Problem with PKCS7 encoding and Capicom

2002-10-19 Thread Rohit Kumar
Title: Message Hi, I am trying to make pkcs7 encryption work with capicom of Microsoft. I am facing problem in it. Steps I am taking: i) I am getting a DER encoded certificate from a MS client ii) I encrypt the data on server with certificate using PHP function openssl_pkcs7_encrypt()

Compiling the perl module Net::SSLeay with perl 5.8 with ithreads.

2002-10-19 Thread alan.mannering
Hi Folks, Using Perl5.8 with ithreads, the perl module Net::SSLeay does not compile/make with some/most/all versions of openssl up to and including 0.9.6g ( also 0.9.6h ). ( it works without the ithreads ). You can successfully compile/make this module with Perl5.8 ithreads if you use

Netscape and DSA

2002-10-19 Thread Shyamal Kumar
Hi, With a DSA certificate, SSL handshakes always seem to fail if we use Netscape (version 6) browser. The packet trace seems to show that Netscape is not sending any DSS-based ciphers in the client hello. Is there known support in a Netscape browser of any version, or any patch etc, which will

Re: Netscape and DSA

2002-10-19 Thread Dr. Stephen Henson
On Fri, Oct 18, 2002, Shyamal Kumar wrote: Hi, With a DSA certificate, SSL handshakes always seem to fail if we use Netscape (version 6) browser. The packet trace seems to show that Netscape is not sending any DSS-based ciphers in the client hello. Is there known support in a Netscape browser

Re: Problem with PKCS7 encoding and Capicom

2002-10-19 Thread Dr. Stephen Henson
On Fri, Oct 18, 2002, Rohit Kumar wrote: Hi, I am trying to make pkcs7 encryption work with capicom of Microsoft. I am facing problem in it. Steps I am taking: i) I am getting a DER encoded certificate from a MS client ii) I encrypt the data

Re: Doubt regarding randomness

2002-10-19 Thread Brad House
My company has had great success with PRNGd. It basically takes log files, and whatever else it can get its hands on to generate a pool of random characters... Anyhow, you can get it from here: http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html It supports about any OS that

Re: OCSP and netscape 7 or mozilla

2002-10-19 Thread Perry The Cynic
Make sure the browser has the necessary root and intermediate certificates to verify the OCSP response. The local OCSP test has access to your cert database, but Mozilla doesn't unless you explicitly provided them (by sticking them into a PKCS7 when you imported the root cert, or imported them

Problems with SSL_peek()

2002-10-19 Thread Chris Plant
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello I wonder if anyone can clarify the use of SSL_peek() and SSL_read() for me. I'm using SSL_peek() to look at a SSL session and look at the waiting data, but when I request a particular number of bytes from it with SSL_read() i hit problems,

Sending R causes RENEGOTIATING? Very strange behaviour

2002-10-19 Thread Willian Mitsuda
Hello, I was doing some tests with openssl and I found a strange issue: First, I ran s_server to instantiate a fake server in localhost: s_server -cert mycertfile -key mykeyfile Second, I execute s_client to connect to my fake server: s_client -connect 127.0.0.1:4433 Until here, it's ok.

Doubt regarding randomness

2002-10-19 Thread Chandra Sekhar Suram
Hi, I have a doubt regarding the Randomness generated using OpenSSL. I have an application that uses OpenSSL for cryptographic operations including generation of keys. I used DieHard tool for getting a statistical analysis on the Randomness. Here many tests are failing. I am suspecting that