> From: owner-openssl-us...@openssl.org On Behalf Of Mr.Rout
> Sent: Wednesday, 18 January, 2012 02:52
> root@1143726:/usr/bin# openssl s_client -connect 10.204.4.69:7003
> WARNING: can't open config file: /usr/ssl/openssl.cnf
> CONNECTED(0003)
> depth=0 C = IN, ST = Karnataka, L = Bangalo
tensions:
X509v3 Basic Constraints:
CA:FALSE
Please let me know what is missing here & why i am getting the above error.
Best regards,
S S Rout
--
View this message in context:
http://old.nabble.com/Please-Help-me-out--SSL-ERROR-tp33159464p33159464.html
Sent from the Op
Hi Open-SSL Users,
Could you please help me about the basics of how to set and run open-ssl on my
server.
Thanks
ola <[EMAIL PROTECTED]>
>
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing Listopenssl-users@openssl.org
> Automated List Manager [EMAIL PRO
thank you, its working fine.
Marek Marcola <[EMAIL PROTECTED]> wrote: Hello,
> ok i l try that.let me know u ..
You may try something like that (not tested):
int rsa_read_pem(RSA ** rsa, char *buf, int len)
{
BIO *mem;
if ((mem = BIO_new_mem_buf(buf, len)) == NULL) {
goto err;
Hello,
> ok i l try that.let me know u ..
You may try something like that (not tested):
int rsa_read_pem(RSA ** rsa, char *buf, int len)
{
BIO *mem;
if ((mem = BIO_new_mem_buf(buf, len)) == NULL) {
goto err;
}
*rsa = PEM_read_bio_RSAPrivateKey(mem, NULL, NULL, NULL);
ok i l try that.let me know u ..
Marek Marcola <[EMAIL PROTECTED]> wrote: Hello,
> i tried that way, now its generating coredump files.is there any other
> way to solve that issue...
You should use something like that (buf and len has your key):
unsigned char *p;
RSA *rsa = NULL;
p = b
:ASN1
> lib:ssl_rsa.c:607
>
>
> how to resolve the issue. please help me.
Try d2i_RSAPrivateKey() if your buffer has RSA key in DER format.
Best regards,
--
Marek Marcola
__
OpenSSL Project http://www.ope
Hello,
> i tried that way, now its generating coredump files.is there any other
> way to solve that issue...
You should use something like that (buf and len has your key):
unsigned char *p;
RSA *rsa = NULL;
p = buf;
if ((rsa=d2i_RSAPrivateKey(NULL,&p,(long)len)) == NULL){
goto err;
}
if (
ng routines:ASN1_ITEM_EX_D2I:nested
> asn1 error:tasn_dec.c:374:Type=RSA
> 29755: error:140B200D:SSL routines:SSL_CTX_use_RSAPrivateKey_ASN1:ASN1
> lib:ssl_rsa.c:607
>
>
> how to resolve the issue. please help me.
Try d2i_RSAPrivateKey() if your buffer
ib:ssl_rsa.c:607
>
>
> how to resolve the issue. please help me.
Try d2i_RSAPrivateKey() if your buffer has RSA key in DER format.
Best regards,
--
Marek Marcola <[EMAIL PROTECTED]>
__
OpenSSL Project
the issue. please help me.
-
Download prohibited? No problem. CHAT from any browser, without download.
It is the OCSP responder cert. I suppose you already
have that, right? Or you can use this one which will
expire on Sep 15, 2005 though.
-BEGIN CERTIFICATE-
MIID2jCCA0OgAwIBAgIQaVnCDg78Yj+N1V5h9xQh0jANBgkqhkiG9w0BAQUFADCB
lDELMAkGA1UEBhMCVVMxGDAWBgNVBAoTD1UuUy4gR292ZXJubWVudDEMMAoGA1UE
CxM
od.
> >
> > > (i have taken this command/files from
> >
> openvalidation.org<http://openvalidation.org/>(http://www.openvalidation.org/useserviceopenssl.htm)
> >
> > > )
> > >
> > > But, In this command what is the purpose of
> >
URL as http://ocsp.verisign.com, how
> can i get verisign's
> > OCSPServer.pem. Also how can i get
> > latest OCSPServer.pem file for the given URL.
> >
> > 2)I tested by giving latest user certificates
> other than
> > openvalidation.org <http://
erationI would be grateful to you if you would help me out as i am spending a lot of time on understanding this.
Please help me out.Thanks,vv
__Do You Yahoo!?Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
Hi,
The -Vafile option is used for explicitly trusting the responder certificate of the ocsp serverSo if you omit this option you will get the "unable to get local issuer certificate" error.
To get this command workingopenssl ocsp -url http://ocsp.verisign.com:8080 -issuer ROOT_CA.pem -VAfile OCS
Hi,
Is the following command for requesting OCSP status using openSSL is correct?
1) "ocsp -url http://ocsp.openvalidation.org -issuer ROOT_CA.pem -VAfile OCSPServer.pem -cert User.pem".
If i change above command, BY REMOVING OCSPServer.pem file i am getting status as good but with a message
On Tue, Aug 16, 2005, varma d wrote:
>
> But, In this command what is the purpose of OCSPServer.pem, i still dont
> understand the purpose of OCSPServer.pem as we need to just send our request
> and expect a response from OCSP responder irrespective of OCSPServer.pemfile.
>
This is an issue o
you for your time and considerationI would be grateful to you if you would help me out as i am spending a lot of time on understanding this.
Please help me out.
Thanks,
vv
-Original Message-
From: Radhika Gunasekar
[mailto:[EMAIL PROTECTED]
Sent: Friday, April
08, 2005 10:46 AM
To: 'openssl-users@openssl.org'
Subject: Encrypting/Decrypting
messages
Hello,
I am a new user to OpenSSL. I have couple of questions.
Background:
I am wor
>From what I can see, SSL is defined as "typedef struct ssl_st SSL" in
ssl.h. If you search for "struct ssl_st" in ssl.h you will find the
definition for that structure.
Hope that helps!
On Sat, 2004-10-02 at 19:00, lu lu wrote:
> Hi, list members.
> I really want help very much. I asked th
Hi, list members. I really want help very much. I asked this question about a week ago, but nobody answer my question. I think maybe it is just because that I had not make the question clear. What I want to know is where can I find the definition of "SSL". As it appears in many functions like --
http://www.openssl.org/support/
On Fri, 20 Aug 2004, Buddy wrote:
> Anyone out there, please help me! I am disabled and do not want to continue to see
> your conversations, although I appreciate the reason and the cause of the
> conversations.
> I just want off the list.
>
On Mon, Mar 17, 2003, luke wrote:
>
> i have try many times.
> i got the same error message.
> ==
> perl Configure VC-WIN32
> .\ms\do_nt.bat
> nmake -f .\ms\nt.mak
>
> ps .net vc++(vc++ v7)
>
> .
> ui_compat.c
> cl /Fotmp32\krb5_asn.obj
i have try many times.
i got the same error message.
==
perl Configure VC-WIN32
.\ms\do_nt.bat
nmake -f .\ms\nt.mak
ps .net vc++(vc++ v7)
.
ui_compat.c
cl /Fotmp32\krb5_asn.obj -Iinc32 -Itmp32 /MD /W3 /WX /G5 /Ox /O2
/Ob2 /
Gs0 /GF /Gy
Hi there,
The problem that I encountered was with a call to ERR_get_error_line_data(),
and has not yet been solved. I was not encountering any memory leaks
with SSL_connect(). We are using OpenSSL V 0.9.6b currently, we plan
to upgrade in the near future.
When creating an SSL*, I tend to do the
Hey. I can't enter the page: www.cardkingdom.com, because I come to a site
called SSL/TLS-aware Apache webserver or something.
I hope you can fix this problem, so I can see the page I want to visit.
Thannk you.
_
Get your FREE downl
Dear Admin
I have a long question.
I got an error message during update openssl. The error message is like this
-
root@proxy imsi]# rpm -Uvh openssl-0.9.6-9.i386.rpm
openssl ##
/sb
, September 27, 2001 1:35 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: Please help me!
Hello Ryan!
Thank you very much.
I have added the line in the Certificate Extensions section of my
openssl.cnf file:
crlDistributionPoints=URI:http://cert.vrn.ru/crl/main.crl
and then I made some
--- Original Message -
From: "Ryan Hurst" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 26, 2001 10:15 PM
Subject: RE: Please help me!
> Valery --
>
> This field in a certificate points to where the issuer will make its
> certificate revocat
.
Ryan
-Original Message-
From: Valery [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 26, 2001 1:12 AM
To: [EMAIL PROTECTED]
Subject: Please help me!
Hello!
I used the certificate extensions "crlDistributionPoints" in my openssl.cnf
file.
And I faced the following problem.
W
gth%d\n",
icnt);
In this case I get the length
as 74.
I didnt understand the concept
of the BIO structure in the former case. Can any one explain me what makes
the length more in the former than the later case.
Please help me to understand
better the concept
Tha
t;
>
>and i install
>But that added user certification
>
>
>
>
>How create intermediation CA(?) ?
>i want install intermediation CA(?)
>but i don't know
>I want openssl sample command that create down issue!
>Please help me!
ÖÂ
Àñ
Oh dear, sounds like you're in a right pickle.
Don't forget to call this first:
SSLeay_add_all_algorithms();
It fills out some structures in SSL library that may be the cause of
your problems (I had the same problems as you, and this fixed it, after
much debugging).
There's no need to call RSA
Hi, I'm a beginner programmer and I have been dropped into a big
cryptographic project. My boss went away, and told me what to do still he
comes back.
I have to do the following things in C:
-generate an RSA key pair
-write it out in a file in DER or PEM format
I tryed the following code:
#incl
Hi,
in short:
using SSL you have two parts of encryption:
first a public/secret key system (asymmetric cryptographie) is used to
establish a connection and to agree for a common secret key.
When both parties have agreed to that common secret key (which is, in
short, encrypted with the public keys
hi,
You know that OpenSSL supports DES for encryption of
data.So if you want to establish a communication link
between client & server then you must use a secret
key.
Now my question is,What the certificate contains?
I mean what public keys it contains & for what purpose
they can be used?
Could
sir,
I tried so many times and in so many ways to write
the client/server
applications ON Linux system.But none of them worked
out well.
I even tried the client/server programs that are given
in the "/apps" directory of Openssl.
So iam requesting you to send me an CLIENT/SERVER
application that
Hello!
> It is first time for me to work on your
> "openssl" security software.So iam requesting you to
> send me the testing program(for client&server)in "C"
> which uses your"openssl API"functions of C
> language.when i run that (the program that you are
> going to send )programs(client program
hi Douglas,
Thanks for your valuable information.
I,Mr.Radhakrishna-presently working on SSL field,have
installed "openssl" security software on the Linux
network.Now i want to send the information from one
system to another system using "openssl API
functions".It is first time for me to work on
On Thu, Apr 06, 2000 at 02:51:04AM +0200, Ivo MACHULDA wrote:
> I tray signing simple text file over openssl tool with thi comand:
>
> /usr/local/ssl/bin/openssl smime -sign -in mail.txt -text -out mail.msg \
> -signer user.pem
Signing requires both the certificate and the pri
Dear all,
So far I recieved 2 mails. One of them is a question about our
project,
and the other was recommending me to try s_server.c and s_client.c in apps/
However, I think that these files are about specifing the options from the
command line argument.
May be I didn't clear myself. I
C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:662:Expecting: ANY PRIVATE KEY
Please help me
Thank you very much
Ivo MACHULDA
44 matches
Mail list logo