Algorithm used to convert passphase provided in callback to cipher key.

2003-10-30 Thread Alicia da Conceicao
Greetings: I am working on making some embedded encryption code interop with openssl. To that end, I would appreciate if someone could please outline step-by-step how a pass-phase provided in a password callback is converted into an encryption key for a symmetric cipher. Whatever means openssl u

Re: Smartcard logon certificate

2003-10-30 Thread Nils Larsch
Martin Plenk wrote: subject Alternate Name with the Microsoft Universal Principal Name I generated certificates with a Microsoft CA and used the ASN1-parser to get the Strings. I attached a sample File. The problem is, that the length is encoded. So you can change the text in the attached fil

X509 extensions

2003-10-30 Thread Thomas Monjalon
Hello, In v3_conf.c, I don't understand the difference between v3_generic_extension and do_ext_nconf I just saw that v3_generic_extension is called if the value contains "DER:". What is a generic extension ? Is it documented anywhere ? Thanks. __

attribute certificates

2003-10-30 Thread Gerd Schering
Hi, I am shure, I saw an email some months ago, where someone (probabely Dr. Henson) said, that there was some support for rfc3281 compliant attribute certificates. Unfortunately I can't find it! Could someone please help? Thanks, Gerd -- -- --

(New user) BIO_copy_next_retry problem

2003-10-30 Thread Biggs, Stephen
Title: (New user) BIO_copy_next_retry problem Hi all, I'm using v0.9.7b to protoype an SSL server emulation on Windows (32bit). However, I seem to have hit a problem which I can't solve, probably because I lack some understanding about the code. Here's the problem: I have set up a simple c

RE: libeay32_a.lib

2003-10-30 Thread Jan-Olof Andersson
Thanks! he have version a and c of openssl.. I guess I need the b version because I get an error for missing function... But I am get ingcloser.. Best regards cl.exe /c /nologo /D "WIN32" /D "_WINDOWS" /D "_MBCS" /W1 /MD /D "XMLSE C_CRYPTO_OPENSSL" /D "XMLSEC_CRYPTO=\"openssl\"" /D "L

openssl 0.9.7b libeay32_a.lib for win32?

2003-10-30 Thread Jan-Olof Andersson
Title: (New user) BIO_copy_next_retry problem Hi!   Is there anyone out there who has openssl 0.9.7b and has compiled libeay32_a.lib for win32?   Best regards   Jan-Olof

Re: attribute certificates

2003-10-30 Thread Paul Koster
> I am shure, I saw an email some months ago, where someone > (probabely Dr. Henson) said, that there was some support for rfc3281 > compliant attribute certificates. > Unfortunately I can't find it! Could someone please help? At least he once answered that to me, and after decrypting his answer I

Re: Algorithm used to convert passphase provided in callback to cipher key.

2003-10-30 Thread Nils Larsch
On Thursday 30 October 2003 08:02, Alicia da Conceicao wrote: > Greetings: > > I am working on making some embedded encryption code interop with > openssl. To that end, I would appreciate if someone could please > outline step-by-step how a pass-phase provided in a password > callback is converted

SSL_CTX_load_verify_locations

2003-10-30 Thread Chris Zacker
I have a simple question. If you have a specific CACert that you (a client) want to use for verifying the Server, and you don't have a file system what do you need to do? I know that SLL_CTX_load_verify_locations expect you to pass in a filename and directory (although dir can be null). Is there

Re: SSL_CTX_load_verify_locations

2003-10-30 Thread padma saxena
I modified X509_load_cert_crl_file() (in by_file.c) to invoke BIO_new_mem_buf() rather than BIO_new_file(). This seems to work satisfactorily. I probably have to add a module by_mem.c similar to by_file.c so we can pass a buffer (rather than a filename) to SSL_CTX_load_verify_locations(). I did not

openssl upgrade & apache

2003-10-30 Thread Andre Soto
Greetings, Currently, I'm running openssl 0.9.6e w/ apache 1.3.26.  Due to recent news, I need to upgrade openssl.  My questions are:  1. Could I upgrade the openssl libs to say 0.9.6k or 0.9.7c without having to upgrade Apache? 2. If I upgrade to apache 2, is openssl "support"?  In other words, wi

RE: openssl upgrade & apache

2003-10-30 Thread Dann Daggett
>Currently, I'm running openssl 0.9.6e w/ apache 1.3.26. Due to >recent news, I need to upgrade openssl. My questions are: > >1. Could I upgrade the openssl libs to say 0.9.6k or 0.9.7c without >having to upgrade Apache? > >2. If I upgrade to apache 2, is openssl "support"? In other words, wi

RE: openssl upgrade & apache

2003-10-30 Thread Andre Soto
Thank you for your prompt response.  If I may ask one more question, did you upgrade both at the same time?  I'm also wondering if I'm able to upgrade openssl only and stay with my current apache install (1.3.26).   Thanks again,  Dre Dann Daggett <[EMAIL PROTECTED]> wrote: >Currently, I'm running

(PUT NOT ALLOWED) (host: 10.103.1.10) SSL handshake failed. RC -16 errno 0

2003-10-30 Thread Lee Pretorius
Hi. Customer using Apache HTTP on AS/400 V5R2. Getting loads of error logs with the above error. What is causing this problem. Not too au faut with Apache. What can we do to get a clearer picture on what is causing this problem. Any assistance would be greatly appreciated!! Thanks a ton. Le