Re: no shared cipher?

1999-06-29 Thread Carl-Henrik Tano
Hi I got this problem when I use Netscape against one server that I have implemented my self. My problem was that my version of Netscape only supported weak encryption. (outside USA) There is a program, Fortify for Netscape which can solve that problem. I tried and it worked fine.

OpenSSL+Mail

1999-06-29 Thread Mr. Nopadon Sae-Han
Dear All, How can I use mail with openssl like pgp (pine+pgp) Thank You, -Nop __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]

Re: rsa_oaep_test

1999-06-29 Thread Holger Reif
Hemant Jain schrieb: Holger, Here is the stack trace, if that helps: error:0407106B::lib(4) : func(113) : reason(107) error:04065072::lib(4) : func(101) : reason(114) This means padding check failed (reason 107) in function private decrypt (func 101) because of wrong block type (reason

Re: no shared cipher?

1999-06-29 Thread Holger Reif
Not: This is a mod_ssl related question. You should use modssl users list to ask this question! Anyway most probably you have restricted the cipherlist to contain only high grade ciphers and you try to connect with an export grade browser. What doesn openssl ciphers -v tell you? What have you

Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: Now i've starring at the very special problem: when user already have personal cert from one of master CA, it seems to be "Right Thing" to use this cert for authorization instead of making another local user certificate. As I understand, the best way to use it --

[FWD] Question for openssl-0.9.3a problems

1999-06-29 Thread OpenSSL
- Forwarded message from Ae Ja Jo [EMAIL PROTECTED] - From: Ae Ja Jo [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Question for openssl-0.9.3a problems Date: Tue, 29 Jun 1999 16:52:00 +0900 Importance: Normal Hi ! Let me introduce to you. I am a programmer

Re: OpenSSL+Mail

1999-06-29 Thread Holger Reif
This is not possible. Albeit there is some rudimentary support for S/MIME (used by eg. Messenger and Outlook) there is no integration into an email package known. Mr. Nopadon Sae-Han schrieb: Dear All, How can I use mail with openssl like pgp (pine+pgp) Thank You, -Nop

Re: Signing external certs with local CA

1999-06-29 Thread Pete Chown
Dmitry Morozovsky wrote: Now i've starring at the very special problem: when user already have personal cert from one of master CA, it seems to be "Right Thing" to use this cert for authorization instead of making another local user certificate. As I understand, the best way to use it --

Re: error when compile openssl

1999-06-29 Thread Bodo Moeller
On Tue, Jun 29, 1999 at 10:00:57AM +0800, Sun JunXu wrote: [...] there was an error, I captured it in .jpg in attached file [...] ^ What's that nonsense for? About all errors show in pure ASCII, which makes them readable,

Re: Problems when reusing sessions

1999-06-29 Thread Bodo Moeller
On Wed, Jul 28, 1999 at 06:32:56PM +0100, David J. Palaitis wrote: i had a problem with session ID reuse and openSSL0.9.2b i set the verify flags to SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE | SSL_VERIFY_FAIL_IF_NO_PEER_CERT but sessions weren't being reused,... [...]

CA list for client

1999-06-29 Thread Oliver Floericke
Hi there, is there somebody who can briefly describe how to configure a OpenSSL server program in that way that it sends a list of acceptible ca's to the client? I'm using client authentication and would like to decide on the client side that the client has the proper certificates for the

Re: Interesting Handshake behaviour

1999-06-29 Thread Sarah Bateman
Bodo Moeller wrote: So the callbacks that you mentioned are callbacks on an other level of the program, not callbacks set inside the OpenSSL library, right? Yep this is correct. I thought at first that you were using callbacks inside the BIO sub-library. A little more info... [snip]

Re: Signing external certs with local CA

1999-06-29 Thread Dmitry Morozovsky
On Tue, 29 Jun 1999, Holger Reif wrote: [skip] BTW why do you think it's wrong to issue completely new certs for your users that already have other certs? Don't you have more than one oficial id document like passport, drivers licence etc. Well, at least i prefer to minimize cases when

Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: On Tue, 29 Jun 1999, Holger Reif wrote: [skip] BTW why do you think it's wrong to issue completely new certs for your users that already have other certs? Don't you have more than one oficial id document like passport, drivers licence etc. Well, at

Re: rsa_oaep_test

1999-06-29 Thread Dr Stephen Henson
Holger Reif wrote: Hemant Jain schrieb: Holger, Here is the stack trace, if that helps: error:0407106B::lib(4) : func(113) : reason(107) error:04065072::lib(4) : func(101) : reason(114) This means padding check failed (reason 107) in function private decrypt (func 101) because of

Compiling OpenSSL on Win32 (again)

1999-06-29 Thread Ed Eddington
Users, I am having some trouble compiling on Win32's. I think the root of my problem is not having the right utilities to do the job (and/or knowledge!). I got the following tips about installing on Win32 from a previous note to the list... (scan down if this is familiar)

Re: CA list for client

1999-06-29 Thread Bodo Moeller
On Tue, Jun 29, 1999 at 12:51:40PM +0200, Oliver Floericke wrote: is there somebody who can briefly describe how to configure a OpenSSL server program in that way that it sends a list of acceptible ca's to the client? I'm using client authentication and would like to decide on the client