CRLs Tutorial in Netscape 7.x

2002-06-18 Thread Averroes
Hi All, A simple tutorial to manage CRLs into Netscape 7.x URL: http://www.medracen.net/pki.php?url=tutorials Comments suggestions are welcome. #--- Averroes __ OpenSSL Project

Re: EVP_DigestInit

2002-06-18 Thread Lutz Jaenicke
On Mon, Jun 17, 2002 at 05:27:05PM -0400, Sivaselvam CN wrote: Hi, In the help for sha(3) command, OpenSSL documentation advises to use the EVP_DigestInit functions for hashing functionality instead of calling the hash functions directly. But I do not see the following functions in

Re: Help on verifying signatures

2002-06-18 Thread Christian Pohl
Hi Andrea, First of all: the provided certificate has basic constraints set to critical with ca:false, so this certificate is not allowed to sign crls and so the verification fails. To verify the CRL: 1. convert the certificate to PEM openssl x509 -in certificate.der -inform DER in out

decrypted private key...

2002-06-18 Thread Leendert Meyer
Hi all, Ok here is my problem : I have a encrypted private key in a .pem file. How can I convert it to be an unencrypted version of the key. Any help appreciated. Kind regards, Leendert. __ OpenSSL Project

Re: decrypted private key...

2002-06-18 Thread Aleix Conchillo
Leendert Meyer [EMAIL PROTECTED] writes: Hi all, Ok here is my problem : I have a encrypted private key in a .pem file. How can I convert it to be an unencrypted version of the key. openssl rsa -in privkey.pem -out privkey_unenc.pem regards, aleix

Re: [ANNOUNCE] OpenSSL 0.9.7 beta 2 released

2002-06-18 Thread Vadim Fedukovich
On Sun, Jun 16, 2002 at 01:55:48PM +0200, Lutz Jaenicke wrote: The second beta release of OpenSSL 0.9.7 is now available from the OpenSSL FTP site URL: ftp://ftp.openssl.org/source/. Quite a lot of code changed between the 0.9.6 release and the 0.9.7 release, so a series of 3 or 4 beta

Authentication client and SSLWallet directive

2002-06-18 Thread Daniela Prestipino
Hi to all, How can I enable the SSL protocol with authentication client in: 9iAS release 2 for LINUX with Apache 1.3.22 mod_ossl 9.0.2.0.0 OpenSSL 0.9.6-3 The ssl directive in file httpd.conf SSLCACertificateFile is not valid (and if it's present then apache doesn't restart). In httpd.conf

DH: problem with DH_compute_key

2002-06-18 Thread julien Bournelle
Hi all, I have a little pb and after a little search on google I didn't find any interesting help :-( This is my pb: i try to get a session key by DH and when I compute keys I didn't obtain the same session key. This is the code : #define PRIME_LEN 64 #define GENERATOR 5 ... DH *dh_mn;

Re: DH: problem with DH_compute_key

2002-06-18 Thread Vadim Fedukovich
On Tue, Jun 18, 2002 at 05:30:45PM +0200, julien Bournelle wrote: Hi all, I have a little pb and after a little search on google I didn't find any interesting help :-( This is my pb: i try to get a session key by DH and when I compute keys I didn't obtain the same session key. No

endless loop on SSL_ERROR_WANT_X509_LOOKUP

2002-06-18 Thread Louis LeBlanc
Hey all. I'm back on the list with a little bit of confusion. For reference, my app is using OpenSSL 0.9.6. The problem I'm seeing is apparently caused by a read or write attempt returning SSL_ERROR_WANT_X509_LOOKUP. My understanding of this was that I should simply try the read or write

RE: machine independent hash

2002-06-18 Thread Sivaselvam CN
Hi Michael, Yes... I have a requirement that the server that authenticates the password can be running at the different platforms at different times. Can you tell me if there is a way to get identical passwords for a given string whichever platform the SHA1 algorithm is run? Thanks.

Problem with VAX build (same as reported a year ago)

2002-06-18 Thread Vance Haemmerle
Hello, I'm trying to install OpenSSL 0.9.6d on a VAX OpenVMS V7.1 using DEC C V6.2 and the build command file is in a loop trying to build the PKCS7 Applications. I searched the archives and found that Bryan of the New Mexico Military Instutite had exactly the same problem with 0.9.6a-beta3:

Digital Cert Problem when using cURL

2002-06-18 Thread Steven R. Shourds
I did the command (openssl pkcs12 -in PerfProdPrivate.pfx -outPerfProdPrivate.pem) and created the pem file, but it is still failing.F:\Tech\cURLcurl -v -o matcat -E PerfProdPrivate.pemhttps://52.128.224.9/NASApp/dpcus01/B2BConnectorDPC?tgt=MatCatExtract* About to connect() to

RE: machine independent hash

2002-06-18 Thread Michael Chang
Siva... Take a look at the previous replies in the list to what I wrote below. Apparently, the hashing algorithms in question produce the same output, regardless of platform. That makes complete sense. As stated before, doing an md5sum on, for example, file 'foo' on an Alpha will produce

Re: Md5 based hash

2002-06-18 Thread Tim Pushor
Just on the off chance: Could it be possible that WinNT is using unicode? Sivaselvam CN wrote: Hi Brad All, I saw the EVP functions example. But I did not find them in the 9.6 version (the stable) one. I got to know from the mailing list (Thanks Lutz...) that these functions are

Re: endless loop on SSL_ERROR_WANT_X509_LOOKUP

2002-06-18 Thread Lutz Jaenicke
On Tue, Jun 18, 2002 at 12:10:48PM -0400, Louis LeBlanc wrote: The problem I'm seeing is apparently caused by a read or write attempt returning SSL_ERROR_WANT_X509_LOOKUP. My understanding of this was that I should simply try the read or write again. Apparently I was mistaken because the

Re: Md5 based hash

2002-06-18 Thread Rich Salz
Are you hashing a file opened in text, not binary, mode? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Re: endless loop on SSL_ERROR_WANT_X509_LOOKUP

2002-06-18 Thread Louis LeBlanc
On 06/18/02 06:59 PM, Lutz Jaenicke sat at the `puter and typed: On Tue, Jun 18, 2002 at 12:10:48PM -0400, Louis LeBlanc wrote: The problem I'm seeing is apparently caused by a read or write attempt returning SSL_ERROR_WANT_X509_LOOKUP. My understanding of this was that I should simply

Re: endless loop on SSL_ERROR_WANT_X509_LOOKUP

2002-06-18 Thread Lutz Jaenicke
On Tue, Jun 18, 2002 at 01:32:56PM -0400, Louis LeBlanc wrote: You mean the server is requesting a client cert from my app? This is what http://www.openssl.org/docs/ssl/SSL_get_error.html# says: SSL_ERROR_WANT_X509_LOOKUP The operation did not complete because an application