Private Key pkcs#12 problem

2007-08-22 Thread JuliusIT
Hi, I'm new to the forum, so first greetings to all. Now the problem, I've followed the Openssl tutorial to build a pkcs#12 key repository to be inserted inside the security system of an AS2 server. I put private key, the relative certificate and the root certificate in the repository, put the rel

TLS server crashes when Major version number is not 3

2007-08-22 Thread Xiaoyu Ruan
It seems the OpenSSL TLS server, when forced to use TLSv1, shuts down the connection immediately after receiving a ClientHello with major version number not equal to 0x03. Nothing was sent to the client to notify the error. I am wondering if there is a reason why an alert protocol message was not s

Re: TLS server crashes when Major version number is not 3

2007-08-22 Thread Marek Marcola
Hello, > It seems the OpenSSL TLS server, when forced to use TLSv1, shuts down > the connection immediately after receiving a ClientHello with major > version number not equal to 0x03. Nothing was sent to the client to > notify the error. I am wondering if there is a reason why an alert > protocol

certificate_authority in handshake?

2007-08-22 Thread Jeremy Bratton
In the application I'm currently working on which uses OpenSSL via Ruby, I seem to be having a problem with the handshake when a client connects to my server, though my client to their server works fine. >From an ssldump, it appears that my server's certificate request does not include any certific

Re: certificate_authority in handshake?

2007-08-22 Thread Marek Marcola
Hello, > In the application I'm currently working on which uses OpenSSL via > Ruby, I seem to be having a problem with the handshake when a client > connects to my server, though my client to their server works fine. > >From an ssldump, it appears that my server's certificate request does > not inc

Capabilities of a server

2007-08-22 Thread Jim Marshall
Hi, I was wondering if there is a tool for seeing what ciphers and algorithms a server supports? I know the openssl command line tool has a "ciphers -v" option, but this shows what the client supports. I was wondering if the openssl command line tool has a way to determine this information fo

Re: Capabilities of a server

2007-08-22 Thread Marek Marcola
Hello, > I was wondering if there is a tool for seeing what ciphers and > algorithms a server supports? I know the openssl command line tool has a > "ciphers -v" option, but this shows what the client supports. I was > wondering if the openssl command line tool has a way to determine this > i

Re: certificate_authority in handshake?

2007-08-22 Thread Jeremy Bratton
On 8/22/07, Marek Marcola <[EMAIL PROTECTED]> wrote: > Hello, > > In the application I'm currently working on which uses OpenSSL via > > Ruby, I seem to be having a problem with the handshake when a client > > connects to my server, though my client to their server works fine. > > >From an ssldump,

RE: TLS server crashes when Major version number is not 3

2007-08-22 Thread David Schwartz
> It seems the OpenSSL TLS server, when forced to use TLSv1, > shuts down the connection immediately after receiving a > ClientHello with major version number not equal to 0x03. > Nothing was sent to the client to notify the error. What could be sent to the client to notify it of the error? Sinc

RE: TLS server crashes when Major version number is not 3

2007-08-22 Thread Marek Marcola
Hello, > > It seems the OpenSSL TLS server, when forced to use TLSv1, > > shuts down the connection immediately after receiving a > > ClientHello with major version number not equal to 0x03. > > Nothing was sent to the client to notify the error. > > What could be sent to the client to notify it o

RE: TLS server crashes when Major version number is not 3

2007-08-22 Thread Marek Marcola
Hello, > > > It seems the OpenSSL TLS server, when forced to use TLSv1, > > > shuts down the connection immediately after receiving a > > > ClientHello with major version number not equal to 0x03. > > > Nothing was sent to the client to notify the error. > > > > What could be sent to the client to