RE: Not Yet Valid certificate is alowing a connection.

2002-11-27 Thread Muralidhar K (SSG) - CTD, Chennai.
Hi Kaushik, Why don't you renegotiate with the server ? Right now, i am not able to tell you which flag to set in openssl. But to answer your last question, the ssl servers can renegotiate transparently. Eventhough the connection is successful with the valid certificate for the first time, it

openssl in php

2002-11-27 Thread ravi munduri
Hi, Iam writing application on PHP for connecting to the openssl. I want to create a CA , andd i want to know how can i generate csr with openSSL (Linux) without intercative mode from PHP. I need example scripts to automate the openssl(linux) commands in PHP Thanks in advance. Regards, Ravi.

Encrypted messages size limit?

2002-11-27 Thread David Díaz García
Hi! I'm having a problem with encrypted messages and Lotus Notes. When it has an attached gif file and its size exceeds some limit (around 45 Kb), Lotus Notes 5.0.6a can't decrypt the mail. The same message works correctly on Outlook Express, and if I send a similar message from OE to

Re: How to make in Visual C++ 6.0

2002-11-27 Thread Cory Albrecht
--- Rick_Zhang [EMAIL PROTECTED] wrote: i went to compile openssl in vc 6.0, but i found lack of some files. Can someone help me? Or send me he project files ? Look in the file INSTALL.W32 that comes with the OpenSSL source. It has directions on how to build OpenSSL in Win32 with VC++,

prngd

2002-11-27 Thread KING,RICHARD (HP-Boise,ex1)
OS: HPUX 11 SSL VER: OpenSSL 0.9.6g 9 Aug 2002 Hello, I'm compiling SSL from source. My problem is that my system does not have /dev/random. So I installed a entropy gathering daemon called prngd. I wanted to use SSL with prngd, so I used the following line to install SSL: ./config

question

2002-11-27 Thread Waitman C. Gobble, II
Hello I am new to openssl. I want to set up a system that is multi-tiered, with a master server that has a self-created CA, intermediate servers that (possibly) have their own CA's and clients that have certificates that are used to sign outgoing email (from the client machine). Basically the

PKCS7_decrypt behavior

2002-11-27 Thread Arnaud De Timmerman
hi, I'm still trying to find why i can't call openssl smime -decrypt ... then openssl smime -verify ... in a row (without exiting to the system between both), my first post is here : http://marc.theaimsgroup.com/?l=openssl-usersm=103831151213967w=2. Looking at ./crypto/pkcs7/pk7_smime.c it

openssl error (in grid ftp) with non-Globus certificate

2002-11-27 Thread Wolfgang Ziegler
Hi, when trying to use a certificate from our local test CA I encountered the following error: wolf@packcs-e0:~/.globus /opt/globus/bin/openssl x509 -noout -in usercert.pem -subject unable to load certificate 26416:error:0D081072:asn1 encoding routines:d2i_ASN1_OBJECT:expecting an

Compiling IMAP error

2002-11-27 Thread Alex Korkishko
I am trying to compile Courier IMAP for qmail on Red Hat 7.3 machine, I keep getting this error: checking for c_rehash... no checking for perl5... no checking for perl... /usr/bin/perl configure: WARNING: Unable to locate OpenSSL's c_rehash script in the current configure: WARNING:

Remove me from the mailing list please

2002-11-27 Thread Rohit Kumar
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Re: prngd

2002-11-27 Thread Lutz Jaenicke
On Wed, Nov 27, 2002 at 11:25:11AM -0800, KING,RICHARD (HP-Boise,ex1) wrote: OS: HPUX 11 SSL VER: OpenSSL 0.9.6g 9 Aug 2002 Hello, I'm compiling SSL from source. My problem is that my system does not have /dev/random. So I installed a entropy gathering daemon called prngd. I wanted to

Re: prngd

2002-11-27 Thread Brad House
Use RAND_egd(/var/opt/prngd/egd-pool) in whatever program you're compiling to use with OpenSSL. Just make sure you call that routine before doing any SSL functions. -Brad KING,RICHARD (HP-Boise,ex1) wrote: OS: HPUX 11 SSL VER: OpenSSL 0.9.6g 9 Aug 2002 Hello, I'm compiling SSL from source.

RE: Compiling IMAP error

2002-11-27 Thread Muralidhar K (SSG) - CTD, Chennai.
It's available with OpenSSL engine in tools directory -Original Message-From: Alex Korkishko [mailto:[EMAIL PROTECTED]]Sent: Thursday, November 28, 2002 12:22 AMTo: [EMAIL PROTECTED]Subject: Compiling IMAP error I am trying to compile Courier IMAP for qmail on Red

PKCS7 verification problems

2002-11-27 Thread rtm
Hi, Here I got a problem. I use Netscape signtool 1.3 for AIX43 to sign a jar file, and so I want to verify the jar with my program, with OpenSSL libraries used. My problem is: if I give no flag in the PKCS7_verify, I got "error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error". If

[no subject]

2002-11-27 Thread Durairaj
Hi, I am installing Net_SSLeay.pm-1.18 on HP-UX ia64.For this one the prerequisite is openssl-0.9.6d.How can I configure on HP-UX ia64. I have already checked.But I have error: first I installed openssl-0.9.6d: The commands are: ./Configure hpux-gcc gmake gmake test gmake install It works