Re: Secret sharing partial signature

2002-05-14 Thread Vadim Fedukovich
On Mon, 13 May 2002, Rakeshbabu Bobba wrote: here is the link http://crypto.stanford.edu/~dabo/ITTC/dist-files/ittc-1.0.tar.gz rakesh On 13 May 2002, Aleix Conchillo wrote: On Mon, 2002-05-13 at 19:34, Rakeshbabu Bobba wrote: you might want to take a look at IITC project of Dan

error: SSL_CTX_use_PrivateKey_file

2002-05-14 Thread LIM SENG CHOR
Hi, I encountered the following problem: STARTTLS=server, error: SSL_CTX_use_PrivateKey_file(/etc/mail/certs/MYkey.pem) failed anyone has any idea to overcome this problem? Thank you. __ OpenSSL Project

Unable to load

2002-05-14 Thread Leandro Silveira de Paula
Hello... I'm tryng to compile a Open SSL 0.9.6 in a AIX 4.3.3, and i received the following message: risc# ./openssl req -new -nodes -keyout private.key -out public.csr Using configuration from /usr/local/ssl/openssl.cnf unable to load 'random state' This means that the random number generator

openssl make test failure

2002-05-14 Thread sridhar Kondoji
Hi all, Iam using Sun workstation with solaris version 8. I have successfully did a make but 'make test' fails It says bc doesnot work properly (SunOStest failed) and finally it says no working bc found. What could be the reason? Iam stuck at this point help me out. Iam new to Unix and also

RE: Basic OpenSSL Client w/Pthreads

2002-05-14 Thread Nick Gaugler
You are correct, it was timeouts. My pthread application was overloading the SSL server and it wasn't returning within the timeout, so that is why I kept receiving Error with sockets. I have an additional question related to SSL_write on a non-blocking IO. What is the proper method to check

Re: openssl make test failure

2002-05-14 Thread Lars-Erik Englund
sridhar Kondoji wrote: Hi all, Iam using Sun workstation with solaris version 8. I have successfully did a make but 'make test' fails It says bc doesnot work properly (SunOStest failed) and finally it says no working bc found. What could be the reason? Iam stuck at this point help me

RE: The digital certificate disapear.....

2002-05-14 Thread Erwann ABALEA
On Tue, 14 May 2002, Franck Martin wrote: I can tell you, now it works... What about your configurastion? [snip] Why are you testing your stuff on the OpenSSL-Users mailing list? Can't you create your own mailing list for that purpose? Why sending unnecessary emails to everybody for

Re: Unable to load

2002-05-14 Thread Pavel Tsekov
Hello Leandro, Thursday, May 13, 2004, 10:25:39 PM, you wrote: LSdP seeded:md_rand.c:501:You need to read the OpenSSL FAQ, LSdP http://www.openssl.org/support/faq.html Have you done as suggested ? __ OpenSSL Project

Re: Unable to load

2002-05-14 Thread Umesh
Try this... for a quick solution create a file 'random_file' and type a few junk characters in it (save it :-)). Then... ./openssl req -new -rand random_file -nodes -keyout private.key -out public.csr this should solve your problem. Regards, Umesh Leandro Silveira de Paula wrote: Hello...

RE: The digital certificate disapear.....

2002-05-14 Thread Franck Martin
Because openssl is broken when handling smime and I need to know from expert people what client works and how good it is when handling certificates created by openssl.. Moreover, I need to know what client is doing what. It seems that some clients make some internet connection to verify

RE: Which product to buy?

2002-05-14 Thread Mark H. Wood
On Tue, 14 May 2002, Franck Martin wrote: [snip] Who can't see that this message is digitaly signed and do you know why? I can see that it is signed, but pine doesn't know what to do with an Application/X-PKCS7-SIGNATURE bodypart. -- Mark H. Wood, Lead System Programmer [EMAIL

Securing Telnet

2002-05-14 Thread Thomas Nilsen
Sorry if this is a lame question, but I've not been able to find the answers to my question anywhere else. We've been given the task of giving an external company access to a AIX 4.1 box which only runs telnet. And since it looks like OpenSSH needs AIX 4.3 we are not able to nativly support

Re: Securing Telnet

2002-05-14 Thread Jeffrey Altman
You other option is to install a Secure Telnet Daemon on the AIX server. See http://www.kermit-project.org/telnetd.html for some options. Sorry if this is a lame question, but I've not been able to find the answers to my question anywhere else. We've been given the task of giving an

Re: Securing Telnet

2002-05-14 Thread Bruce Ferrell
How about building SSH from source? There is a gcc for AIX 4.1 if you don't have the IBM compiler. Thomas Nilsen wrote: Sorry if this is a lame question, but I've not been able to find the answers to my question anywhere else. We've been given the task of giving an external company

[OT] Re: Securing Telnet

2002-05-14 Thread dreamwvr
On Tue, May 14, 2002 at 12:49:16PM +0200, Thomas Nilsen wrote: Is it possible to set up a SSH session on a linux host in DMZ which will forward any SSH connections on a given port to the AIXs telnet port? There will be a couple of users needing access, and we need to be able to have them log

How do I change the public key in a DER file?

2002-05-14 Thread Par Ahren
Hi all! How do I change the public key in a DER file? I am using C but I can't se an easy way to do it... Best regards, -- Pär Ahrén, [EMAIL PROTECTED] GSM: +46-703-247367, Fax: +46(0)702-035519 begin:vcard n:Ahrén;Pär tel;cell:+46 (0)703 24 73 67 tel;fax:+46 (0)702 03 55 19

Large files with smime

2002-05-14 Thread Girish Venkatachalam
Hi everyone, Openssl smime is not able to handle big files ( We tried with a 500MB file). It doesn't report any error message. On stepping through the source, we found that it's failing in OPENSSL_malloc. However openssl enc works fine with files larger than 2 GB. There is a bug in one

Re: Large files with smime

2002-05-14 Thread Erwann ABALEA
On Tue, 14 May 2002, Girish Venkatachalam wrote: Hi everyone, Openssl smime is not able to handle big files ( We tried with a 500MB file). It doesn't report any error message. On stepping through the source, we found that it's failing in OPENSSL_malloc. However openssl enc works fine with

Cert for iPlanet webserver

2002-05-14 Thread carsten . schwant
I signed a request for a server-certificate. That should secure an iPlanet webserver. But when I try to install it in the webserver I get this message: Internal Error The administration server was unable to fulfill your request. Whats wrong with the certificate? Same certificate runs in IIS

Re: create opensll, ssldump keyfile

2002-05-14 Thread Eric Rescorla
Davidson, Stuart [EMAIL PROTECTED] writes: The following ssldump trace records the following 'su' sequence and shows that an su from a non privileged account does not work. # su - dav $ id uid=4001 gid=401 +++ su from root to dav works OK +++ $ su - dav Password: su: Sorry +++ su from

RE: The digital certificate disapear.....

2002-05-14 Thread Erwann ABALEA
On 15 May 2002, Franck Martin wrote: Because openssl is broken when handling smime and I need to know from expert people what client works and how good it is when handling certificates created by openssl.. Do you have an example of such S/MIME mail that can't be handled correctly by OpenSSL?

Re: Large files with smime

2002-05-14 Thread Pablo J Royo
Althougth no such a big files, we also create big PKCS7 files (tens of Mbytes) using detached PKCS7.I don´t know exactly if this is supported by OpenSSL now, but there is a "detached" attribute for files in PKCS7 routines, and working in PKCS7_verify(),PKCS7_init(),PKCS7_data() you can do

RE: create opensll, ssldump keyfile

2002-05-14 Thread Davidson, Stuart
2. when I try using the -k and -p arguments using the iPlanet cert7.db, ssldump gives the error: Problem loading private key Error: Couldn't create network handler 3. I think I need option (2) but I don't know how to convert the existing iPlanet key3.db, cert7.db or Microsoft Enterprise

create opensll, ssldump keyfile

2002-05-14 Thread Davidson, Stuart
The following ssldump trace records the following 'su' sequence and shows that an su from a non privileged account does not work. # su - dav $ id uid=4001 gid=401 +++ su from root to dav works OK +++ $ su - dav Password: su: Sorry +++ su from dav to dav does NOT work +++ $ Questions: 1. any

Re: RE: The digital certificate disapear.....

2002-05-14 Thread shalen chhabra
I have seen this Certificate Discussion goin on too long. SO I am also interested to know more about it, All I know is what a CA is. Also I donot know, why is OPenssl being given so much importance for certificate?? and how do I use this certificate if I have it? (just give me practical

IP address

2002-05-14 Thread shalen chhabra
I want to know the IP Address of a site I connect to. For example www.hotmail.com How can I know it from a linux terminal. Thanks (I am writing some progs so in between them I need this) _ Click below to visit monsterindia.com and review

Re: IP address

2002-05-14 Thread Chamby
nslookup and the URL - Original Message - From: shalen chhabra [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, May 14, 2002 3:58 PM Subject: IP address I want to know the IP Address of a site I connect to. For example www.hotmail.com How can I know it from a linux

Re: IP address

2002-05-14 Thread Sidney Fortes
Use host, nslookup became deprecated ex: [sidney@host sidney]$ host www.hotmail.com www.hotmail.com. has address 64.4.44.7 www.hotmail.com. has address 64.4.45.7 www.hotmail.com. has address 64.4.52.7 www.hotmail.com. has address 64.4.53.7 www.hotmail.com. has address 64.4.54.7 www.hotmail.com.

Re: Large files with smime

2002-05-14 Thread Dr. Stephen Henson
On Tue, May 14, 2002, Girish Venkatachalam wrote: Hi everyone, Openssl smime is not able to handle big files ( We tried with a 500MB file). It doesn't report any error message. On stepping through the source, we found that it's failing in OPENSSL_malloc. That's not surprising. The

Re: [offtopic] Importing openssl RSA keys to gnupg.

2002-05-14 Thread Augusto Marcacini
Hi, I've already done this with PGP for Windows. It works Ok and we can see the certificate common fields. I'd like to import X.509 certificates and private keys do gnupg also. But I think (not for sure) that gnupg doesn't support it. If anyone know how to do it and if it's possible, I also