Sunil, >>c. Linux, Mono runtime/class library
Ok, I got 0.29 working on RH9 - it may not be 100% CVS as it required some tweaking to recover but close enough. The good/bad news is that mono doesn't seems to have any problem to parse your certificate. Carlos, are you able to reproduce the bug using the two files ? Sebastien Pouliot Security Architect, Motus Technologies, http://www.motus.com work: [EMAIL PROTECTED] home: [EMAIL PROTECTED] blog: http://pages.infinit.net/ctech/poupou.html -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of S�bastien Pouliot Sent: 15 d�cembre 2003 07:58 To: Sunil Kumar Cc: [EMAIL PROTECTED] Subject: RE: [Mono-list] Re: Mono.Security Sunil, >>>b. Windows, Mono runtime/class library >Since I haven't configured Mono on a windows box, I wasn't able to complete this scenario. That works for me using mono 0.28. I guess it's time I try to repair my RH9 setup (or re-install). Sebastien Pouliot Security Architect, Motus Technologies, http://www.motus.com work: [EMAIL PROTECTED] home: [EMAIL PROTECTED] blog: http://pages.infinit.net/ctech/poupou.html -----Original Message----- From: Sunil Kumar [mailto:[EMAIL PROTECTED] Sent: 12 d�cembre 2003 06:29 To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; Parameswaran S Subject: RE: [Mono-list] Re: Mono.Security Sebastin, I wasn't able to file bug report since we have some problem with HTTP services here right now. I am attaching all the details with this mail only. >>a. Windows, MS.NET runtime/class library I got following Result after runnign the test program:- CERTIFICATE: Format: X509 Name: OU=Organizational CA, O=SUNILK-TREE Issuing CA: OU=Organizational CA, O=SUNILK-TREE Key Algorithm: 1.2.840.113549.1.1.1 Serial Number: 27120202EBE69CCC8556EA84716043D2F8CC2981B8B2A54D75094975 EAD0EC111C02 Key Alogrithm Parameters: 0500 Public Key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b. Windows, Mono runtime/class library Since I haven't configured Mono on a windows box, I wasn't able to complete this scenario. >>c. Linux, Mono runtime/class library I got following Result after runnign the test program:- Unhandled Exception: System.Security.Cryptography.CryptographicException: Input data cannot be coded as a valid certificate. #0: 0x00349 throw in Mono.Security.X509.X509Certificate::Parse ([O:0x81b3aa0] ) #1: 0x0000e callvirt in Mono.Security.X509.X509Certificate::.ctor ([O:0x81b3aa0] ) #2: 0x0000e newobj in System.Security.Cryptography.X509Certificates.X509Certificate::.ctor ([O:0x81b3aa0] [1] ) #3: 0x00003 call in System.Security.Cryptography.X509Certificates.X509Certificate::.ctor ([O:0x81b3aa0] ) #4: 0x00030 newobj in System.Security.Cryptography.X509Certificates.X509Certificate::CreateFromCer tFile ([O:0x81abe70] ) #5: 0x00003 call in .X509CertTester::Main ([O:0x8146f78] ) I have attached the Test program and certificate with this mail. Regards, Sunil >>> S�bastien Pouliot <[EMAIL PROTECTED]> 12/11/2003 7:20:33 PM >>> Sunil, Ok it's getting stranger. I seems in sync with CVS and can't duplicate the problem with the 2 "candidate" certificates I got (the one from https://www.nldap.com and the one that Carlos sent me). Can you try, with your certificate, the following code ... using System; using System.Security.Cryptography.X509Certificates; class X509Tester { [STAThread] static void Main (string[] args) { X509Certificate x = X509Certificate.CreateFromCertFile (args[0]); Console.WriteLine (x.ToString (true)); } } ... on a. Windows, MS.NET runtime/class library b. Windows, Mono runtime/class library c. Linux, Mono runtime/class library and fill a bug report with the results and the certificate used. I'll look into this ASAP. Thanks Sebastien Pouliot Security Architect, Motus Technologies, http://www.motus.com work: [EMAIL PROTECTED] home: [EMAIL PROTECTED] blog: http://pages.infinit.net/ctech/poupou.html -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sunil Kumar Sent: 11 d�cembre 2003 00:22 To: Matt Ryan; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; Parameswaran S Subject: Re: [Mono-list] Re: Mono.Security Looks like there is some problem with the Mono's System.Security.Cryptography.X509Certificates.X509Certificate class. I tried to create a certicate object using CreateFromCertFile method and a ASN1 DER encoded certicate file ,but its throwing exception. I did the same thing on windows using MS .NET with the same certificate file and its working. Below is the code snippet:- try{ X509Certificate cert = X509Certificate.CreateFromCertFile(certfile); }Catch(Exception e) { Console.WriteLine("Error:" + e.Message); return; } On linux it throws following exception:- Error: Input data cannot be coded as a valid certificate. Regards Sunil. >>> Carlos Guzm�n �lvarez <[EMAIL PROTECTED]> 12/9/2003 9:56:53 PM >>> Hello: > There is also an internet-accessible eDirectory server that (I'm told) > anyone can use for testing purposes, at http://www.ndlap.com. Thanks very much. I have made a little test trying to negotiate the Handshake protocol against the www.nldap.com using .NET 1.0 and the SSL/TLS libraries sources from my local tree, with success, i will try to make the same test using mono, and update the mono cvs sources as soon as possible. -- Best regards Carlos Guzm�n �lvarez Vigo-Spain _______________________________________________ Mono-list maillist - [EMAIL PROTECTED] http://lists.ximian.com/mailman/listinfo/mono-list _______________________________________________ Mono-list maillist - [EMAIL PROTECTED] http://lists.ximian.com/mailman/listinfo/mono-list _______________________________________________ Mono-list maillist - [EMAIL PROTECTED] http://lists.ximian.com/mailman/listinfo/mono-list _______________________________________________ Mono-list maillist - [EMAIL PROTECTED] http://lists.ximian.com/mailman/listinfo/mono-list _______________________________________________ Mono-list maillist - [EMAIL PROTECTED] http://lists.ximian.com/mailman/listinfo/mono-list
