Re: Problem with netscape and certificates

2000-06-01 Thread Dr Stephen Henson
[EMAIL PROTECTED] wrote: I am a beginning user of openssl and need some help on the certificate functions in order to fix a netscrape problem. I am using the openssl 0.9.5a as a client to perform a simple "GET" to a Netscape Enterprise Server. The problem is that now we have modified the

RE: Problem with netscape and certificates

2000-06-01 Thread Wade L. Scholine
You haven't trusted the server cert. Use the -CAfile option on s_client. The argument for the -CAfile option is the path to a file containing the PEM-format *issuer* cert for the *signer* of the server cert. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent:

Re: Adding new_oids in config file

2000-06-01 Thread Richard Levitte - VMS Whacker
From: Karim-Eric [EMAIL PROTECTED] kfl How can i add fields in my config file so when i create a CSR kfl i'm asked for it. Right now, it ask for kfl the country name, state, and all the others default fields but even if i kfl kfl create an oid file with let say: kfl kfl 1.2.MyThing

Re: d2i_Netscape_RSA doesn't work for IIS now!

2000-06-01 Thread SCH
I have looked into the snapshot, as my problem is in d2i_Netscape_RSA_2, the pkey=d2i_NETSCAPE_PKEY is NULL. The fix could not be my answer. I have tried RC4-40, and it doesn't work. What I get from RC4 decrption is some dummy bytes. There could not be any ASN1 coding among these bytes. The

Re: SSL handshaking on remote machine

2000-06-01 Thread Winged Wolf
Okay. You're going to end up getting yourself into something related to hot water when you do something like this. I'm assuming that you actually have a clue about what you're doing, so I'm going to skip the "this is why the handshake was designed the way it was" speech. The entire point of

SSL handshaking on remote machine

2000-06-01 Thread Jacob Cohen
I'm trying to get SSL handshaking to work on a remote, accelerated machine to take some load off of the web servers when they have a lot of incoming connections. Since the accelerator card in the remote machine supports OpenSSL, I figured I would use the OpenSSL routines on that machine to do

How to disable the wraning message box from browser?

2000-06-01 Thread Wing
Hello All,I have setup up a apache OpenSSLHowever When I submit a form with https ...The browser (IE, Netscaoe..) show the warming message box ask to acceptSSL anyway...My question is How to disable the warming box (I donot want the web-users doanything even they donothave a valid

how can i make s_client.cpp running

2000-06-01 Thread simon
i use winNT4.0(sp4),openssl-0.9.5a compile is OK. but cant' run in dos mode... it shows memory can't be written. what's that mean,how do i supports to do? __ OpenSSL Project

Java DSA Patch? [Was: openssl client - java jsse server problem]

2000-06-01 Thread mitch
Hi all, Last week, Steve Henson wrote This may well be a problem with JSSE. JSSE used an invalid signature format for DSA. I had someone check this out with a patch that makes OpenSSL produce a similar invalid format and it then worked. Would someone please post that patch? Yes, it might

Re: libcrypto/BIO: creating PEM in memory

2000-06-01 Thread Markus Wagner
Works, thanks! Markus "Barnes, Michael L." wrote: I've had success with BIO_get_mem_data(). I've never played with BIO_get_mem_ptr(). Mike -Original Message- From: Markus Wagner [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 01, 2000 8:31 AM To: [EMAIL PROTECTED]