BIGNUM representation: MSB and LSB

2001-01-26 Thread Marco Donati
Given the BIGNUM representation: typedef struct bignum_st { BN_ULONG *d; int top; int dmax; int neg; int flags; } BIGNUM; which is the most significant BN_ULONG? Is it the first or the last one in the list addressed by d? Thanks in advance

Re: Apache on Windows

2001-01-26 Thread lucian
Hi Nick! I am a windows apache user too. I prefer this option because i am using win nt and windows seems to be more productive than linux. So... I have looked for an apache + mod_ssl for windows and i found www.opensa.org. Now they have a modern kitt for it. So.. enjoy! If you don't have

URGENT : SSL Handshake failed

2001-01-26 Thread drt rappanah
Hi !! I've installed a Netscape Certificate Server 4.2sp1 on a linux mandrake 7.2 (kernel 2.2.17-21)... I've also installed an Apache 1.3.14 server with mod_perl 1.24_01, mod_ssl 2.7.1, php 4.0.3pl1 and openssl 0.9.6... I've signed Apache certificate with the Certificate server. I

Extracting from PKCS8ShroudedKeyBag

2001-01-26 Thread Asger Henriksen
Hi, I am trying to convert a keyfile/certificate pair for a webserver from webstar (mac) format to basic textmode base64 encoded files. I need the private key in a seperate file. Running openssl asn1parse -inform DER -in privkey 0:d=0 hl=4 l= 704 cons: SEQUENCE

Re: Extracting from PKCS8ShroudedKeyBag

2001-01-26 Thread Dr S N Henson
Asger Henriksen wrote: Hi, I am trying to convert a keyfile/certificate pair for a webserver from webstar (mac) format to basic textmode base64 encoded files. I need the private key in a seperate file. Running openssl asn1parse -inform DER -in privkey 0:d=0 hl=4 l= 704 cons:

Re: Extracting from PKCS8ShroudedKeyBag

2001-01-26 Thread Asger Henriksen
Dr S N Henson wrote: Asger Henriksen wrote: Hi, I am trying to convert a keyfile/certificate pair for a webserver from webstar (mac) format to basic textmode base64 encoded files. I need the private key in a seperate file. Running openssl asn1parse -inform DER -in privkey

Re: URGENT : SSL Handshake failed

2001-01-26 Thread drt rappanah
Thanks for your help... The client has its certificate installed in the browser. He asked the Netscape Certificate Server for a certificate and then installed it in the Browser. Sorry, I miss someting about the authentication chain. The Apcahe server got a certifcate from the Netscape

Re: Is this a certificate problem?

2001-01-26 Thread Greg Stark
Terry, It is not a problem with your certificates, it is a problem with the server certificates. It would be hard to guess what the problem might be without more information. It could be as simple as your failing to provide OpenSSL with a set of trusted root certificates. If you want to

BN_mod_inverse problem

2001-01-26 Thread Joseph Ashwood
I've found a problem with BN_mod_inverse, in particular when it is called many times in quick succession when verifying DSA signatures. Originally this showed up when use DSA_do_verify, so I wrote my own, and I've isolated the problem as being in BN_mod_inverse. It seems to only occur on about

Re: Rainbow Cryptoswift cards - information

2001-01-26 Thread Ben Laurie
[EMAIL PROTECTED] wrote: Further to my previous message, I have not only received my Cryptoswift card, but I actually have it working. I'm seeing a speed improvement of around 20x on a Dual Pentium 166. Hmmm ... so we can expect about 3x on a single P3/1GHz. How much do these things cost?

Problems importing dsa keys into IE 5.5

2001-01-26 Thread Henry Tumblin
I was following the instructions in the openSSL faq about how to generate a DSA based CA and keys. It all worked fine, then I generated the pkcs#12 file to import into a browser. When I tried to use it with Netscape, it worked fine. When I attempted to use it with IE, I get the following

Re: Openssl on Win32 (help!)

2001-01-26 Thread stuart hodgkinson
Ok I'm new to this and my first mail was a bit vague. I downloaded the latest source and compiled it on Win NT sp6 but I'm low on documentation and could do with some of that. I found the example in the demo directory and noticed it was for unix/linux. I know theres some differences between

Re: Openssl on Win32 (help!)

2001-01-26 Thread Kenneth R. Robinette
From: stuart hodgkinson [EMAIL PROTECTED] Subject:Re: Openssl on Win32 (help!) To: [EMAIL PROTECTED] Date sent: Fri, 26 Jan 2001 23:11:35 + (GMT+00:00) Send reply to: [EMAIL PROTECTED] Stuart I think you are trying

RE: Rainbow Cryptoswift cards - information

2001-01-26 Thread David Schwartz
[EMAIL PROTECTED] wrote: Further to my previous message, I have not only received my Cryptoswift card, but I actually have it working. I'm seeing a speed improvement of around 20x on a Dual Pentium 166. Hmmm ... so we can expect about 3x on a single P3/1GHz. How much do these things

Re: Openssl on Win32 (help!)

2001-01-26 Thread stuart hodgkinson
ok. this is from a c/c++ standpoint for actual intergration into an application. So i'm looking for source code examples and linking information etc etc. StOo - Original Message - From: "Kenneth R. Robinette" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Fri, 26 Jan 2001 23:32:47 +

Re: Openssl on Win32 (help!)

2001-01-26 Thread Kenneth R. Robinette
From: stuart hodgkinson [EMAIL PROTECTED] Subject:Re: Openssl on Win32 (help!) To: [EMAIL PROTECTED] Date sent: Sat, 27 Jan 2001 00:06:58 + (GMT+00:00) Send reply to: [EMAIL PROTECTED] Stuart Well, if you run and

Re: Openssl on Win32 (help!)

2001-01-26 Thread stuart hodgkinson
doh! i completley missed that directory cheers. quick question though when i try to link to the sslevy32.lib i get:- CVTRES : fatal error CVT1107: D:\openssl\openssl-0.9.6\out32dll\ssleay32.lib is corrupt D:\openssl\openssl-0.9.6\out32dll\ssleay32.lib : fatal error LNK1123: failure during

Re: Problems importing dsa keys into IE 5.5

2001-01-26 Thread Dr S N Henson
Henry Tumblin wrote: I was following the instructions in the openSSL faq about how to generate a DSA based CA and keys. It all worked fine, then I generated the pkcs#12 file to import into a browser. When I tried to use it with Netscape, it worked fine. When I attempted to use it with IE, I

Re: Multiple CA Certificates into Netscape with one click?

2001-01-26 Thread Dr S N Henson
John Douglass wrote: After reading the document: http://developer.netscape.com/docs/manuals/cms/41/dep_gide/dwnld.htm I'm still a bit unclear as to what I need to do to make the following happen: In one click, I'd like three CA certificates to be downloaded into the netscape

Re: Openssl on Win32 (help!)

2001-01-26 Thread stuart hodgkinson
i built the dlls as described in the install.w32 /ms/do_ms the test executables work ok and the \ms\test works as well. i dont intentonal run that batch file so no as far as i am aware. as for the compiler bit i assume so but as i say i did this straight from the install.w32 and the lib was

Re: Openssl on Win32 (help!)

2001-01-26 Thread Kenneth R. Robinette
From: stuart hodgkinson [EMAIL PROTECTED] Subject:Re: Openssl on Win32 (help!) To: [EMAIL PROTECTED] Date sent: Sat, 27 Jan 2001 01:00:18 + (GMT+00:00) Send reply to: [EMAIL PROTECTED] If the test programs work (in

DSA Keys and Sigs

2001-01-26 Thread jharris
Im trying to write a small utiltiy to allow me to sign files, and check the sigs at a later time. Really it should be incorperated in a larger application. OK, Im having alot of trouble using DSA sigs and keys. The man pages seem to be very incomplete. After many trips through the source I