Encrypt and decrypt a big char array

2001-10-03 Thread Jordan C N Chong
Dear all, Sorry to bother you. I wish to encrypt a big chunk of char array (like 3000bytes) using a symmetric key (for example Blowfish 16 bytes)... However I am not sure how to do that... Could you please help me out?? I really need your expertise for this issue. Thank you very much. Wish you

installing on RedHat 6.2

2001-10-03 Thread John Kolvereid
Hi, I am trying to install mod_ssl-2.8.4-1.3.20 on my RedHat 6.2 system. I have installed openssl-0.9.6b in my /usr/local/openssl. In order to install mod_ssl I must point to my Apache source directory: configure --with-apache=DIR However, I can't find it. I tried /usr/lib/apache

Re: installing on RedHat 6.2

2001-10-03 Thread Mads Toftum
On Wed, Oct 03, 2001 at 08:04:07AM -0700, John Kolvereid wrote: Hi, I am trying to install mod_ssl-2.8.4-1.3.20 on my RedHat 6.2 system. I have installed openssl-0.9.6b in my /usr/local/openssl. In order to install mod_ssl I must point to my Apache source directory: configure

Cannot compile; ld complains about illegal options under Solaris8

2001-10-03 Thread Attila Szegedi
"make" fails on my SPARC based Solaris8, the relevant part of the output is shown below. The basic problem is that ld as called by the gcc complains about illegal options and a duplicated -o option. My suspects are the --whole-archive and --no-whole-archive options to gcc, but I don't know what

RE: Tru64 4.0f BN_sqr test fail

2001-10-03 Thread Michael Wojcik
Title: RE: Tru64 4.0f BN_sqr test fail From: Marchelm Bomers [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 02, 2001 9:01 PM cc -o bntest -I../include -DDSO_DLFCN -DHAVE_DLFCN_H -std1 -tune host -O4 -readonly_strings bntest.o -L.. -lcrypto ld: Unresolved: BN_CTX_init BN_init

[no subject]

2001-10-03 Thread Jorge Andres Devoto
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[no subject]

2001-10-03 Thread Jorge Andres Devoto
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Apache 1.3/Win32 Pointer Use after Free

2001-10-03 Thread Peter Smith
I'm having trouble with the stability of OpenSSL with Apache on Win32. OpenSSL 0.9.6, mod-ssl 2.8.2, Apache 1.3.19. Looks to me like ssl_io_suck_read is following the actx pointer after the pool has been freed. This would not be a problem on UNIX where there's only a single thread. It's a

2 certs with same name

2001-10-03 Thread Lukasz Jazgar
MindTerm wrote: Hi DS, CA have a database to keep check the ceriticates which she issued. She can't create a new ceriticate with the name already existing in database. M.T. Hi, Another question. How to create 2 certificates with the same name? I need them for 2 web servers running

BIO_get_mem_ptr does not behave correct on AIX

2001-10-03 Thread dirk laurijssen
Hi, I'm decrypting a string (test12345678) found in an input-file. When I decrypt using two file-BIO's (in the following code-extract this means replacing out=BIO_new(BIO_s_mem) by out=BIO_new(BIO_s_file) and a BIO_write_filename(out,outf) ), then the outputfile contains the full decrypted

-engine option

2001-10-03 Thread Laliberte, Sylvain
Hi , I was wondering how to use the '-engine openssl' option. I'm trying it and it says : Error : bad option or value. thanks , Sylvain Laliberté Kontron Communications Inc. Concepteur logiciel - Software designer __ OpenSSL

Re: 2 certs with same name

2001-10-03 Thread Louis LeBlanc
On 10/03/01 05:35 PM, Lukasz Jazgar sat at the `puter and typed: MindTerm wrote: Hi DS, CA have a database to keep check the ceriticates which she issued. She can't create a new ceriticate with the name already existing in database. M.T. Hi, Another question. How to

RE: 2 certs with same name

2001-10-03 Thread Dilkie, Lee
why don't you just give the same cert to both of them? After all, they have the same name... -Original Message- From: Lukasz Jazgar [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 03, 2001 11:36 AM To: [EMAIL PROTECTED] Subject: 2 certs with same name MindTerm wrote:

Re: 2 certs with same name

2001-10-03 Thread Lukasz Jazgar
Louis LeBlanc wrote: On 10/03/01 05:35 PM, Lukasz Jazgar sat at the `puter and typed: Another question. How to create 2 certificates with the same name? I need them for 2 web servers running on one computer with only one DNS name. Any advice? I assume these servers are listening on

Re: 2 certs with same name

2001-10-03 Thread Michael Sierchio
Lukasz Jazgar wrote: I use iPlanet Webserver. Every instance of this server manages its own secure database of keys/certificates. Key pairs are generated internally by server and there is no possibility to import them from file. Are you sure the database isn't a DER-encoded PKCS11 or PKCS12

Re - multi-level CAs

2001-10-03 Thread Neulinger, Nathan
I went had generated a csr from ca.key, sent it to UM System, had them sign it, brough it back, put it in certificate-chain-file on a httpd server, and also used ca.key and the new cert to sign a csr for that web server. (I figured generating new certificates for the servers isn't that big a deal

Re: 2 certs with same name

2001-10-03 Thread Louis LeBlanc
On 10/03/01 09:03 PM, Lukasz Jazgar sat at the `puter and typed: Louis LeBlanc wrote: . . . I use iPlanet Webserver. Every instance of this server manages its own secure database of keys/certificates. Key pairs are generated internally by server and there is no possibility to import

Crypt::SSLeay: Code works on Linux but not Solaris.. HELP!

2001-10-03 Thread Del Simmons
Hey everyone.. I am using the following: machine 1: Linux 2.4.8 (RedHat 7.1 with new kernel) machine 2: Solaris 8 packages on both machines: openssl version 0.9.6 perl 5.6.0 Crypt::SSLeay 0.31 LWP 5.53 And I have the following code in a script:

RE: Tru64 4.0f BN_sqr test fail

2001-10-03 Thread Todd Williams
Title: RE: Tru64 4.0f BN_sqr test fail From: Michael Wojcik The BN tests use bc to verify their results. If the system's implementation of bc is buggy, some of the BN tests may produce false results. That was a problem on AIX 3, for example. IME, it's best to get and use the Gnu bc

Re: Tru64 4.0f BN_sqr test fail

2001-10-03 Thread Richard Levitte - VMS Whacker
From: Todd Williams [EMAIL PROTECTED] Todd.Williams Square test failed! Todd.Williams make: *** [test_bn] Error 1 You should find the file test/tmp.bntest, which contains what went through bc. Perhaps some investigation of it would help? -- Richard Levitte \ Spannvägen 38, II \ [EMAIL

Re: cannot telnet to port 993

2001-10-03 Thread Nathan Neulinger
openssl s_client -connect hostname:993 Will do what you need (presumably to test/debug). -- Nathan Nathan Neulinger EMail: [EMAIL PROTECTED] University of Missouri - Rolla Phone: (573) 341-4841

Re: Re - multi-level CAs

2001-10-03 Thread Nathan Neulinger
It has probably not be signed as a CA certificate, just as a user certificate. OpenSSL rejects such certificates for security reasons. Yep, figured out how to solve that. The x509 utility shouldn't crash though, see if this happens in OpenSSL 0.9.6b. If it still does can you send me these

[Crypt::SSLeay] proxy with https

2001-10-03 Thread Namsuk kim
Today, I've obtained Crypt::SSLeay module version 0.32. And, it looks like very promising to the problem that has given me so much headache. Our iPlanet proxy server is so picky that it would not recognize VeriSign's issued CA as a valid CA. So, my script which relies on LWP will fail to

Re: Re - multi-level CAs

2001-10-03 Thread Louis LeBlanc
On 10/03/01 02:17 PM, Neulinger, Nathan sat at the `puter and typed: I went had generated a csr from ca.key, sent it to UM System, had them sign it, brough it back, put it in certificate-chain-file on a httpd server, and also used ca.key and the new cert to sign a csr for that web server. (I

RE: Tru64 4.0f BN_sqr test fail

2001-10-03 Thread Todd Williams
Title: RE: Tru64 4.0f BN_sqr test fail From: Michael Wojcik The BN tests use bc to verify their results. If the system's implementation of bc is buggy, some of the BN tests may produce false results. That was a problem on AIX 3, for example. IME, it's best to get and use the Gnu bc

RE: Re - multi-level CAs

2001-10-03 Thread Neulinger, Nathan
I just think I found out what might be wrong here. When I looked over the root cert and my cert with IE, my cert is missing the Basic Constraints and Key Usage attributes. The question is - is that something wrong I did when I generated the CSR, or is it something that the cert-signer needs to