Re: Certs: where to get them?

From: "Leland V. Lammert" [EMAIL PROTECTED] lvl At 09:59 AM 12/28/00 +, Jon Hedges wrote: lvl lvl Now I was wondering: how does one go by getting the lvl certificates? I assume the snake-oil certs are not supposed for lvl prime-time use, so where can I get a decent certificate, and how lvl

Re: problem with example of base64

Ok, I've run the example with debug and the execption is *apparently* in mlock.c (in the kernel ??) the call stack KERNEL32! bff6bb07() fwrite(void * 0x00b70114, unsigned int 21, unsigned int 1, _iobuf * 0x00413c30) line 72 + 9 bytes file_write(bio_st * 0x00c80970, char * 0x00b70114, int 21)

Re: Does IE5 don't support DH ?

truename wrote: config apps/s_server to use DH , no cert . then I can't usr IE.5 to connect to s_server . Does IE5 don't support DH ? Neither IE5 nor Netscape support DH cipher suites either. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email:

Re: problem with example of base64

Michael Bonfils wrote: Thanks but I believe it's not this problem because the following code works : BIO *fsource, *fcible, *f_b64; f_b64 = BIO_new(BIO_f_base64()); fsource=BIO_new( BIO_s_file() ); fcible=BIO_new( BIO_s_file() ); fcible=BIO_push(f_b64, fcible );

Re: More Visual C++ problems when installing openSSL.

Mikael Grehn wrote: Dear Dr S N Henson, Dr S N Henson wrote: Mikael Grehn wrote: NMAKE : fatal error U1077: 'cl' : return code '0x80' Stop. Looks like it can't find 'cl'. This probably means you aren't running from the VC++ environment as mentioned in INSTALL.W32 and

Re: problem with example of base64

I add /MD and the problem remains - Original Message - From: "Dr S N Henson" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, December 28, 2000 5:18 PM Subject: Re: problem with example of base64 The problem I was directing you to is that you may not be using the

Re: openssl can issue SET cert?

Erwann ABALEA wrote: SET certificates are X.509v3 certificates at first. They have some critical and non-critical extensions specifying the type of cert it is, which level, for which usage (you can have a certificate for cert signing, another one for CRL signing, a third for tunneling,

Re: problem with example of base64

Michael Bonfils wrote: I add /MD and the problem remains What command are you using to compile your program? I've tried the example with VC++ 6.0 and it crashes at the same point without /MD but works fine with /MD. Also, are you following the standard compilation procedure for OpenSSL

Installation difficulties

Openssl Users, I downloaded Openssl 0.9.6 and followed the instructions of the README file to compile and install the software. I also made test certificates and altered our current httpd conf file for an SSL virtual host listening on port 443. It is the configuration file I am currently

Problem using openssl 0.9.6 with openssh 2.3.0p1

Under normal circumstances ssh command work properly. When the system load is high I start getting "Not enough entropy in RNG" back from ssh. I looked at the source code and found that this message is triggered by checking the output of RAND_status from the openssl libraries. Has anyone else ran

Determining if a cipher mismatch causes a handshake error

Hey all. I am trying to determine in my client app if a handshake fails because the client and server are not supporting any common ciphers. In the handshake code, I have the following: case SSL_ERROR_SSL: /* SSL error, possibly a protocol error. */ if (DebugSSL)

IE vs Netscape Based SSL clients

We have had success using the MS Internet Explorer core (WININET.DLL) to create a WIN32 SSL client. There are a number of exposed API calls in WININET which make this job pretty easy (some of which call other MS DLL's which perform the cypto I'm wondering if the Netscape environment has similar

RE: Mass certificate generation for SVT purposes

You typically create a certificate request using the 'openssl req' and sign it using the 'ca' application or the 'x509' utility. I'd say that 'x509' is more suited to your application since you can automate it as well as 'req'. There are some examples in the relevant manual pages. Steve.

No Subject

Hi I am trying to verify a message using openssl smime. openssl smime -verify -in mail.msg -signer user.pem -out signedtext.txt how will I obtain 'user.pem'. I have the users .p7c file from verisign. Thanks mahesh __

Crypt::SSLeay Error messages

Is there a FAQ or an archive where I can researh the following error msg in Crypt::SSLeay? or does anyone know a solution for this problem? I'm using: Crypt-SSLeay 0.17 openssl 0.9.6 rsaref 2.0 On Solaris 2.6 Sparc LWP::UserAgent::new: () LWP::UserAgent::proxy: https

Re:

Mahesh Anantharaman wrote: Hi I am trying to verify a message using openssl smime. openssl smime -verify -in mail.msg -signer user.pem -out signedtext.txt how will I obtain 'user.pem'. I have the users .p7c file from verisign. You don't: check the manual. When using verify -signer

openssl smime verify

Hi Thanks a lot for your help. I converted the .p7c to .pem using this openssl pkcs7 -in key.p7c -inform DER -print_certs And I am trying to verify. I am getting Verification failure. Why!!! . What should I do. thanks regards mahesh D:\mananth\ssl\ssl_test\Debugopenssl smime -verify -CAfile

Re: openssl smime verify

Mahesh Anantharaman wrote: Hi Thanks a lot for your help. I converted the .p7c to .pem using this openssl pkcs7 -in key.p7c -inform DER -print_certs And I am trying to verify. I am getting Verification failure. Why!!! . What should I do. thanks regards mahesh

About the SSL transaction when using Proxy Server

Dear OpenSSL, I have some question about the SSL, when my office is using a Proxy server to go to the internet. Is the SSL encryption only encryt between the Proxy Server to the Internet Web Server? or protect from user under proxy server to Internet Web Server?? Thanks best regards, Fai