OpenSSL for MacOS

1999-12-20 Thread Andy Polyakov
Hi! Initial support for MacOS is making its first appearance in the *upcoming* snapshot, namely ftp://ftp.openssl.org/snapshot/openssl-SNAP-19991220.tar.gz. Those who are too impatient to wait till 19:30 GMT can fetch it at http://www.openssl.org/~appro/openssl.tar.gz (when the web server comes

Re: [STATUS] OpenSSL (Sun 19-Dec-1999)

1999-12-20 Thread Andy Polyakov
Hi, everybody! Looks like I've got a lot of catch-up to do, huh? Unfortunately as a part of the catch-up I accidentaly managed to screw up openssl-SNAP-19991219:-( Those who want/have to try it out, apply the attached patch. I apologize for the caused inconvenience. Or should I remove it from the

RE: apps\ca Y2K bug

1999-12-20 Thread Nelson A Silva F
I have got the point. If YY is less than 50, the year shall be interpreted as 20YY. Thank you for the accurate guidance. Best regards. Nelson. -Original Message- From: Dr Stephen Henson [SMTP:[EMAIL PROTECTED]] Sent: Friday, 17 December, 1999 20:43 To: [EMAIL

RE: Other quetion..

1999-12-20 Thread Shmuel Siegel
I have tried porting a recent version ( say two weeks old) to a Macintosh. I am having problems with certificate verification in ssltest. SSL2 verification of both server and client certificates works. However for SSL3 the client complains about the server certificate chain. What are the

Some quetions About OPEN SSL

1999-12-20 Thread Raul Gutierrez Rodriguez
HI: I have some quetions about use OPENSSL 1- When i use OPENSSL with the comand : openssl req -new -newkey rsa:512 -keyout file.pem -out file.pem I want to put all the data that i have to enter to the comand in a file called data.. (i.e PEM password, and all the data of subject filed)

RE: openssl + Microsoft's SSPI = Legal U.S.A. commercial use?

1999-12-20 Thread Salz, Rich
Also there is a crypto api that I believe gets you the RSA public-key functions. The CryptoAPI does not export enough functionality to enable you to implement SSL. This *might* have changed in Win2K. I haven't been following the discussions that closely; here are two messages on the subject:

Re: Other quetion..

1999-12-20 Thread Dr Stephen Henson
Shmuel Siegel wrote: I have tried porting a recent version ( say two weeks old) to a Macintosh. I am having problems with certificate verification in ssltest. SSL2 verification of both server and client certificates works. However for SSL3 the client complains about the server certificate

Re: OpenSSL for MacOS

1999-12-20 Thread Roy Wood
Roy! I've changed your MacSockets a little bit so that synopsis resembles more Unix. Okay! I'll take a look and try to stay in-synch. -Roy __ OpenSSL Project http://www.openssl.org Development

Re: Other quetion..

1999-12-20 Thread Bodo Moeller
Shmuel Siegel wrote: I have tried porting a recent version ( say two weeks old) to a Macintosh. I am having problems with certificate verification in ssltest. SSL2 verification of both server and client certificates works. However for SSL3 the client complains about the server certificate

Re: make failure

1999-12-20 Thread Ulf Möller
On Fri, Dec 17, 1999 at 07:04:45PM -0500, Paul Jarc wrote: Looks like maybe there should be "-L../rsaref" in the command line. Please add that to the ./config command line. OpenSSL cannot know where you keep the rsaref library.

Re: Other quetion..

1999-12-20 Thread Andy Polyakov
I have tried porting a recent version ( say two weeks old) to a Macintosh. I am having problems with certificate verification in ssltest. ... want to share the code:-) SSL2 verification of both server and client certificates works. However for SSL3 the client complains about the server

Re: How to timeout a SSL_connect?

1999-12-20 Thread Per Nilsson
I beleive wsock32.lib is the 1.1 lib, and ws2_32.lib is for winsock 2. Anyway, wsadata-szDescription contains "WinSock 2.0" after I initialize. If you take a look using the dependency walker you will find that wsock32.dll uses ws2_32.dll so it is probably just a 1.1 backward compatibility layer.

openssl + Microsoft's SSPI = Legal U.S.A. commercial use?

1999-12-20 Thread Brian Poe
Beginning sp4 on NT 4, there is enough there, as there is a product already using it that costs 1k; http://www.dart.com ... see the "secure tool". It works, but it is only offered as an activex component. -Brian Also there is a crypto api that I believe gets you the RSA public-key functions.

Re: How to timeout a SSL_connect?

1999-12-20 Thread Jeffrey Altman
I beleive wsock32.lib is the 1.1 lib, and ws2_32.lib is for winsock 2. Anyway, wsadata-szDescription contains "WinSock 2.0" after I initialize. If you take a look using the dependency walker you will find that wsock32.dll uses ws2_32.dll so it is probably just a 1.1 backward compatibility

Re: openssl + Microsoft's SSPI = Legal U.S.A. commercial use?

1999-12-20 Thread Jeffrey Altman
Beginning sp4 on NT 4, there is enough there, as there is a product already using it that costs 1k; http://www.dart.com ... see the "secure tool". It works, but it is only offered as an activex component. Its not clear what this tool is though. It appears to be simply the ability to

Re: How to timeout a SSL_connect?

1999-12-20 Thread Jeffrey Altman
I did some research. SO_RCVTIMEO and SO_SNDTIMEO were not part of the winsock 1.1 specification and were added to the winsock 2.0 spec. However, they are available in the Winsock 1.1 that was implemented for NT 3.51. Winsock 2.0 also added support for IP_OPTIONS, IP_TOS, IP_TTL, TCP_MAXSEG, and

Re: Maintaining an SSL server cache

1999-12-20 Thread James Darwin
At 09:56 PM 12/18/99 +0100, you wrote: James Darwin [EMAIL PROTECTED]: I'm having trouble makeing the server side cache hang on to SSL sessions when all connections from the client are lost. If the client maintains one open connection, and re-uses its ssl session, the cache on the server

Re[2]: openssl + Microsoft's SSPI = Legal U.S.A. commercial use?

1999-12-20 Thread Brian Poe
I know that enough is there to avoid the legal issues in implementing it yourself. Indeed you need no RSA license to use the Dartcom product. -Brian Beginning sp4 on NT 4, there is enough there, as there is a product already using it that costs 1k; http://www.dart.com ... see the "secure