Creating a CSR and a CA

Hey there, I am realy new in ssl, so perhaps this Question is stupid, but perhaps I am getting an answer: Normaly first I have to create a CSR-Key : with this command cd /usr/local/ssl/certs /usr/local/ssl/bin/openssl req -new -x509 -days 365 -key server.key -out server.csr Ok, now I have

Re: patent issues (multiprimes)

ok - I just read part of the paper. I'm not a cryptographer but I am a mathemetician and here are some trivial conclusions. the algorithm is looking for a number: N where N=p*q for two primes p and q of relatively the same size. If you look at the _original_ equations developed by

fixed DH certs and ciphers

Hi, First thanks for the responses with my other posts. All the feedback has been very informative and helpful! I was wondering if there was something *special* that needed to be done when creating certificates to be used with the SSL_DH_* ciphers. The reason I ask is because I have created a

Re: Runtime Error using OpenSSL on Win32

Hi, On Wed, May 10, 2000 at 04:50:06PM -0700, Tewari, Vijay wrote: I am trying to run the code in the demos directory under Win32 platform. I can successfully compile the cli.cpp code, but at runtime I get the following error 342:error:24064064:random number

Re: fixed DH certs and ciphers

Cory Winter wrote: Hi, First thanks for the responses with my other posts. All the feedback has been very informative and helpful! I was wondering if there was something *special* that needed to be done when creating certificates to be used with the SSL_DH_* ciphers. The reason I ask

Re: Version history

Hi, openssl-users, Bill ... On Mon, 8 May 2000, Bill Klein wrote: Does anybody know where I can find the OpenSSL version history. For example, if I wanted to know what has changed between 0.9.5 and 0.9.5a where would I look. Can't seem to find it on the site but I'm sure it's buried under

Re: Version history

Alexander 'Alfe' Fetke wrote: please, consider this question anew (or simply forward me an already given answer which i somehow missed). Bill is not the only one interested in an answer. I might be pointing out the painfully obvious here, but I personally find the CHANGES file in the OpenSSL

Re: Runtime Error using OpenSSL on Win32

Hi, On Thu, May 11, 2000 at 09:29:09AM -0700, Tewari, Vijay wrote: Thanks for the info Cory. I really appreciate it. I have used RAND_screen() and it works just fine, but I am guessing that this is not good in "real life". In your opinion what is the best function to use to seed the

Pass phrase argument

In openssl documentation I saw it has the capability to accept pass phrase from command line arguments. However, I tried to run it and found that this option did not work. Is this option supported? Nathan Wang __ OpenSSL

RE: Version history

openssl-0.9.5a/CHANGES for detailed notes openssl-0.9.5a/NEWS for terse descriptions -Original Message- From: Alexander 'Alfe' Fetke [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 11, 2000 10:20 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Version history Hi,

Re: Version history

Hello, Does anybody know where I can find the OpenSSL version history. For example, if I wanted to know what has changed between 0.9.5 and 0.9.5a where would I look. Can't seem to find it on the site but I'm sure it's buried under there somewhere. :) Alexander 'Alfe' Fetke wrote: i

CSR Help

Hi, I have installed the OpenSA v 0.2.0 package on NT. OpenSSL is part of this package and I am trying to generate an CSR. I was able to use openssl to generate a key file but when I try to generate a CSR file, openssl is looking for /usr/local/ssl/openssl.cnf. The utility is looking in a

Re: Version history

Steve, Another thought, is their an external web address for the jobs listing that is published by Service Master, if so where could you send me the URL? It might be more productive for both of us. Thanks, Bruce --

Re: Pass phrase argument

Kuo Hsieh wrote: In openssl documentation I saw it has the capability to accept pass phrase from command line arguments. However, I tried to run it and found that this option did not work. Is this option supported? Yes it does work. What makes you think that it doesn't? Steve. -- Dr

Re: Version history

On Thu, May 11, 2000 at 04:20:12PM +0200, Alexander 'Alfe' Fetke wrote: On Mon, 8 May 2000, Bill Klein wrote: Does anybody know where I can find the OpenSSL version history. For example, if I wanted to know what has changed between 0.9.5 and 0.9.5a where would I look. Can't seem to

Re: CSR Help

I think there is an option ("-new", is it?) which causes the CSR generating utility to read the responses from the screen. So, you input all the values instead of the utility looking in sslc.cnf...I haven't tried this on NT though. Arun. "The online world is a cool place to visit, but you

Re: Authentication fun

On Wed, 10 May 2000 [EMAIL PROTECTED] wrote: Hullo! Just started using OpenSSL on a RH6.2 box. I configured, made, installed with the defaults, took the stock ssh.pam file and slapped it into /etc/pam.d/ssh however I could not authenticate. I'm using a DSA host key This is not an OpenSSL

Another Runtime Error using OpenSSL on WinNT

Hi, My program using OpenSSL dll on WinNT get the following error: 1308:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:.\ssl\s3_pkt.c:658: This error hang up my program. In addition, this error only happened in WindowsNT Workstation. While compiling Open SSL libraries for

Re: pkcs12 API question

[EMAIL PROTECTED] wrote: Hi, I'm having trouble parsing a pkcs12 file in a program. The p12 file parses fine with the command line program, so I assume I'm not using the api correctly. I'm using the latest release of openssl on a linux box. Here is the series of calls I'm trying in my