Re: error C2197: 'void (__cdecl *)(void)' : too many actual parameters: problems compile the following code using ms visual c v6

2000-02-03 Thread Richard Levitte - VMS Whacker

jaltman The Visual C++ compiler does not compile a  .c file with C++ semantics
jaltman unless a special command line switch is thrown.  stack.c is being
jaltman compiled as a ANSI C program.  The compiler is correct.  
jaltman 
jaltman   void (*func)()
jaltman 
jaltman means
jaltman 
jaltman   void (*func)(void)
jaltman 
jaltman in ANSI C.

Hmm?  I thought the standard was a little more forgiving on this
particular issue.  Oh well, I guess that means we need to use another
evil cast...  'cause there's at least one compiler that will complain
if it sees a `void (*func)(...)'...

-- 
Richard Levitte   \ Spannvägen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-161 43  BROMMA  \ T: +46-8-26 52 47
\  SWEDEN   \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED]

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: error C2197: 'void (__cdecl *)(void)' : too many actualparameters: problems compile the following code using ms visual c v6

2000-02-03 Thread Ben Laurie

Jeffrey Altman wrote:
 
  Richard Levitte - VMS Whacker [EMAIL PROTECTED] ,in message 2202220
[EMAIL PROTECTED], wrote:
 
   I think the real problem is that an attempt is made to compile stack.c
   as a C++ file, not a C one.  What should be done is to tell the
   compiler that it shouldn't use C++ semantics...
 
#include it within an extern "C" { } ?  I'm not sure if that's going to be
  effective.
 
I guess it's just an error to try to compile C with a C++ compiler.  You
  don't try to compile pascal with a fortran compiler, eh?
 
 The Visual C++ compiler does not compile a  .c file with C++ semantics
 unless a special command line switch is thrown.  stack.c is being
 compiled as a ANSI C program.  The compiler is correct.
 
   void (*func)()
 
 means
 
   void (*func)(void)
 
 in ANSI C.
 
   func(foo);
 
 calls func() with a single parameter which is one more parameter than
 the function pointer is declared to accept.

Not according to KR Ed. 2 - they say that void (*func)() is equivalent
to void (*func)(...).

Cheers,

Ben.

--
SECURE HOSTING AT THE BUNKER! http://www.thebunker.net/hosting.htm

http://www.apache-ssl.org/ben.html

Y19100 no-prize winner!
http://www.ntk.net/index.cgi?back=2000/now0121.txt
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: error C2197: 'void (__cdecl *)(void)' : too many actualparameters: problems compile the following code using ms visual c v6

2000-02-03 Thread Dr Stephen Henson

Ben Laurie wrote:
 
 Jeffrey Altman wrote:
 
   Richard Levitte - VMS Whacker [EMAIL PROTECTED] ,in message 2202220
 [EMAIL PROTECTED], wrote:
  
I think the real problem is that an attempt is made to compile stack.c
as a C++ file, not a C one.  What should be done is to tell the
compiler that it shouldn't use C++ semantics...
  
 #include it within an extern "C" { } ?  I'm not sure if that's going to be
   effective.
  
 I guess it's just an error to try to compile C with a C++ compiler.  You
   don't try to compile pascal with a fortran compiler, eh?
 
  The Visual C++ compiler does not compile a  .c file with C++ semantics
  unless a special command line switch is thrown.  stack.c is being
  compiled as a ANSI C program.  The compiler is correct.
 
void (*func)()
 
  means
 
void (*func)(void)
 
  in ANSI C.
 
func(foo);
 
  calls func() with a single parameter which is one more parameter than
  the function pointer is declared to accept.
 
 Not according to KR Ed. 2 - they say that void (*func)() is equivalent
 to void (*func)(...).
 

I have seen VC++ interpret func() as func(void) and I've made a few
changes to the source to accommodate it: normally just adding a
prototype to a function pointer.

That particular example is a bit trickier though because it really does
need unspecified parameters or an evil wrapper for every occurrence.

However this may be just a compiler switch problem because that code is
identical in the latest snapshot and with the standard Win32 makefile it
compiles with my VC++ 6.0 (SP3) just fine.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: your mail

2000-02-03 Thread Paul Khavkine

Try Thawte.

On Wed, 2 Feb 2000, Gregory Stark wrote:

 Does anyone know of a commercial CA that will sign
 with DSA a certificate containing a DH public key?
 A similar question would be does there exist a commercial
 CA that will sign PGP DSA/ElGamal public keys?
 How about a CA that will sign with RSA a certificate
 containing a DH public key?
 
 
 
 Greg Stark
 securityguides llc
 [EMAIL PROTECTED]
 www.securityguides.com
 
 
 (410) 381-9410 (Work)
 (410) 987-7042 (Home)
 
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]
 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



stunnel 3.6

2000-02-03 Thread Michal Trojnara

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

News:
 - Automatic RFC 2487 detection based on patch
   by Pascual Perez and Borja Perez.
 - Non-blocking sockets not used by default.
 - DH support is disabled by default.
   (both can be enabled in ssl.c)

Homepage:
http://mike.daewoo.com.pl/computer/stunnel/

Regards,
Mike

-BEGIN PGP SIGNATURE-
Version: PGP 6.5.2
Comment: Public key located on http://mike.daewoo.com.pl/pgp.asc

iQA/AwUBOJlNz/zVPp10xzLREQKKiACg4L5QVCGlHAhBav4oucb83r+NT6AAoPzs
sQj5tqgs0Gnuan6VMUCq6HPV
=7yV3
-END PGP SIGNATURE-



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: How can I get debug version....

2000-02-03 Thread Lutz Jaenicke

On Thu, Feb 03, 2000 at 05:42:19PM +0900, Srinivas, Ravi wrote:
 Hi,
 
 I have downloaded the openssl-0.9.4.How can I get a debug version of the
 openssl. 
 If I give the ./config it is taking "cc" and it dose not contain the debug
 mode. I need to use gcc  with -g option to debug the code. Can any one of
 you please help me to compile the code with debug verison and using gcc. 

Use Configure directly and have a look for a suitable target. A lot of them
are named "debug-something" or "something-debug", e.g. "debug-linux-elf".
Of course, you can always modify one of them to fit your needs.

Regards,
Lutz

PS. Your signature is longer than your message!!!
-- 
Lutz Jaenicke [EMAIL PROTECTED]
BTU Cottbus   http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus  Fax. +49 355 69-4153
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



problems to convert from PEM to PKCS12

2000-02-03 Thread Wolfgang Meyer

Hi everbody,
I'm using openssl , version 0.9.4. I've created a demo CA,
a new certificate request, and signed this request.

I try to read the certificate into Netscape. So we have to convert to
pkcs12. I try this by the command:

openssl pkcs12 -export -inkey newreq.pem -in newcert.pem  \
  -name "Test" -out mycert.p12

but I get the error massage:
  No certificate matches private key.

Can anybody help me ?

Thanks in advance ...

   Wolfgang Meyer


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: How can I get debug version....

2000-02-03 Thread Ulf Möller

On Thu, Feb 03, 2000 at 05:42:19PM +0900, Srinivas, Ravi wrote:

 I have downloaded the openssl-0.9.4.How can I get a debug version of the
 openssl. 

Try using "./config -d", as described in INSTALL. If that doesn't work
on your system, edit the configuration line for your platform in
./Configure.

 This message is for the named person's use only.  It may contain 
 confidential, proprietary or legally privileged information.  No 
 confidentiality or privilege is waived or lost by any mistransmission.
 If you receive this message in error, please immediately delete it and all
 copies of it from your system, destroy any hard copies of it and notify the
 sender.  You must not, directly or indirectly, use, disclose, distribute, 
 print, or copy any part of this message if you are not the intended 
 recipient. CREDIT SUISSE GROUP and each of its subsidiaries each reserve
 the right to monitor all e-mail communications through its networks.  Any
 views expressed in this message are those of the individual sender, except
 where the message states otherwise and the sender is authorised to state 
 them to be the views of any such entity.

Oh, really?
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Certificates Renegotiation

2000-02-03 Thread Rick W. Porter

Hi,

I'm trying to implement a non-blocking client and a non-blocking server
that will query a certificate manager each connection negotiation.  My
basic problem is what happens if an existing call on the server needs to
renegotiate following the expiration of the server's certificate?

If I'm correct (big assumption), the client will be easy to implement
using a callback.  By not initializing the certificate and setting the
client_cert_cb (using in the SSL_CTX_set_client_cert_cb), the client
will invoke the callback that will query my certificate manager each
time an SSL connection is established.  To insure the client uses the
callback even during renegotiations, I can add code (possibly to
ssl3_connect) that will force s-cert to NULL and thereby invoke the
callback at the appropriate point in the handshake.

However, the server seems like a tougher nut to crack.  My initial
callback that calls SSL_accept, can query the certificate manager.
However, I have not found a way (without a fair amount of modification),
to force the renegotiation of a call to query the certificate manager.
I've looked for an equivalent callback, but I did not see it.  I thought
about setting the s-cert to NULL, but the ssl_get_server_send_cert does
apparently not even check to see if that is NULL, much less invoke a
callback.

Has anyone crossed a similar bridge?

Thanks,
Rick

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Multi-threading?

2000-02-03 Thread Skye Poier

Word on the street is that Will Bradley said:
 Does open-ssl-0.9.4 support multi-threading?

Yes; ./config threads  (read the INSTALL file)

Skye

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Resources for learning about OPENSSL and SSL.

2000-02-03 Thread Sanjay Agnani

Hi,

I am new to SSL and OPENSSL. I would like to learn more about OPENSSL in
particular and SSL in general.

Can someone please let me know any books or any resources available on
the internet that I can use for learning more about OPENSSL and SSL ?

Any help regarding this matter is highly appreciated.

Thank You.

Sanjay.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



No Subject

2000-02-03 Thread Srinivas, Ravi

Hi,

Thanks for the soultion y'day. Now I am facing this new problme. 

How can we use the PKCS12 format certificate file when calling the functions

1) SSL_CTX_use_certificate_file(ctx, options.certfile, SSL_FILETYPE_PEM)
2) SSL_CTX_use_PrivateKey_file(ctx, options.certfile, SSL_FILETYPE_PEM)

I converted PKCS12 format to PEM format using 
openssl pkcs12 -in file.p12 -out file.pem

and used this file.pem in SSL_CTX_use_PrivateKey_file but it gives the error
as
SSL_CTX_use_RSAPrivateKey_file: error:0B080074:x509 certificate
routines:X509_check_private_key:key values mismatch

can anyone suggest me.

Thanks in Advance  Regards,
Ravi Srinvas M  
E-mail   : [EMAIL PROTECTED]
Voice mail : +81 3 5404 9592
Fax : +81-3-5473-4441

CREDIT | FIRST  
SUISSE | BOSTON
Credit Suisse First Boston (Japan) Limited
5th Floor Shiroyama Hills,  
4-3-1 Toranomon,
Minato-ku, Tokyo 105-6002 JAPAN



This message is for the named person's use only.  It may contain 
confidential, proprietary or legally privileged information.  No 
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please immediately delete it and all
copies of it from your system, destroy any hard copies of it and notify the
sender.  You must not, directly or indirectly, use, disclose, distribute, 
print, or copy any part of this message if you are not the intended 
recipient. CREDIT SUISSE GROUP and each of its subsidiaries each reserve
the right to monitor all e-mail communications through its networks.  Any
views expressed in this message are those of the individual sender, except
where the message states otherwise and the sender is authorised to state 
them to be the views of any such entity.



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: problems to convert from PEM to PKCS12

2000-02-03 Thread jagad

you seems assign -inkey with newreq.pem, please use your private key.
try this:

openssl pkcs12 -nokeys -export -in newcert.pem -inkey pkey.pem -name
"Test" -caname "Test CA" -certfile ca_cert.pem -out mycert.p12

-inkey: set with your pkey.pem that comes with newreq.pem when you generate
request
-certfile: set with your CA

Hope this help

Jagad

- Original Message -
From: Wolfgang Meyer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, February 03, 2000 10:35 PM
Subject: problems to convert from PEM to PKCS12


 Hi everbody,
 I'm using openssl , version 0.9.4. I've created a demo CA,
 a new certificate request, and signed this request.

 I try to read the certificate into Netscape. So we have to convert to
 pkcs12. I try this by the command:

 openssl pkcs12 -export -inkey newreq.pem -in newcert.pem  \
   -name "Test" -out mycert.p12

 but I get the error massage:
   No certificate matches private key.

 Can anybody help me ?

 Thanks in advance ...

Wolfgang Meyer


 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

 smime.p7s