n:Stella;Ricardo tel;fax:1-609-219-4994 tel;work

Re: Trouble compiling on solaris

2000-09-13 Thread Ricardo Stella
failed for target 'all' > > If anyone out there could give me a nudge in the right direction in getting > openssl to compile, I would appreciate it. > > Scott Watson > __________ > OpenSSL Project

Re: How can I change "libssl.a" into "libssl.so"?

2000-08-28 Thread Ricardo Stella
OS is "RedHat Linux 6.2". > > Ö > Àñ£¡ > > Howard > [EMAIL PROTECTED] > > __ > OpenSSL Project http://www.openssl.org > User Support Mailing List[EMAIL PROTE

Re: LDAP integration

2000-08-09 Thread Ricardo Stella
MAIL PROTECTED] > > > > > > __ > > Do You Yahoo!? > > Kick off your party with Yahoo! Invites. > > http://invites.yahoo.com/ > > ______

Re: openssl and rsaref compile problem

2000-07-26 Thread Ricardo Stella
gt; User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- -- Ricardo Stella O.I.T. (609)896-5000 x7436 _suAve_

Re: Compiling openssl-0.9.5a with rsaref

2000-07-24 Thread Ricardo Stella
enSSL Project http://www.openssl.org > User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- -- Ricardo Stella

errors...

2000-03-31 Thread Ricardo Stella
Well, I compiled lynx 2.8.2 using openssl 0.9.4 libraries (and rsaref) under Solaris 2.6. It works ! But now I'm trying to compile it using openssl 0.9.5 libs, under Solaris 2.7. I can't get it to work. It compiles, yes and lynx works to non-ssl ports, but I can't get in to ssl sites. As a sh

Re: Using Netscape CA certs.

1999-12-15 Thread Ricardo Stella
Sproule" wrote: > > Hi Ricardo, > > Do you have openssl built? > > Ricardo Stella wrote: > > > > Please redirect me to a more appropiate group if needed... > > > > How can I generate private keys and certs from my Netscape Cert Server so > > I c

Re: Licensing RSA for SSL use

1999-05-04 Thread Ricardo Stella
What about Netscape Security Services ? >From their web site: "NSS is a software development tool that provides an easy to integrate, Internet-ready SSL and public-key security capabilities in one package. NSS is the security engine used in Netscape's flagship Internet client and server product

Re: RSARef No Longer Available (Was RSAref in the US)

1999-04-14 Thread Ricardo Stella
Yes, but illegal for distribution, UNLESS you can certify the requestor is an US resident or citizen... Isn't that the case ? My .02... Secret Squirrel wrote: > > You wrote: > > > RSAREF is no longer available for download. > > Maybe not from rsa.com, but other sites still have it. > __

RSAref in the US

1999-04-12 Thread Ricardo Stella
Just to clarify... By what RSA, we can use RSARef in the US. My main question is the method of using RSARef with openssl/ssleay. Since I was not able to compile openssl nor ssleay with the -rsaref (option 1), I decided on trying -RSAglue (option 2). This DOES compile fine, and then I was able

Re: RSARef under Solaris 2.6

1999-04-08 Thread Ricardo Stella
/libcrypto.a(err_all.o) RSA_PKCS1_RSAref /usr/local/ssl/lib/libcrypto.a(rsa_lib.o) Ulf Moeller wrote: > > On Thu, Apr 08, 1999, Ricardo Stella wrote: > > > Ok, so now I: (is that the right place to add -lRSAglue ?) > > > > # make clean > > # ./C