SSH login failed on Mac OS X with gentoo-prefix

I use gentoo-prefix on my Mac OS. My default shell is /Users/frank/.gentoo/bin/bash. When I try to use remote ssh login, it failed. But if I change my default shell to /bin/bash , I can login normally. Here're some debug info: Server Debug Info: Aug 14 22:49:58 kata-kenmatoMacBook-Pro

RE: noob question on OpenSSL

Hi Dhoti. Neither of those questions relate specifically to OpenSSL, since these are part of the fundamental networking behaviors. 1) Look at the system function setsockopt() for how to set the reuse-address behavior. You must call this function after creating the socket, but before

Why do these 12 lines of Win32 code work on XP but hang forever in Vista and Windows 7?

This Delphi code starts a minimal SSL server: WSAStartup(MakeWord(1,1), WData); SSL_library_init; SSL_load_error_strings; ctx := SSL_CTX_new(SSLv23_server_method); SSL_CTX_use_certificate_chain_file(ctx, 'cert.pem'); SSL_CTX_use_PrivateKey_file(ctx, 'key.pem', 1); SSL_CTX_check_private_key(ctx);

RE: FW: noob question on OpenSSL

I believe there is a call to get the raw socket after you accept, but I'm not sure what it is. In our server, we do all the raw setup first, and then negotiate a secure session after we know the client is capable. We don't use BIOs but there should be a way to get the socket FD either .

Need information about FIPS 2.0 and OpenSSL 1.0.1

Hi, I had a few questions regarding the new OpenSSL FIPS object module. 1) What would be the time frame for completing FIPS 2.0 validations? Also, around what time frame do you think will FIPS capable openssl 1.0.1 distribution be available for public use? 2) Are the latest snapshot

Does FIPS capable OpenSSL Shared Library affect its non-FIPS functionalities

Hi team, I just build the shared libraries of FIPS capable OpenSSL in Suse Linux 32bit with FIPS Object Module v1.2.3. The OpenSSL version is 0.9.8n, and the shared libraries generated are libssl.so.0.9.8 and libcrypto.so.0.9.8. I want to link the shared libraries with different module in one

RE: Why do these 12 lines of Win32 code work on XP but hang forever in Vista and Windows 7?

Could it be that the browser requests are being blocked by Windows Firewall? Mark Itzcovitz VISTA Technology Consultant Publishing Technology plc T: +44 1865 397849 mark.itzcov...@publishingtechnology.com www.publishingtechnology.com Publishing Technology plc is registered in England No. 837205

hi

Hi , I have a problem while establishing a session using ssl.. I have aclient and when the session is establised i found that the client version is V3 but the ssl version is v2, due to which i am facing other problem. I saw the ssl code - s3_cln.c is which i saw a part of this code

Becoming a CA for group of internal servers?

Please can you advise if this the correct process for becoming a CA for internally for group of servers? 1) openssl genrsa -des3 -out ca.key 2048 openssl req -new -x509 -key ca.key -out ca.crt 2) openssl genrsa -des3 -out ukx01137.key 2048 openssl req -new -key server.key -out

RE: hi

forgot to mention that /* s-version = SSL3_VERSION */ the above line is commented in the code of ssl3_connect (); is there any issue with this as the client version is updating and ssl version not updating ?? From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] On

RE: Becoming a CA for group of internal servers?

Hi, my receipt to generate a CSR for the root CA is as follows: # # generate a Certificate Signing Request to be submitted to the CA # @input: # - the key to be certified, i.e. the servers key # - the servers credentials such as DN # %.root.csr.pem: %.key.sec.pem \

Re: hi

Hi, First of all your question is really strange. Please check your client and server settings as to which highest ssl version is enabled. Generally SSLv2 should be disabled and never negotiated. The code your referring to is a piece of code that would be called when sslv3 is negotiated during

Does Openssl 0.9.8g supports RFC5280

can any one tell me whether openssl 0.9.8g supports RFC5280 or not -- View this message in context: http://old.nabble.com/Does-Openssl-0.9.8g-supports-RFC5280-tp32288662p32288662.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

Re: Does Openssl 0.9.8g supports RFC5280

On Thu, Aug 18, 2011, brajan wrote: can any one tell me whether openssl 0.9.8g supports RFC5280 or not No it is 1.0.0 and later only. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org

Help, where is CA.txt?

In the HOWTO doc, http://www.openssl.org/docs/HOWTO/certificates.txt It mentions the CA.txt file - but I can't seem to find it. Please can anyone help?

Problem with easy-rsa and RANDFILE

Hello, I want to provide a more secure access to our network using openvpn with certificates. For that purpose I developed a simple web-interface written in php5 which calls a script via a local TCP/IP connection. The script is provided as a server by xinetd. So far everything works. When I

Re: Need information about FIPS 2.0 and OpenSSL 1.0.1

Hi, I had a few questions regarding the new OpenSSL FIPS object module. 1) What would be the time frame for completing FIPS 2.0 validations? At present we anticipate the formal validation award in Q1 of 2012. The original schedule has slipped from Q4 2011 due to a recent request by our

Re: Does FIPS capable OpenSSL Shared Library affect its non-FIPS functionalities

On 08/18/2011 01:18 AM, hao@emc.com wrote: I just build the shared libraries of FIPS capable OpenSSL in Suse Linux 32bit with FIPS Object Module v1.2.3. The OpenSSL version is 0.9.8n, and the shared libraries generated are libssl.so.0.9.8 and libcrypto.so.0.9.8. I want to link the shared

RE: Using the FIPS Object Module

Anybody have any insight? Any information gratefully received! From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Harvey Shepherd Sent: Wednesday, 17 August 2011 12:06 p.m. To: openssl-users@openssl.org Subject: Using the FIPS Object Module Hi All,

RE: Becoming a CA for group of internal servers?

From: owner-openssl-us...@openssl.org On Behalf Of Hopkins, Nathan Sent: Thursday, 18 August, 2011 06:45 Please can you advise if this the correct process for becoming a CA for internally for group of servers? With slight fixes it is ONE correct way. There are others.

RE: SSH login failed on Mac OS X with gentoo-prefix

From: owner-openssl-us...@openssl.org On Behalf Of FrankFang Sent: Sunday, 14 August, 2011 11:27 (apparently held by listserv until Thu Aug 18, I don't know why) I use gentoo-prefix on my Mac OS. My default shell is /Users/frank/.gentoo/bin/bash. When I try to use remote ssh login, it