Re: Question about extension of a certificate

2004-10-21 Thread Jean-Luc Pinardon
Hi, Well, I'am using Perl modules over openssl, not openssl directly. Nevertheless, whatever the file extension you are using, it seems to me that the way your certificate is managed mainly depends upon the command args or environment variables you are using when you run this or that command.

Re: csr for windows server

2004-10-21 Thread Ronan
no its not there i dont think. basically what is happening is that im programming an interface to Active directory and one of the features is a change password option. this can only be done obviously over ssl. This is why i need the certificate generaed so i can sign it with our root CA. I need

Re: csr for windows server

2004-10-21 Thread =?ISO-8859-1?Q?J=F6rn_Hartmann?=
openssl req -new -key server.key -out server.csr should do the job. server.key is your server's private key file. If you do not have one yet, use openssl genrsa -out server.key 1024 to generate a 1024 bit RSA key. - Jörn Ronan wrote: no its not there i dont think. basically what is happening

SSL without Key?

2004-10-21 Thread David ARMOUR
Email clients such as Outlook can have a SSL connection to the server as an option. However when these options are selected, the user does not have to provide a key. How does such a system create an SSL connection? How could I use SSL to emulate such action? Regards.

RE: RE: error while running make - No such file or directory

2004-10-21 Thread Steven Reddie
No, gcc should know where to look. Try a separate test program, independent of OpenSSL, that includes that header. If that gives you problems you might get help from the Cygwin list. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]

RE: SSL without Key?

2004-10-21 Thread Steven Reddie
Under SSL there are two possible client modes, anonymous and authenticated. You're referring to anonymous connections where the client doesn't provide any credentials to the server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David ARMOUR Sent:

Re: SSL without Key?

2004-10-21 Thread Peter O Sigurdson
Hi David You install a certificate for Windows IIS by using the Keymanager key generation wizard, then generate a certificate key request and then have a CA sign the certificate and install it. Detailed instructions are available in the Windows help system. I'm guessing it is analogous for

Re: SSL without Key?

2004-10-21 Thread Charles B Cranston
I don't think this is correct at all. I use OpenSSL to generate certificates that are used on Microsoft IIS servers and IBM HTTP servers and Novell eDirectory LDAP servers and IBM Directory Server LDAP servers and all sorts of servers. Now, the vendors may not make it EASY to use non-proprietary

=?iso-8859-1?Q?Re:_RE:_RE:_error_while_running_make_-_No_such_file_or_directory?=

2004-10-21 Thread news
Hi Steven, I resolved the problem. Besides of Cygwin I had also MinGW installed. Cygwin then used the gcc compiler which was installed in the MinGW directory. Then the makefile stepped back in the MinGW folder to find the sys/times.h which does not exist. After uninstalling MinGW and

=?iso-8859-1?Q?collect2:_ld_returned_1_exit_status?=

2004-10-21 Thread news
Hi, when trying to compile OpenSSL_0_9_7d on my Win2k machine with Cygwin I receive the following error: collect2: ld returned 1 exit status This should be related to the linker, correct? I have attached the part of log file where the error occurs. Can anybody help? I don´t know if my

Re: SSL without Key?

2004-10-21 Thread Peter O Sigurdson
This is great information, Can you point me to a HOWTO or other resource regarding importing SSL certs into IIS? Thanks Charles! Charles B Cranston [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 10/21/2004 10:04 AM Please respond to openssl-users To: [EMAIL PROTECTED] cc:

RE: collect2: ld returned 1 exit status

2004-10-21 Thread Steven Reddie
Yes, these errors are during the link stage. Your libcrypto.a should contain the file des_enc.o which should contain DES_encrypt1. If you can't find that symbols then something has gone wrong with your build. I don't think LD_LIBRARY_PATH has any effect on Cygwin, but I'm not positive -- I

RE: csr for windows server

2004-10-21 Thread OpenSSL
As others have mentioned, you can use OpenSSL to generate the request + key, and once you sign the request you'll then need to create a PKCS-12 file containing the certificate and key, then import that into IIS. Alternatively, you can get IIS/CryptoAPI to generate the request and then sign it

Re: SSL without Key?

2004-10-21 Thread Charles B Cranston
Peter O Sigurdson wrote: This is great information, Can you point me to a HOWTO or other resource regarding importing SSL certs into IIS? For the standard model, where you generate the CSR on the server (so the private key stays in the server the whole time) my standard reference is IIS Security

Re: SSL without Key?

2004-10-21 Thread Tim Bond
Not sure why I can't import a p12 file directly in the IIS admin panel, but this article describes how to do it using mmc . . . http://support.microsoft.com/default.aspx?scid=kb;EN-US;232137 -- Tim Peter O Sigurdson wrote: This is great information, Can you point me to a HOWTO or other resource

Question about EVP_PKEY_free ()

2004-10-21 Thread Carlos Roberto Zainos H
Hi all!! I have a little problem using EVP_PKEY_free() function. This crash my program. I'm makingsomething like this in my source code: EVP_PKEY *key=NULL; RSA *rsa=NULL; key=EVP_PKEY_new(); EVP_PKEY_assign_RSA (key, rsa); // . other code here .

Modify PKCS#12 keybag attributes to include OID for machine authentication

2004-10-21 Thread Meadows, Loris C
We are about to roll-out freeRADIUS servers to 1,700 schools. freeRADIUS and openSSL will be used for 802.1x security of our wireless networks. Notebooks that have only one user are working fine - we install a user (username.P12) and root certificate (root.der) to a notebook running Windows XP

RE: SSL without Key?

2004-10-21 Thread David ARMOUR
Charles, Your anwser makes things clearer to me. As my job is one of automating business processes I tend to always be working as a client. I am recently facing a job where I have to connect to an SMTP server using SSL. (Server does not allow insecure connections.) The mail server in this company

Re: Modify PKCS#12 keybag attributes to include OID for machine authentication

2004-10-21 Thread Dr. Stephen Henson
On Fri, Oct 22, 2004, Meadows, Loris C wrote: We are about to roll-out freeRADIUS servers to 1,700 schools. freeRADIUS and openSSL will be used for 802.1x security of our wireless networks. Notebooks that have only one user are working fine - we install a user (username.P12) and root