[PATCH] Configure rsaref

1999-04-12 Thread Ulf Moeller
Index: Configure === RCS file: /e/openssl/cvs/openssl/Configure,v retrieving revision 1.35 diff -u -r1.35 Configure --- Configure 1999/04/09 16:25:25 1.35 +++ Configure 1999/04/12 14:15:02 @@ -292,6 +292,11 @@ {

Req/X509 under Win32

1999-04-12 Thread Wu Zhigang
Hi, Anyone has the success experience to run Cert management programs under win32 platform. I have tried, but failed, when I run openssl req -new -config /openssl/lib/openssl.cnf -out mycsr.pem I got a error message "unable to find 'distinguished_name' in config problem make Certificate

RE: Type-safe stacks

1999-04-12 Thread salzr
Ahh, I misunderstood what you meant by macros. I thought you meant things like: #define sk_X509_push(sk, v) \ sk_push((stack*)sk, (char*)v) Which is, of course, sub-optimal. Having a bunch of one-line wrapper functions isn't unreasonable. On the other hand, since stack.[ch] are so small,

Re: Type-safe stacks

1999-04-12 Thread Ben Laurie
[EMAIL PROTECTED] wrote: Ahh, I misunderstood what you meant by macros. I thought you meant things like: #define sk_X509_push(sk, v) \ sk_push((stack*)sk, (char*)v) Which is, of course, sub-optimal. Having a bunch of one-line wrapper functions isn't unreasonable. Would I do

Re: Type-safe stacks

1999-04-12 Thread Dr Stephen Henson
Ben Laurie wrote: Don't forget that templates are really just a glorified preprocessor (well, OK, they aren't now but they were at first) :-) Seriously, you can do a lot of what templates do with a preprocessor if you try hard enough. Anyway, the interesting stuff all happens here, in

Re: Type-safe stacks

1999-04-12 Thread Ben Laurie
Dr Stephen Henson wrote: Ben Laurie wrote: Don't forget that templates are really just a glorified preprocessor (well, OK, they aren't now but they were at first) :-) Seriously, you can do a lot of what templates do with a preprocessor if you try hard enough. Anyway, the

Re: No key, certificate and CRL API: more info.

1999-04-12 Thread Ben Laurie
Dr Stephen Henson wrote: 4. There is no way to lookup by other methods, for example lookup by subject key id (needed for proper certificate chain verification) or lookup by issuer name (needed to find matching certificates in an SSL client when authentication is requested). To add new lookup

Re: [PATCH] Configure rsaref

1999-04-12 Thread Ulf Moeller
A reasonable idea, but why do you use "-lRSAglue" twice? The correct and working order should be "-lRSAglue -lrsaref", shouldn't it? Except for this issue, +1 for the patch. It should, but Richard Revitte suggested to put it in twice. Richard?

RSA failure on irix (no asm)

1999-04-12 Thread Ulf Moeller
Al Smith reports that RSA fails on IRIX. He does not use RSAREF, nor any assembler bignum code. This looks like a serious problem. Any ideas what may go wrong there? I'm forwarding Al's messages with his permission. From: Al Smith [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: 0.9.2b

Re: Type-safe stacks

1999-04-12 Thread Anonymous
Ben Laurie [EMAIL PROTECTED] said: If everyone thinks it is a terrible idea I'm prepared to undo it. I'll fight first, though, coz I think it is a great idea :-) I, for one, do think it is a terrible idea and I "vote against" these changes. Marvelous macros are neat and all, but - They

Re: No key, certificate and CRL API: more info.

1999-04-12 Thread Dr Stephen Henson
Ben Laurie wrote: Dr Stephen Henson wrote: 4. There is no way to lookup by other methods, for example lookup by subject key id (needed for proper certificate chain verification) or lookup by issuer name (needed to find matching certificates in an SSL client when authentication is

Re: Type-safe stacks

1999-04-12 Thread Ben Laurie
Anonymous wrote: Ben Laurie [EMAIL PROTECTED] said: If everyone thinks it is a terrible idea I'm prepared to undo it. I'll fight first, though, coz I think it is a great idea :-) I, for one, do think it is a terrible idea and I "vote against" these changes. Marvelous macros are neat

Re: No key, certificate and CRL API: more info.

1999-04-12 Thread Ben Laurie
Dr Stephen Henson wrote: Ben Laurie wrote: Dr Stephen Henson wrote: 4. There is no way to lookup by other methods, for example lookup by subject key id (needed for proper certificate chain verification) or lookup by issuer name (needed to find matching certificates in an SSL

Re: [PATCH] Configure rsaref

1999-04-12 Thread Richard Levitte - VMS Whacker
ulf It should, but Richard Revitte suggested to put it in twice. Richard? I only drew from other projects I've been involved in, where there were some kind of cross references between two libraries. To solve such things, the solution is often '-lib1 -lib2 -lib1'. In the libRSAglue and

Re: No key, certificate and CRL API: more info.

1999-04-12 Thread Dr Stephen Henson
Ben Laurie wrote: Dr Stephen Henson wrote: Ben Laurie wrote: Dr Stephen Henson wrote: 4. There is no way to lookup by other methods, for example lookup by subject key id (needed for proper certificate chain verification) or lookup by issuer name (needed to find matching

Re: [PATCH] Configure rsaref

1999-04-12 Thread Ulf Moeller
ulf It should, but Richard Revitte suggested to put it in twice. Richard? Did I write that? :) Sorry about the typo. I only drew from other projects I've been involved in, where there were some kind of cross references between two libraries. To solve Ok, then -lRSAglue -lrsaref should be

Re: No key, certificate and CRL API: more info.

1999-04-12 Thread Rich Salz
On Tue, 13 Apr 1999, Dr Stephen Henson wrote: I was thinking more along the lines of the PKCS#11 (but cut down a bit) to handle this kind of thing where you treat each 'object' as a set of 'attributes' and can search for objects that match a given attribute. Something like: int

Re: Req/X509 under Win32

1999-04-12 Thread Wu Zhigang
Hi, I have solve the problem by myself. Under Win32, you should use '\' instead of '/'. and you should change the first few line of openssl.cnf because of Win32 does not has ENV:: defination. cheer. --- Wu Zhigang [EMAIL PROTECTED] wrote: Hi, Anyone has the success experience to

[STATUS] OpenSSL (Sun 11-Apr-1999)

1999-04-12 Thread OpenSSL Project
OpenSSL STATUS Last modified at __ $Date: 1999/04/08 20:45:53 $ DEVELOPMENT STATE o OpenSSL 0.9.3: Under development... o OpenSSL 0.9.2b: Released on March22th, 1999 o OpenSSL 0.9.1c: Released on December

Re: Getting rid of ctx_size.c

1999-04-12 Thread Bodo Moeller
On Sun, Apr 11, 1999 at 01:17:19PM +0100, Ben Laurie wrote: (remember that HEADER_ENVELOPE_H is always defined here because of a previous #include, and that the dummy structure definitions anyway could fail on some systems because they don't necessary have the alignment needed for

No key, certificate and CRL API: more info.

1999-04-12 Thread Dr Stephen Henson
In an earlier message I discussed what I saw as a serious deficiency in OpenSSL: its lack of a key, certificate and CRL database API. In this message I'll mention more info and the general API requirements and why the nearest thing we have at present is not adequate IMHO. There is already a

No key, certificate and CRL API: the problem.

1999-04-12 Thread Dr Stephen Henson
I've been threatening to discuss this for some time. I've been aware of the problem for some time but more recently it has started to seriously hamper related development. Anyway here goes... Currently there is IMHO a big problem in the way OpenSSL handles private keys, certificates and CRLs. At