RE: Interoperability question

2013-09-14 Thread mclellan, dave
openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Thomson, Duncan Sent: Friday, September 13, 2013 9:10 PM To: openssl-users@openssl.org Subject: RE: Interoperability question For reasons I can't go into, it is mandatory that we use Microsoft's "Cryptography

RE: Interoperability question

2013-09-13 Thread Thomson, Duncan
us. Is that possible? Duncan >-Original Message- >From: owner-openssl-us...@openssl.org [mailto:owner-openssl- >us...@openssl.org] On Behalf Of mclellan, dave >Sent: Friday, September 13, 2013 11:48 AM >To: openssl-users@openssl.org >Subject: RE: Interoperability question >

RE: Interoperability question

2013-09-13 Thread mclellan, dave
Is there a reason you don't want to use OpenSSL on windows? I'd say that would be pretty interoperable -- or more appropriately: it would make your source the same (roughly) for Windows and Linux. Humbly suggested... +-+-+-+-+-+-+-+-+- Dave McLellan, VMAX Software Engineering, EMC Corporatio

Re: interoperability of C++ libcrypto and Java bouncy castle

2010-03-01 Thread Dr. Stephen Henson
On Sun, Feb 28, 2010, ashuahen wrote: > > I am using AES_CBC with padding (using PKCS#5 to pad) on C++ side: > > AES_set_encrypt_key( keyBuf, 128, &key ) > keyBuf contains key string > key is the key generated > > Block Lenght is 16 > > AES_cbc_encrypt (ibuf, obuf, lenpad, &key, iv, AES_ENCRYP

Re: Interoperability with Microsoft CA

2004-04-07 Thread Dr. Stephen Henson
On Wed, Apr 07, 2004, Steve OBrien wrote: > >What commands have you used on OpenSSL to sign the request? You need the > CA certificate extensions for obvious reasons. > I used openssl ca -sign and CA.pl -sign. > I thought that 0.9.7 would accept the unknown x509 extensions? (as you can > probabl

Re: Interoperability with Microsoft CA

2004-04-07 Thread Steve OBrien
>What commands have you used on OpenSSL to sign the request? You need the CA certificate extensions for obvious reasons. I used openssl ca -sign and CA.pl -sign. I thought that 0.9.7 would accept the unknown x509 extensions? (as you can probably tell I am no openssl expert, sorry just trying to fi

Re: Interoperability with Microsoft CA

2004-04-07 Thread Dr. Stephen Henson
On Wed, Apr 07, 2004, Steve OBrien wrote: > However what my original question was: > I would like to create a subordinate Microsoft CA to my openssl > CA. When doing so in MS land you create a csr, I ship this off to openssl > and sign it, but when it comes back I get errors trying to i

Re: Interoperability with Microsoft CA

2004-04-07 Thread Steve OBrien
However what my original question was:         I would like to create a subordinate Microsoft CA to my openssl CA.  When doing so in MS land you create a csr, I ship this off to openssl and sign it, but when it comes back I get errors trying to import it as my CA.  Has anyone had experience doing

Re: Interoperability with Microsoft CA

2004-04-07 Thread Charles B Cranston
Ron Croonenberg wrote: I tried to get a certificate to work on Windows200 with IIS too. I don't know if this is off topic, but how can I sign a certificate request, created on a windows2000 server. I want to sign the request and create a certificate on a linux machine running openssl then take th

RE: interoperability

2001-10-29 Thread Glen S Mehn
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Nick Temple Sent: Monday, October 29, 2001 04:55 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; modssl-users Subject: Re: interoperability Absolutely. You have to have your root cert signed by their root key, so the chain can be veri

Re: interoperability

2001-10-29 Thread Massimiliano Pala
> Juan Carlos Albores Aguilar wrote: > > is the following possible?? if so, could you explain me how or point me > documentation about it??. [...] > certificates and ours could interoperate?? or maybe with DoD certificates??. > Of course it has to be an agreement and all those, i repeate, technic

Re: interoperability

2001-10-29 Thread Nick Temple
Absolutely. You have to have your root cert signed by their root key, so the chain can be verified. This is pretty much what PKI is all about. Thawte (http://www.thawte.com) used to have information on their website about to do just that. However, I can't seem to find it (things changed when

Re: interoperability, esp. with a SSLv3(?) server

2000-05-19 Thread Bodo Moeller
On Tue, May 16, 2000 at 08:45:08PM -0700, Claus Assmann wrote: > I have a question about the different SSL versions, i.e., which one > should a client use to be interoperable? The specific problem is > with the MTA at mail.stalker.com. I finally got around to do some > more debugging and found ou

Re: interoperability, esp. with a SSLv3(?) server

2000-05-17 Thread Lutz Jaenicke
On Tue, May 16, 2000 at 08:45:08PM -0700, Claus Assmann wrote: > I have a question about the different SSL versions, i.e., which one > should a client use to be interoperable? The specific problem is > with the MTA at mail.stalker.com. I finally got around to do some > more debugging and found out

Re: Interoperability TLS/SSL

2000-03-20 Thread Claus Assmann
On Mon, Mar 20, 2000, Bodo Moeller wrote: > On Sun, Mar 19, 2000 at 07:51:38PM -0800, Claus Assmann wrote: > > I'm trying to write a server (using OpenSSL) that doesn't use > > patented algorithms, which means I have to restrict my server to > > TLSv1 or SSLv3 (right?), so I would like to use TLS

Re: Interoperability TLS/SSL

2000-03-20 Thread Bodo Moeller
On Sun, Mar 19, 2000 at 07:51:38PM -0800, Claus Assmann wrote: > I'm trying to write a server (using OpenSSL) that doesn't use > patented algorithms, which means I have to restrict my server to > TLSv1 or SSLv3 (right?), so I would like to use TLSv1 only, but > then a "default" client (SSL23_meth

Re: Interoperability TLS/SSL

2000-03-20 Thread Lutz Jaenicke
On Sun, Mar 19, 2000 at 07:51:38PM -0800, Claus Assmann wrote: > I'm trying to write a server (using OpenSSL) that doesn't use > patented algorithms, which means I have to restrict my server to > TLSv1 or SSLv3 (right?), so I would like to use TLSv1 only, but > then a "default" client (SSL23_metho

Re: Interoperability TLS/SSL

2000-03-19 Thread Rich Salz
> I'm trying to write a server (using OpenSSL) that doesn't use > patented algorithms. In all seriousness, why? Is it important that you deploy before September? Your testing matrix was among the most awesome I have ever seen. /r$ ___