Re: Win32 Libraries???

2000-04-05 Thread jagad
Yes, try Jan Tomasek's site http://www.tomasek.cz/index_en.html , he has written MySSL, the Delphi wrapper to OpenSSL. Hope this help Jagad - Original Message - From: Matthew Clark [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, April 05, 2000 3:12 AM Subject: Win32

Re: CRL's.....HELP

2000-04-05 Thread hazel_gao
1. First, use "openssl ca" to generate a CRL. 2. Make sure that your web server supports CRL check. If it does, add the CRL file path to the web conf file. Hazel Michael Harvey wrote: I Neeed Help with setting up CRL's I run a small www site for a special group I set up a Self signed CA My

Re: X.509 storage

2000-04-05 Thread hazel_gao
You can go and look into the files in openssl-0.9.x/apps, that is what I have done. I learned a lot from those sample code. Hazel xavier wrote: Hi, I'd like to retrieve a X.509 cert from a file and populate a X509 structure with it. I'm swimming in the doc but I don't know which routine

An urgent question, please sir

2000-04-05 Thread pgold
Dear all , We are Computer Science group from the American University in Cairo, and we are graduating this semseter. In fact, our graduation project is about "Distributed Intrusion Detection System", and our system needs to use SSL in the connections between its components (i.e. the

Revoking Certificates

2000-04-05 Thread Jon Hale
I have setup a mini-CA for a specific app. I generated a cert, self-signed it, and then used this cert (my CA cert) to sign other certs ("user Certs"). The user certs then pass out of my control. Now I want to revoke one of the user certs. Can you tell me how I do this? Or at least give me a

Re: OpenSSL 0.9.5 + Netscape LDAP

2000-04-05 Thread Julio Sánchez Fernández
Mike Thomas wrote: I am trying to secure communication to my openLDAP server by using an SSL tunnel. I have tried several OpenSSL derived offerings(stunnel, sslproxy...). All seem to fail with a bad cert error in the SSL3_READ_BYTES call. I am not performing any certificate verification

Revoking Certificates

2000-04-05 Thread Jonh Hale
I have setup a mini-CA for a specific app. I generated a cert, self-signed it, and then used this cert (my CA cert) to sign other certs ("user Certs"). The user certs then pass out of my control. Now I want to revoke one of the user certs. Can you tell me how I do this? Or at least give me a

Re: CRLS........

2000-04-05 Thread Vadim Fedukovich
On Wed, Apr 05, 2000 at 01:38:14AM -0400, Michael Harvey wrote: Be Nice ,..I am new I Need Help with setting up CRL's I run a small www site for a special group I set up a Self signed CA My Problem... each client has a cert that is checked How do create a Proper crl cert I

error strings

2000-04-05 Thread Richard Dykiel
Hello, I'd appreciate a hint on the following: when calling ERR_error_string, I dont geta readable error string, but rather: error:0906D06C::lib(9) :func(109) :reason(108)error:0B06F009::lib(11) :func(111) :reason(9)error:2106B00B::lib(33) :func(107) :reason(11) I call

Re: error strings

2000-04-05 Thread Dr Stephen Henson
Richard Dykiel wrote: Hello, I'd appreciate a hint on the following: when calling ERR_error_string, I dont get a readable error string, but rather: error:0906D06C::lib(9) :func(109) :reason(108) error:0B06F009::lib(11) :func(111) :reason(9) error:2106B00B::lib(33) :func(107)

SMIME SIGN MESSAGE - PLEASE HELP ME

2000-04-05 Thread Ivo MACHULDA
Hello all, I tray signing simple text file over openssl tool with thi comand: /usr/local/ssl/bin/openssl smime -sign -in mail.txt -text -out mail.msg -signer user.pem This comand write this error: Can't read recipient certificate file user.pem13916:error:0906D06C:PEM

Convert Netscape Server certs for mod_ssl

2000-04-05 Thread Larry Leszczynski
Hello - I've been handed over a legacy system using Netscape Enterprise Server and need to migrate the certificates and keys to Apache/mod_ssl. Does anyone have instructions on how to use openssl to convert the Netscape cert.db and key.db files to the .crt and .key files I need for