Self-signed certificate created by SelfSSL.exe (IIS Resource Kit)

2008-05-06 Thread Иосиф Виссарионович
I used SelfSSL.exe utility to create self-signed certificate and installed it into IIS on my website. My OpenSSL client fails when I try to connect to my website. I've got this error: SSL_connect() failed: error:0001:lib(0):func(0):reason(1) error:14090086:SSL

RE: won't compile on hp ux 11.23 itanium

2008-05-06 Thread Huey, Mike
FYI, we do have precompiled versions of OpenSSL for HP-UX available at: http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I By default on 11.11 and 11.23 we setup the 0.9.7m env. After installing you need to go to /opt/openssl and ./switchversion.sh to get

Parsing certificate to find CRL distribution points

2008-05-06 Thread Wockenfuß , Frank
Hi all, I have a problem getting the distribution points out of a X509 certificate programmatically with C++. Does anybody can give me a hint, best with code examples for C++. I have a X509-object holding the certificate I want to look for in the CRL. But how do I go on to get the CRL

openssl and ibm J9 SSE implementation invalid padding

2008-05-06 Thread yann lapeyre
Hi every body, I develop a mobile application running on the IBM J9 jvm (foundation 1.1). This IBM JVM provides an implementation of the libraries JSSE (J9SSE) and JCE (J9CE). I use it to establish secured https connections between the PDA and my server. The connection negotiation is ok,

Re: openssl-fips-1.1.2 make install fails in fips-1.0/Makefile for hpux64-ia64-cc HP-UX 11

2008-05-06 Thread Steve Marquess
Welling, Conrad Gerhart wrote: Steve: 1. HP C trial version Appears that there are patchs which must be applied to the (trial) HP C depot installation on my platform. I'm not a sysadmin, but, am assuming the role with this particular PA-RISC2.0 platform. I had assumed that the depot included

Re: Parsing certificate to find CRL distribution points

2008-05-06 Thread Patrick Patterson
Hi Frank On May 6, 2008 03:57:01 am Wockenfuß, Frank wrote: Hi all, I have a problem getting the distribution points out of a X509 certificate programmatically with C++. Does anybody can give me a hint, best with code examples for C++. I have a X509-object holding the certificate I want to

AW: Parsing certificate to find CRL distribution points

2008-05-06 Thread Wockenfuß , Frank
Hi Patrick, Thank you for that hint. I'll have a look at it. Best regards Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Patrick Patterson Gesendet: Dienstag, 6. Mai 2008 15:05 An: openssl-users@openssl.org Betreff:

RSA, SHA-1 and CMS

2008-05-06 Thread Fedak, Joe
I have a need to sign files using RSA and SHA-1 algorithms. The signed files will also need to be in CMS format. Can openssl.exe be used to do this or do I need to used the openssl libraries? Also, if you can point me to an example, that would be great. Thanks Joe Fedak

Random number generation with OpenSSL - looking for high quality PRNG for use with Linux

2008-05-06 Thread Rolf Engstrom
The Lavarnd project shows some weakness (vs NIST 800-22 testing) for both /dev/urandom, and /dev/random. Does anyone know of a project for software RNG that is high quality? The /dev/random project is close - but fails the NSIT test for DFT Spectral (uniformity)?

Re: RSA, SHA-1 and CMS

2008-05-06 Thread Dr. Stephen Henson
On Tue, May 06, 2008, Fedak, Joe wrote: I have a need to sign files using RSA and SHA-1 algorithms. The signed files will also need to be in CMS format. Can openssl.exe be used to do this or do I need to used the openssl libraries? Also, if you can point me to an example, that would be great.