Re: Can OpenSSL use the Linux crypto API?

2007-03-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 19 Mar 2007 14:28:57 -0800, Shane McDonald <[EMAIL PROTECTED]> said: Shane_McDonald> I have a hardware acceleration engine on a board for Shane_McDonald> which I've got a Linux device driver, but I don't have Shane_McDonald> an OpenSSL driver for the engin

Re: BMPSTRING in extensions

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 13:24:25 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> 362:d=6 hl=2 l= 51 cons: SEQUENCE mleuchtner> 364:d=7 hl=2 l= 9 prim: OBJECT:1.3.6.1.4.1.311.20.2 mleuchtner> 375:d=7 hl=2 l= 38 prim: OCTET STRING

[no subject]

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 11:34:22 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> The request to the MS CA needs the "enroll certtype extension" (OID mleuchtner> 1.3.6.1.4.1.311.20.2) where I put the name of the certificate template mleuchtner> in. mleu

Re: PMI patch for OpenSSH

2007-01-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Jan 2007 17:42:50 +0100, "Vincenzo Sciarra" <[EMAIL PROTECTED]> said: vincenzo.sciarra> I have just published a pre-alfa of a patch that has the goal to make vincenzo.sciarra> OpenSSH aware with PMI. vincenzo.sciarra> vincenzo.sciarra> Reference site :

Re: HTTPS security model

2006-12-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 5 Dec 2006 13:45:13 -0800, "David Schwartz" <[EMAIL PROTECTED]> said: davids> Authentication and authorization are the same thing. Generally speaking, that's incorrect, even if you might have a specific case where your statement applies. To take an example

Re: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 10 Oct 2006 11:35:30 +0200, "Daniel Diaz Sanchez" <[EMAIL PROTECTED]> said: dds> Hello, dds> dds> Some source code to generate attribute certificates using OpenSSL can be dds> found at: dds> dds> http://www.it.uc3m.es/dds/swRelease/pmi/pmi.xml dds> dd

Re: rewriting Subject to make O=CN?

2006-09-28 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 29 Sep 2006 01:31:32 -0400, Iljun Kim <[EMAIL PROTECTED]> said: ij> I'd like to make the "O" equal to the "CN" while sign the CSR. ij> For example, if the Subject was ij> "C=US, O=Example Company, CN=www.example.com", ij> I'd like to issue a cert with

Re: Newbie Needs Help!!!

2006-09-27 Thread Richard Levitte - VMS Whacker
Hi Dan, In message <[EMAIL PROTECTED]> on Mon, 25 Sep 2006 09:50:32 -0600, Dan O'Reilly <[EMAIL PROTECTED]> said: dano> My CA is another system (Windows) and I requested it to create dano> the trusted root certificate in PKCS7 format, which I copied to dano> my VMS system. I can use OPENSSL PKC

Re: related license question

2006-08-22 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 22 Aug 2006 15:07:31 -0400, Ryan Shon <[EMAIL PROTECTED]> said: rshon> Presumably, a program, e.g. a web browser, could be written rshon> which uses OpenSSL (whether through linking to the libraries or rshon> by including actual pieces of OpenSSL code), and

Re: license question

2006-08-22 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 22 Aug 2006 18:47:12 +0200, Richard Koenning <[EMAIL PROTECTED]> said: Richard.Koenning> Ryan Shon wrote: Richard.Koenning> Richard.Koenning> > My boss hopes to sell this OpenSSL variant as a Richard.Koenning> > product. Because of this, he would not want

Re: Proxy Certs and security

2006-08-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 3 Aug 2006 14:20:50 -0500, Andrew White <[EMAIL PROTECTED]> said: aewhite> I was wondering what the general consensus was on proxy certs aewhite> and their security risks. I noticed this in the how-to, aewhite> "Noone seems to have tested proxy certificates

Re: Problem with Blowfish decryption

2006-08-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 03 Aug 2006 09:03:42 +0200, Andreas von Linden <[EMAIL PROTECTED]> said: Buglist> i have a problem with the Blowfish algorithm. When i encrypt a long Buglist> message i get the following error when i try to decrypt the message: Buglist> Buglist> 4156:error:

Re: Can we tailor openSSL?

2006-07-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 19 Jul 2006 07:46:19 +0800, "Bo Xie" <[EMAIL PROTECTED]> said: xiebopublic> Does openSSL licence permit to tailor openSSL? e.g., we only need the xiebopublic> SHA-512 algorithm, so we want to tailor openSSL to only include this xiebopublic> algorithm in or

Re: obj_mac.num

2006-06-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 23 Jun 2006 17:03:53 +0530, "Bhat, Jayalakshmi Manjunath" <[EMAIL PROTECTED]> said: jayalakshmi.bhat> I went through objects.README. But I did not understand the jayalakshmi.bhat> obj_mac.num and objects.txt files use clearly. Where do I get more inf

Re: BIO_new_mem_buf() doesn't work after RSA_private_decrypt() failure.

2006-06-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 21 Jun 2006 10:44:33 +0900, Tatsuya Tsurukawa <[EMAIL PROTECTED]> said: Tsurukawa.Tatsuya> It seems I need to clear error queue after private Tsurukawa.Tatsuya> decryption error, but does the status of error Tsurukawa.Tatsuya> queue actually affect to the be

Re: BIO_new_mem_buf() doesn't work after RSA_private_decrypt() failure.

2006-06-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 20 Jun 2006 21:16:49 +0900, Tatsuya Tsurukawa <[EMAIL PROTECTED]> said: Tsurukawa.Tatsuya> bioPtr = BIO_new_mem_buf( InputPEMstring, -1 ); Tsurukawa.Tatsuya> : Tsurukawa.Tatsuya> prvkey = PEM_read_bio_RSAPrivateKey( bioPtr, NULL, NULL, NULL ); Tsurukawa.T

Re: [ANNOUNCE] OpenSSL version 0.9.8b and 0.9.7j released

2006-05-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 05 May 2006 02:25:57 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: richard> In message <[EMAIL PROTECTED]> on Thu, 4 May 2006 17:14:01 -0700, Randy Turner <[EMAIL PROTECTED]> said: richard> richard>

Re: [ANNOUNCE] OpenSSL version 0.9.8b and 0.9.7j released

2006-05-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 4 May 2006 17:14:01 -0700, Randy Turner <[EMAIL PROTECTED]> said: rturner> Is there a brief on the reasons why someone would want to use rturner> OpenSSL 0.9.7j or choose to use 0.9.8b? There are two answers to that. You nailed one of them: rturner> I be

Re: libcrypto.a

2006-04-27 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 27 Apr 2006 13:59:59 +0200, "Saurabh Arora" <[EMAIL PROTECTED]> said: tanish2k> Thankyou openssl group for your overwhelming, ZERO help support. You know, you sent the first mail about 24 hours ago, and you seem to expect the kind of support you'd normally

Re: Use of Makefile.ssl

2006-04-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 19 Apr 2006 11:15:47 +0530, "Bhat, Jayalakshmi Manjunath" <[EMAIL PROTECTED]> said: jayalakshmi.bhat> In openssl-0.9.8a I am not finding jayalakshmi.bhat> Makefile.ssl file. Please can you tell me They're called Makefile nowadays. We realised that it

Re: Licenses...

2006-04-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 21:51:10 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> >If your point is that the "openssl authors" don't want to tedm> >change the license because Eric (presumably) doesn't want to tedm> >change the license, then there is nowhere lef

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 17:02:49 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> >Not at all, I spoke for myself (I do believe I said that tedm> >clearly enough), and only reported what I have seen happening tedm> >within the group. tedm> tedm> Which isn't re

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 15:48:16 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> Since SSLeay is part of OpenSSL, Eric Young is by definition tedm> an OpenSSL author. That's a matter of definition, and I don't agree. Eric hasn't written one byte of OpenSSL

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 11:52:33 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tylerm> Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> wrote: tylerm> > And here, you pretend to know everything that's going on behind the tylerm> &

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 15 Apr 2006 12:44:33 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> If the OpenSSL authors (you included) wanted to change the tedm> license you all would have done so, it's not like you don't have tedm> write access to the source and cannot chang

Re: Licenses...

2006-04-15 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 14 Apr 2006 22:29:12 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> Binary distributions have one purpose - to boot up the system so tedm> you can get a full source tree on it and start building! It's tedm> no fun otherwise! :-) You know, if tha

Re: Licenses...

2006-04-14 Thread Richard Levitte - VMS Whacker
Oi, you're quite the speaker, aren't ya? In message <[EMAIL PROTECTED]> on Fri, 14 Apr 2006 17:28:47 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> OpenSSL needs to stick with the license that most closely tedm> reflects the philosophy of it's authors. That is, right now, an tedm> "a

Re: Patch Openssl

2006-04-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 13 Apr 2006 01:03:15 -0700 (PDT), "Sara978 (sent by Nabble.com)" <[EMAIL PROTECTED]> said: lists> TEST 5: lists> bash-3.00$ patch -p1 lists> can't find file to patch at input line 5 lists> Perhaps you used the wrong -p or --strip option? lists> The text le

Re: Licenses...

2006-04-12 Thread Richard Levitte - VMS Whacker
Hi Jeffrey, long time! In message <[EMAIL PROTECTED]> on Mon, 10 Apr 2006 22:28:22 -0400, Jeffrey Altman <[EMAIL PROTECTED]> said: jaltman> Tyler MacDonald wrote: jaltman> jaltman> > And it's not always even that simple: for example, the jaltman> > freeradius project's postgresql plugin li

Re: Patch Openssl

2006-04-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 12 Apr 2006 07:10:23 -0700 (PDT), "Sara978 (sent by Nabble.com)" <[EMAIL PROTECTED]> said: lists> gzip -cd ts-20060225-0_9_8a-patch.gz | patch -p1 lists> lists> but I have this error: lists> lists> ts-20060225-0_9_8a-patch.gz: not in gzip format lists> pat

Re: Licenses...

2006-04-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Apr 2006 14:51:58 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tyler> However, the descussion about how OpenSSL should interact with tyler> GPL software has been quite valuable. Yes, I entirely agree with you on that. Cheers, Richard - Please

Re: Licenses...

2006-04-11 Thread Richard Levitte - VMS Whacker
OK, boys and girls, however much I actually enjoy discussing the intricaties of licenses out the wazoo, I don't think a discussion on how to interpret the GPL belongs in this list. Let's move along, shall we? Cheers, Richard - Please consider sponsoring my work on free software. See http://

Re: Licenses...

2006-04-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 09 Apr 2006 11:04:12 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tyler> I think that these programmers could be more happy and productive tyler> and get back to moving our planet forward if they didn't have tyler> to spend so much time thinking about li

Re: [BUG] Installation problem on cygwin

2006-04-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 03 Apr 2006 10:22:26 +0200, Yann Coscoy <[EMAIL PROTECTED]> said: Yann.Coscoy> Technical Description: Yann.Coscoy> The script 'Configure' (line 1253) uses 'chop' function Yann.Coscoy> to suppress end-of-line characters. Unfortunalety under Yann.Coscoy> cygwi

Re: HSM/engine/SmartCard for OpenVMS

2006-03-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 26 Mar 2006 20:22:48 +0200, Francesco Gennai <[EMAIL PROTECTED]> said: francesco.gennai+openssl> thank you for the pointers. You're welcome. francesco.gennai+openssl> Now we need to move the private key to a francesco.gennai+openssl> signing device. Uhmm,

Re: HSM/engine/SmartCard for OpenVMS

2006-03-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 26 Mar 2006 00:51:54 +0100, Francesco Gennai <[EMAIL PROTECTED]> said: francesco.gennai+openssl> I need to sign e-mail messages in OpenVMS francesco.gennai+openssl> environment by a signing device (SmartCard, francesco.gennai+openssl> HSM, other...) francesc

Re: pod2man: not found

2006-03-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 20 Mar 2006 14:05:15 -0700, "Ting Feng" <[EMAIL PROTECTED]> said: fengtingting2001> ./pod2mantest: pod2man: not found fengtingting2001> pod2man does not work properly('BasicTest' failed). Looking for another fengtingting2001> pod2man ... fengtingting2001> N

Re: Updating OPENSSL

2006-03-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 18 Mar 2006 02:27:18 -0500, "Hector Santos" <[EMAIL PROTECTED]> said: ssluser> I have multiple applications using OPENSSL 0.9.7c and I'm finally getting ssluser> around to updating it. ssluser> ssluser> I have downloaded and recompiled the *eay*.dll files

Re: porting to QNX4

2006-03-12 Thread Richard Levitte - VMS Whacker
In which OpenSSL versions have you tested this? Cheers, Richard In message <[EMAIL PROTECTED]> on Sun, 12 Mar 2006 12:19:27 +0300, kbob kbob <[EMAIL PROTECTED]> said: kbob_ru> Under QNX4 kbob_ru> kbob_ru> and I use in Configure: kbob_ru> "qnx4", "cc:-DL_ENDIAN -DTERMIO -DNO_STRINGS_H::(unknow

Re: IPR Infringement Lawsuites

2006-02-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 20 Feb 2006 20:26:22 +0100, "Roger Boden" <[EMAIL PROTECTED]> said: roger_no_spam> Are there any known IPR infringement lawsuits as result roger_no_spam> of using or including openssl in a product? None that I know of. And honestly, if there had been a law

Re: what exactly is the difference between ssl and ssh (secure shell)?

2006-01-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 19 Jan 2006 11:03:09 -0800, "Chong Peng" <[EMAIL PROTECTED]> said: ChongPeng> if you google "ssl and ssh", you will find a few pages ChongPeng> regarding this issue, such as: ChongPeng> ChongPeng> http://www.snailbook.com/faq/ssl.auto.html ChongPeng> http:/

Re: Problem upgrading to 0.9.8a

2006-01-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 5 Jan 2006 11:37:40 -0500, Dan Peacock <[EMAIL PROTECTED]> said: bluedanunit> We have an application that is currently using OpenSSL bluedanunit> 0.9.6c in conjunction with an Apache server. We've been bluedanunit> told we should upgrade the libaries to 0.

Re: proxyCertInfo

2006-01-02 Thread Richard Levitte - VMS Whacker
In message on Tue, 3 Jan 2006 00:33:45 +0100, [EMAIL PROTECTED] said: mailinglists> I *have* read the RFC 3820 and the mailinglists> doc/HOWTO/proxy_certificates.txt, however I am still not mailinglists> sure about: mailinglists> mailinglists> - the language field: can someone explain the diffe

Re: unable to free PROXY_CERT_INFO_EXTENSION

2005-12-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 05 Dec 2005 11:43:40 -0800, Matthew Rodriguez DSD staff <[EMAIL PROTECTED]> said: MKRodriguez> #include MKRodriguez> #include MKRodriguez> #include MKRodriguez> static char * pci_value = "critical, language:Inherit all"; MKRodriguez> MKRodriguez> int MK

Re: unable to free PROXY_CERT_INFO_EXTENSION

2005-12-02 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 02 Dec 2005 12:09:14 -0800, Matthew Rodriguez DSD staff <[EMAIL PROTECTED]> said: MKRodriguez> I can't seem to get rid of a memory leak when I create a MKRodriguez> proxyCertInfo extension. I've tried calling MKRodriguez> X509_EXTENSION_free, and then X509_E

Re: E-mail address changed

2005-11-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 3 Nov 2005 10:01:01 +0200 (EET), Kande Kande <[EMAIL PROTECTED]> said: pierrekande> My e-mail address is changed to [EMAIL PROTECTED] pierrekande> The e-mail [EMAIL PROTECTED] is not longer available Please resubscribe from your new address. Your old one

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 18 Oct 2005 09:31:44 -0400, David Gianndrea <[EMAIL PROTECTED]> said: dgianndrea> I wonder if some one could point me to some high level dgianndrea> document that would describe where, and when you would use dgianndrea> ECB, CBC, CFB, OFB modes. I have some

[ANNOUNCE] OpenSSL version 0.9.7i released

2005-10-14 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.7i released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 0.9.7h caused crashes when the shared libcrypto was upgraded. This release fixes that pr

Re: Licensing conditions in OpenSSL with proprietary software

2005-10-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 13 Oct 2005 11:15:33 +0500, "ahmad hassan" <[EMAIL PROTECTED]> said: guideveloper123> I am using OpenSSL as a static library with my guideveloper123> proprietary software for windows OS. I would like to guideveloper123> know what steps exactly i have to do p

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 22:08:35 +0200, "Matthias Buecher / Germany" <[EMAIL PROTECTED]> said: maddes.b> Do I have to apply this to 0.9.8a too? No, this is a 0.9.7h issue only. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 21:53:23 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> The patch to correct the problem is quite easy, though, and levitte> you can find it attached to this letter. That patch isn't enou

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 10:22:00 -0700, "David Schwartz" <[EMAIL PROTECTED]> said: davids> > I just tried to upgrade from openssl-0.9.7g to 0.9.7h davids> > and noticed that my openssh-4.2p1 server and clients now davids> > crash with segfault with the new openssl share

Re: question on linking dynamic engines

2005-10-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 5 Oct 2005 21:25:34 -0700 (PDT), Anil Gunturu <[EMAIL PROTECTED]> said: anil_gunturu> How do I link the dynamic engine "so" and the library anil_gunturu> that the hardware vendor provides? For example, if I am anil_gunturu> using the ibmca engine in the demo

Re: AES test code

2005-09-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 21 Sep 2005 16:08:44 +0530, joseph k j <[EMAIL PROTECTED]> said: ark.papers> Why is there no unit test code available for AES, in ark.papers> crypto/aes. We use the newer EVP tester. See crypto/evp/evp_test.c and crypto/evp/evptests.txt. ark.papers> 1. I

Re: Different versions of OpenSSL

2005-09-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 20 Sep 2005 13:49:12 -0300, "Cleidson" <[EMAIL PROTECTED]> said: cleidson> I use Linux 2.6.5, OpenSSL 0.9.7 and OpenVPN 2.0. cleidson> Now I want to use OpenVPN with OpenSSL 0.9.8, but keeping cleidson> other aplications using OpenSSL 0.9.7. cleidson> Someon

Re: What does Outlook 2003 look for in a S/MIME cert?

2005-08-30 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 31 Aug 2005 07:11:28 +1200, Jason Haar <[EMAIL PROTECTED]> said: Jason.Haar> Richard Levitte wrote: Jason.Haar> Jason.Haar> > Jason Haar writes: Jason.Haar> > Jason.Haar> >> ... *IT CAN'T READ THE "SENT ITEMS" COPY OF THE EMAIL Jason.Haar> >> IT JUST SENT*

Re: undefined symbol: X509_free

2005-08-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 30 Aug 2005 08:07:03 +0530, Toney Samuel <[EMAIL PROTECTED]> said: toney.samuel> i have downloaded openssl-0.9.8.tar.gz. I untared it then configured toney.samuel> it with these switches toney.samuel> ./config --prefix=/usr/local shared zlib-dynamic toney.s

Re: undefined references compiling demo program

2005-08-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Aug 2005 16:51:59 -0700, "Kevin L. King" <[EMAIL PROTECTED]> said: kevink> I installed OpenSSL 0.9.8 on Fedora in the default kevink> /usr/local/ssl directory. I tried compiling mkcert.c in the kevink> ../openssl-0.9.8/demos/x509 directory like this: kevi

Re: Can't to find .so libraries

2005-08-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 10 Aug 2005 18:24:54 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> I have just done it, a friend told me to add the johnnygonzalezl> shared option to the config command, like this:

Re: Can't to find .so libraries

2005-08-09 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 10 Aug 2005 03:27:23 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> > Hmm? It should, in the engines/ directory. johnnygonzalezl> Well, I don't know if I did it wrong, but I didn't johnnygonzalezl> find the libraries in the downloa

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 03:45:01 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> > Hmm, maybe you should ask the OpenCA folks? They johnnygonzalezl> > may be counting on OpenSSL 0.9.8, which does indeed johnnygonzalezl> > contain that shared lib

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 03:29:09 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Is this the same as that I need. My whole context is johnnygonzalezl> this: I have a CA software (OpenCA) which uses an HSM johnnygonzalezl> (nCipher), in some docs

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 00:24:50 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> Thanks a lot for your answer, however I have another johnnygonzalezl> question. johnnygonzalezl> johnnygonzalezl>

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 8 Aug 2005 22:16:13 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> I thought I only needed to download it somewhere in johnnygonzalezl> openssl sources or compile it and generate it.

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 8 Aug 2005 20:32:09 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Can anyone tell me where can I find a library I need? johnnygonzalezl> I need the libncipher.so library, but I can't find johnnygonzalezl> it. Where should I look f

Re: Permission to link OpenSSL

2005-07-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 26 Jul 2005 08:59:01 -0400, Charles Gagnon <[EMAIL PROTECTED]> said: charlesg> I help maintain wput, a command-line ftp-client that looks charlesg> like wget but instead of downloading, uploads files or whole charlesg> directories to remote ftp-servers (http

Re: Setting HWCryptoHook_InitInfo structure for HWCRHK/CHIL library

2005-07-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 11 Jul 2005 10:35:32 +0200, Bartek Palak <[EMAIL PROTECTED]> said: bartek> How to force HWCRHK library to use "my" getphystoken and bartek> getpassphrase functions? Sounds like you're about to write your own engine... Cheers, Richard - Please consider

Re: Batch mode for ENGINE_load_private_key

2005-07-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 11 Jul 2005 10:06:03 +0200, Bartek Palak <[EMAIL PROTECTED]> said: bartek> I have tried to implement UI_METHOD doesn't ask for the pass bartek> phrase. But in case of any errors (e.g. no card inserted, bartek> incorrect pass) Complaints like no card insert

Re: openssl-0.9.8 will not compile on MinGW

2005-07-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 6 Jul 2005 18:53:43 +0200, "Frank Buttner" <[EMAIL PROTECTED]> said: frank-buettner> What data do you need. Can I send you the full output frank-buettner> of the compiling process? Configuration and compilation, yes please. Cheers, Richard - Please co

Re: openssl ocsp request , serial number

2005-07-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 6 Jul 2005 09:07:23 -0700, "Choudhary, Bimalendu" <[EMAIL PROTECTED]> said: bchoudhary> 2) When I send the serial number 0x81 the der encoded bchoudhary>serial number is bchoudhary> bchoudhary> 02 02 00 81 bchoudhary> bchoudhary> 4) When I send the ser

Re: Shamir Secret Sharing in OpenSSL?

2005-07-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 06 Jul 2005 12:00:24 -0300, Rafael Cividanes <[EMAIL PROTECTED]> said: rafacividanes> I was looking this discussion you have rafacividanes> mentioned. But for my application I just need a free rafacividanes> secure implementation of Shamir's Secret Shari

[ANNOUNCE] OpenSSL 0.9.8 released

2005-07-05 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 released == OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.8 of our open sour

Re: Creating certs for others (without their private keys)

2005-07-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 04 Jul 2005 17:16:31 -0400, Uri <[EMAIL PROTECTED]> said: urimobile> /At least two demoCA sripts - CA and CA.pl CA.sh and CA.pl both do the same wrong thing, bundle the private key with the CSR (Certificate Signature Request or something like that, describ

Re: Creating certs for others (without their private keys)

2005-07-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 04 Jul 2005 13:41:17 -0400, Uri <[EMAIL PROTECTED]> said: urimobile> Richard Levitte - VMS Whacker wrote: urimobile> urimobile> >>> >What makes you think the private key is included? urimobile> >urimobile> urimo

Re: Creating certs for others (without their private keys)

2005-07-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 04 Jul 2005 00:03:50 -0400, Uri <[EMAIL PROTECTED]> said: urimobile> Dr. Stephen Henson wrote: urimobile> urimobile> >On Sun, Jul 03, 2005, Uri wrote: urimobile> > urimobile> >>How do I create a request that doesn't contain private urimobile> >>key, and how

Re: Creating certs for others (without their private keys)

2005-07-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 04 Jul 2005 00:00:20 -0400, Uri <[EMAIL PROTECTED]> said: urimobile> Tan Eng Ten wrote: urimobile> urimobile> >> But how??? Could you give an example please (of [a] urimobile> >> creating, and [b] signing a "req")? urimobile> > urimobile> > How is in the HO

Still a few issues. Release delayed...

2005-06-27 Thread Richard Levitte - VMS Whacker
Hi, The release is delayed again. There are a couple of issues that I think need to be checked. I hope we'll be through with this in a week. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte

Re: Release delayed a few days - 20050624 Success with Mac OS X 10.4.1

2005-06-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 24 Jun 2005 08:58:29 -0700, Rush Manbert <[EMAIL PROTECTED]> said: rush> Just tried again with 20050624 snapshot. It built just fine and rush> successfully ran all the tests. Great! Thanks! Noted. Cheers, Richard - Please consider sponsoring my wor

Re: OpenSSL on VMS

2005-06-24 Thread Richard Levitte - VMS Whacker
Hey Steve, I guess I'm the one supposed to answer your query :-). In message <[EMAIL PROTECTED]> on Fri, 24 Jun 2005 09:29:33 -0400 (EDT), Steve Thompson <[EMAIL PROTECTED]> said: smt> (1) I currently obtain sockets by doing an $ASSIGN to INET0:. I smt> assume that these sockets cannot be p

Release delayed a few days...

2005-06-23 Thread Richard Levitte - VMS Whacker
Hi all, Due to a number of last minute reports, the final release of OpenSSL 0.9.8 is delayed a few days to give the affected people a chance to test that the corrections done do fix things as expeted. So please, if you have sent in a report about something failing with one of the 0.9.8 betas, gr

[ANNOUNCE] OpenSSL 0.9.8 beta 6 released

2005-06-20 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 6 (FINAL!) = OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The sixth beta is now released. The beta release

Rescheduling

2005-06-19 Thread Richard Levitte - VMS Whacker
Hi, I've just remade the release schedule a little bit. Originally, OpenSSL 0.9.8 was supposed to be released yesterday. However, due to personal stuff and some issues with the latest beta, the release has been slightly delayed. So, the final beta will be this evening (Swedish time), and the re

Release delay

2005-06-16 Thread Richard Levitte - VMS Whacker
I'm delaying the release of 0.9.8 beta6 until tomorrow (friday) night. The reason is that I want to test some changes on systems that may be sensitive to them before releasing. I believe that will be better for the release process as a whole. Cheers, Richard - Please consider sponsoring my w

Re: mini-ASN.1 compiler 0.9.8-beta5

2005-06-16 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 16 Jun 2005 11:51:57 +0200, pana <[EMAIL PROTECTED]> said: panasa1> The error I get when I use -genstr is: panasa1> panasa1> unknown option -genstr panasa1> asn1parse [options] where options are panasa1> -inform arg input format - one of DER TXT PEM pan

Re: Need objective arguments against double certificate

2005-06-16 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 14 Jun 2005 00:14:54 -1000, "coco coco" <[EMAIL PROTECTED]> said: coconut_to_go> We called it bullshit, and were having a hot debate, coconut_to_go> most people (the technical people) are opposed to that, coconut_to_go> saying that there is nothing secure ab

[ANNOUNCE] OpenSSL 0.9.8 beta 5 released

2005-06-12 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 5 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The fifth beta is now released. The beta release is available for

[ANNOUNCE] OpenSSL 0.9.8 beta 4 released

2005-06-05 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 4 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The fourth beta is now released. The beta release is available for

[ANNOUNCE] OpenSSL 0.9.8 beta 3 released

2005-05-30 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 3 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The third beta is now released. The beta release is available for

Re: Question on ENGINE implementation.

2005-05-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 26 May 2005 11:34:20 +0100, David Woodroffe <[EMAIL PROTECTED]> said: dwoodroffe> I am currently trying to use openSSL with an nCipher HSM dwoodroffe> for signing and verfication. At the moment we are using dwoodroffe> the with-nfast predicate for the applic

[ANNOUNCE] OpenSSL 0.9.8 beta 2 released

2005-05-23 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 2 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The second beta is now released. The beta release is available for

[ANNOUNCE] OpenSSL 0.9.8 beta 1 released

2005-05-19 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 1 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The first beta is now released. The beta release is available for d

Re: Regarding OpenSSL

2005-05-05 Thread Richard Levitte - VMS Whacker
This kind of question should go to openssl-users@openssl.org, which is why I only send the response there. In message <[EMAIL PROTECTED]> on Thu, 5 May 2005 14:26:42 +0530, "Karthik Bodigere" <[EMAIL PROTECTED]> said: Karthik.Bodigere> I am using OpenSSL library in our web application. Karthik.B

Re: OpenSSL 0.9.6m or 0.9.7g?

2005-04-30 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 30 Apr 2005 11:03:37 -0400, "Scott Galambos" <[EMAIL PROTECTED]> said: scottg> I noticed that a 0.9.6n has not been released in a long scottg> time. Is this because its no longer maintained? Should I be running scottg> 0.9.7g now instead? scottg> scottg

Re: Can anybody share some ENGINE sample code?

2005-04-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 18 Apr 2005 15:09:36 -0700, Edward Chan <[EMAIL PROTECTED]> said: echan> Does anybody have some working code that enables the use of echan> crypto hardware using the ENGINE API's and would be willing to echan> share it? Uhmm, there are a few engines in cryp

Re: [EMAIL PROTECTED]: X.509 v3 certificates and Sha256, Sha384, Sha512 and RSASSA-PSS]

2005-04-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 13 Apr 2005 13:06:45 +0200, Lutz Jaenicke <[EMAIL PROTECTED]> said: Lutz.Jaenicke> From: Kauppinen Pauli <[EMAIL PROTECTED]> Lutz.Jaenicke> I am trying to verify X.509 v3 certificate with Lutz.Jaenicke> openssl.exe verify command but I get following error:

Re: cbc3_enc.c usage

2005-04-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 13 Apr 2005 10:43:13 +0300, "Israel Viente" <[EMAIL PROTECTED]> said: israel_viente> I wanted to use cbc3 encryption but saw the following israel_viente> in openssl-0.9.7f\crypto\des: israel_viente> israel_viente> 1) In FILE0 - "cbc3_enc.c   - des_3

[ANNOUNCE] OpenSSL 0.9.7g released

2005-04-11 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.7g released == OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.7g of our open so

Re: SSL != HTTPS ???

2005-04-01 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 01 Apr 2005 10:10:58 -0500, Joe Flowers <[EMAIL PROTECTED]> said: flowers> Please help me understand what's going on. I think the first thing you should do is take a look at the TLS (TLS is basically the newer version of SSL) specification, RFC 2246. It ex

Re: compiling openssl with zlib support on win32

2005-03-31 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 1 Apr 2005 14:57:34 +1000, "Louis Solomon [SteelBytes]" <[EMAIL PROTECTED]> said: louis> > Hmm, I wouldn't be surprised if we've forgotten to unload the shared louis> > library for zlib, and thereby created that "leak". Note that the leak louis> > isn't ver

Re: compiling openssl with zlib support on win32

2005-03-31 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 31 Mar 2005 21:07:28 +1000, "Louis Solomon [SteelBytes]" <[EMAIL PROTECTED]> said: louis> I then stick zlib1.dll in the out32 folder, and run louis> ssltest -zlib louis> and I get the following output louis> TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-S

  1   2   3   4   5   6   7   8   >