Re: What does PEM mean?

2006-08-01 Thread Prabhu.S
PEM : Privacy Enhanced Mail - Original Message - From: Gayathri Sundar [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Tuesday, August 01, 2006 9:28 AM Subject: RE: What does PEM mean? Wow, I was thinking its Privacy Enhanced Mode!! ?? No? -Original Message- From:

RSAPublicKey causing compilation error

2006-08-01 Thread Bhat, Jayalakshmi Manjunath
Hi All, I am trying to complie openssl.9.8a on HP-UX. I am getting errors ../../include/openssl/pem.h:610: parse error before `RSA' ../../include/openssl/pem.h:611: warning: return-type defaults to `int' pem_all.c: In function `DECLARE_PEM_write_fp_const': pem_all.c:133: storage class specified

Re: RSAPublicKey causing compilation error

2006-08-01 Thread Girish Venkatachalam
--- Bhat, Jayalakshmi Manjunath [EMAIL PROTECTED] wrote: Hi All, I am trying to complie openssl.9.8a on HP-UX. I am getting errors ../../include/openssl/pem.h:610: parse error before `RSA' ../../include/openssl/pem.h:611: warning: return-type defaults to `int' pem_all.c: In

RE: RSAPublicKey causing compilation error

2006-08-01 Thread Bhat, Jayalakshmi Manjunath
Hi please can any one tell me as RSAPrivateKey has a structure, RSAPublicKey is this a stucture? I am getting the parser error at line DECLARE_PEM_rw_const(RSAPublicKey, RSA). Regards, Jaya. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bhat,

ca format of index.txt. file

2006-08-01 Thread Fitzsimons, Nick
Hello All, Does anyone know where there is a definition of the format of the contents of the index.txt file used with the ocsp and ca commands ? (This file contains info on the revocation status of certificates). Thanks, Nick

Re: Query on RSAPublicKeyy

2006-08-01 Thread Marek Marcola
Hello, I am trying to compile openssl.9.8a on HP-UX. I am getting compilation Error as shown You are trying to compile OpenSSL or your program ? On what hpux version ? What command you execute ? Best regards, -- Marek Marcola [EMAIL PROTECTED]

RE: Query on RSAPublicKeyy

2006-08-01 Thread Bhat, Jayalakshmi Manjunath
Hi, Thanks for the reply. I have ported openssl.9.8.a on HP-UX. Now I am trying to build the openssl source files which I have ported. I am using /hppa-hpux11/bin/make to build source. I am trying to build the library for ARM processor. Regards, Jaya. -Original Message-

Re: ca format of index.txt. file

2006-08-01 Thread Bernhard Froehlich
Fitzsimons, Nick wrote: Hello All, Does anyone know where there is a definition of the format of the contents of the index.txt file used with the ocsp and ca commands ? (This file contains info on the revocation status of certificates). Thanks, Nick First of all the format

Re: How to verify signature data with RSA PKCS1

2006-08-01 Thread Dr. Stephen Henson
On Mon, Jul 31, 2006, k b wrote: Thanks Stephens, that worked. i'm just curious what if one uses #openssl rsautl -sign -inkey ./private/cakey.pem -in plain.txt -out signature.bin to create a signature, how would you verify it in a c. essentially what i mean is can u pass null in 2nd

RE: ca format of index.txt. File - IT WORKS!

2006-08-01 Thread Fitzsimons, Nick
Hi, Well I finally worked out what I wanted to do so I thought I'd share it with anyone out there who might be trying the same thing themselves. The tie in between the certificate whose status I am seeking an ocsp response for and the index file supplied as a parameter to the ocsp command

Re: how can I create install client X.509 cert to be used as client decryption?

2006-08-01 Thread l Burnerheimerton
Many thanks - it does help and I will try it soon. Many thanks! --- Bernhard Froehlich [EMAIL PROTECTED] wrote: l Burnerheimerton wrote: [...] Ted - many thanks for your help. Just so I understand correctly, I generate a private key certificate using openssl to export it to a file

Re: ca format of index.txt. File - IT WORKS!

2006-08-01 Thread Bernhard Froehlich
Fitzsimons, Nick wrote: [...] I notice however that if I set the Status column to be R(evoked) I get a staus of unknown rather than revoked. Does anyone have any observations on this ? The relevant code goes as this (apps/ocsp.c lines 1063 and following): inf =

RE: ca format of index.txt. File - IT WORKS!

2006-08-01 Thread Fitzsimons, Nick
Hi Ted, I can now get the Revoked status to work properly - I simply wasn't entering a date in the column for Revoked Date : I was only putting an R in the first column. I can't get E(xpired) to work but I can live without that for now. I always get an error of some sort when the

Minimal compile

2006-08-01 Thread Alfred Thomas
Hi all Can anyone explain to me how to do a minimal build of OpenSSL. We are using WinCE and want to take out any unnecessary stuff like BlowFish etc. I see in the code that it looks for #ifdef OPENSSL_NO_??? but where do I define that? Regards Alfred

Re: SSL_load_error_strings()

2006-08-01 Thread Marek Marcola
Hello, Should I call SSL_load_error_strings() at the beginning of each thread? Or, can I call it once in the parent thread before any child threads are launched, so the strings are shared globally across all threads? Once in parent thread. Best regards, -- Marek Marcola [EMAIL PROTECTED]

TLS 1.0 + Firefox 1.5 not working

2006-08-01 Thread Leandro Gustavo Biss Becker
Hi folks I'm using openssl 0.9.8b to build a very small web server using TLS 1.0. The IE 6 and IE 7 Beta 3 connects and get pages from web server normally, but using Firefox 1.5.0.5 the TLS handshake fails with: error:1408F10B: SSL routines: SSL3_GET_RECORD:wrong version number Any tip ?

How do I register my own ca.crt in the default CA repository of openssl ?

2006-08-01 Thread Thomas CarriƩ
Hello, I have created my personnal root ca using http://www.nyetwork.org/wiki/ssl_root_ca_new So I have got my myCa.crt file, kmail and firefox are happy with this certificate format when I load it from their security preferences menu. But I would like also to register my CA in the