Re: Confusion about SSL_ERROR_WANT_READ/WRITE

2005-04-18 Thread Joseph Bruni
If all that was sent was the protocol data that the write was waiting for to satisfy the ssl state machine, and no application data was sent, would SSL_read return the number of bytes actually read off the socket (which is just protocol data), or would it read that transparently and return 0

Client Authentication

2005-04-18 Thread [EMAIL PROTECTED]
Hi all I am a newbie to SSL and I want to have clients authenticated using SSL certificates. I am running webserver on Apache 1.3 on Mac OS X server The scenario is something as follows: My webserver is hosting an site for which I want to give limited access worldwide. If someone requests for

openssl static library windows

2005-04-18 Thread Mahesh Lalge
Hi all, Has any one tried compiling the openssl library in the static mode on Windows. If so is it available for download ? If not is there any documentation regarding the steps to compile and the build environment ? I will be using VC6. Regards, /Mahesh

RE: openssl static library windows

2005-04-18 Thread Aftab Alam
Hi Mahesh, Nmake -f Ms\nt.mak Will build the static library. Regards, Aftab Alam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mahesh Lalge Sent: Monday, April 18, 2005 2:29 PM To: openssl-users@openssl.org Subject: openssl static library windows Hi

Newbie S/MIME decryption questions

2005-04-18 Thread Christian Gütter
Hi, I would like to use OpenSSL 0.97c for Windows to decrypt S/MIME encrypted messages which contain attachments. I am especially interested in decrypting the attachments. The encrypted mail is available in a source file called source.msg (see [1]). I used the following command on this file:

Re: Newbie S/MIME decryption questions

2005-04-18 Thread Dr. Stephen Henson
On Mon, Apr 18, 2005, Christian Gütter wrote: Hi, I would like to use OpenSSL 0.97c for Windows to decrypt S/MIME encrypted messages which contain attachments. I am especially interested in decrypting the attachments. 0.9.7c is old, you should use the latest version. 0.9.7g if possible.

Re: Newbie S/MIME decryption questions

2005-04-18 Thread Christian Gütter
Hi Steve, thanks for your answer. 0.9.7c is old, you should use the latest version. 0.9.7g if possible. Will do that. If you do: openssl smime -verify -in destination -out message it will attempt to verify the message (which will probably give an error becaue it can't find the signing CA)

Re: Newbie S/MIME decryption questions

2005-04-18 Thread Dr. Stephen Henson
On Mon, Apr 18, 2005, Christian Gütter wrote: Hi Steve, thanks for your answer. 0.9.7c is old, you should use the latest version. 0.9.7g if possible. Will do that. If you do: openssl smime -verify -in destination -out message it will attempt to verify the message (which will

Re: Newbie S/MIME decryption questions

2005-04-18 Thread Christian Gütter
Hi Steve, Add -noverify to the command line options. That will disable certificate verification: which is the cause of that error message. This worked. Thank you very much for sharing your insight into the mighty command line options of OpenSSL! Christian

Windows instalattion

2005-04-18 Thread Silvia Gisela Pavon Velasco
I have downloaded the binaries that came in http://www.openssl.org/related/binaries.html (Section realted - binaries in the main openssl page) I followed the instructions to install perl and mingw but I cant compile openssl from mingw I try to do the command provided in the install.w32 file

Re: Client Authentication

2005-04-18 Thread Joseph Bruni
This would be a feature of Safari rather than OpenSSL. I'm pretty sure that recent versions of Safari can do authentication using certs, but I'm not sure how to do it. You can try posting you question to one of Apple's lists. http://lists.apple.com/ On Apr 18, 2005, at 1:46 AM, [EMAIL

Re: Windows instalattion

2005-04-18 Thread Thomas J. Hruska
At 10:04 AM 4/18/2005 -0500, Silvia Gisela Pavon Velasco writeth: I have downloaded the binaries that came in http://www.openssl.org/related/binaries.html (Section realted - binaries in the main openssl page) I followed the instructions to install perl and mingw but I cant compile openssl from

Re: SSL handshake failed

2005-04-18 Thread Asif Iqbal
On Sun, Apr 17, 2005 at 10:53:50PM, Asif Iqbal wrote: Hi All I installed Apache/1.3.33 (Unix) mod_perl/1.29 mod_ssl/2.8.22 OpenSSL/0.9.7d on Solaris Upgrade OpenSSL to latest to fix the problem. Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu ..there are two kinds of

Re: Windows instalattion

2005-04-18 Thread Carlos Roberto Zainos H
Hi Silvia !! Why not tries with this: http://www.slproweb.com/products/Win32OpenSSL.html It's a Windows Installer package of OpenSSL and works really good. When you install it you will get a libeay32.lib, ssleay32.lib and his .dll corresponding files. Also you will get a folder with header's

Using OpenSSL with 'ubsec' hardware on FreeBSD

2005-04-18 Thread A . L . M . Buxey
hi, I was wondering if any folk who are using OpenSSL with Broadcom 582x devices (ubsec) on FreeBSD could help me out. We have taken such a card out of a Fedora Core 2 machine (where it was working with the help of the 'hwcrypto' RPM) We've compiled FreeBSD so that the card is detected (added

Win32 OpenSSL is recommended by PayPal...

2005-04-18 Thread Thomas J. Hruska
Just to show how widely used Win32 OpenSSL is, PayPal is recommending using it in several bits of example source code. Particularly of note is their Encrypted Button feature on their website in which the readme.txt document from the zipfile states, and I quote: 1) The ButtonEncryptionLib

Re: Can anybody share some ENGINE sample code?

2005-04-18 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Mon, 18 Apr 2005 15:09:36 -0700, Edward Chan [EMAIL PROTECTED] said: echan Does anybody have some working code that enables the use of echan crypto hardware using the ENGINE API's and would be willing to echan share it? Uhmm, there are a few engines in

crypto device

2005-04-18 Thread Adrian Mardare
Hi... under the engine directory, there is a a hw_cryptodev.c that makes use of /dev/crypto. Who is supposed to create/manage the /dev/crypto? Am I correct to assume that if I have a hardware card that can provide hardware acceleration for ciphers like DES etc, there should be a manager that

nCipher and openssl

2005-04-18 Thread knowledge zero
Hi, Does anyone have experience with nCipher netHSM and Openssl ? regards zero __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org

Re: Using OpenSSL with 'ubsec' hardware on FreeBSD

2005-04-18 Thread Geoff Thorpe
On April 18, 2005 02:09 pm, [EMAIL PROTECTED] wrote: # /usr/local/bin/openssl engine ubsec -vvv (ubsec) UBSEC hardware engine support SO_PATH: Specifies the path to the 'ubsec' shared library (input flags): STRING # /usr/local/bin/openssl speed rsa -engine ubsec can't use that

Re: Client Authentication

2005-04-18 Thread [EMAIL PROTECTED]
Hi Apart from Mac clients I also windows users. Regards and Thanks Mahesh S Kudva __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org

Re: Client Authentication

2005-04-18 Thread Joseph Bruni
On the Mac, you'll load your client certificate into your users' keychains. On Windows, you'll load it into the certificate store. In either case, simply having the user double-click on the certificate file will launch the appropriate tool. On Apr 18, 2005, at 9:17 PM, [EMAIL PROTECTED] wrote: