How to use CA.sh to generate and sign certificate for weblogic CSR

2001-10-31 Thread J C
Hi, I tryied to use CA.sh for several times to figure out how to get a certificate using an existent cert. requirement(CSR) generated by Weblogic domestic version(128-bit). But the attampt failed. At the beginning, I did like this: - # CA.sh -newca - # CA.sh -sign Then,I realized a

Re: [Crypt::SSLeay] on solaris: broken pipe

2001-10-31 Thread Joshua Chamas
> > > After some test, everything goes fine. But, I have tried to connect > > > to a running machine which has NO Web server installed. > > > Then my test program, exit and print: Broken Pipe. > > > > > > My test program looks like: > > > my $ua = new LWP::UserAgent; > > > my $req = new HTTP::Requ

RE: openssl for windows?

2001-10-31 Thread Imran Badr
http://www.iconsinc.com/~agray/ossldev/     -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of park hkSent: Wednesday, October 31, 2001 5:51 PMTo: [EMAIL PROTECTED]Subject: openssl for windows? I'm poor at English. I'd like to know there i

openssl for windows?

2001-10-31 Thread park hk
I'm poor at English. I'd like to know there is the openssl for windows.   Thank you!!

Re: [Crypt::SSLeay] on solaris: broken pipe

2001-10-31 Thread Joshua Chamas
Joshua Chamas wrote: > > "franck P." wrote: > > > > Hi there, > > > > running perl 5.004_04 on Solaris 2.6, SPARC, OpenSSL 0.9.6, > > I have installed Crypt-SSLeay-0.29. > > No compilation problem (excepted for an other module: > > libwww-perl-5.5395). > > > > After some test, everything goes fin

Re: X509 Certificate Size

2001-10-31 Thread Rich Salz
> There's no theoritical limit. You can have practical limits though (for > example, if the user decides to store the certificate in a 4k or 8k > smartcard). Somewhere Peter Gutman has a cert that includes a GIF of his cat. I think it's one of the DN components. /r$ -- Zolera Systems,

Re: porting openssl to linux kernel

2001-10-31 Thread Rich Salz
So far the complication has not proven to be worth it to anyone to implement. Go for it. /r$ -- Zolera Systems, Securing web services (XML, SOAP, Signatures, Encryption) http://www.zolera.com __ OpenSSL Project

Re: X509 Certificate Size

2001-10-31 Thread Erwann ABALEA
On Wed, 31 Oct 2001, Muni Tripathi wrote: > Hi, > Is there any limit on X509 certificate size (like 2K or something) imposed > by standard. Or certificates can be any size. There's no theoritical limit. You can have practical limits though (for example, if the user decides to store the certifica

SSL Handshake

2001-10-31 Thread java developer
I am having problems with an SSL handshake between per5 on solaris8 and weblogic5.1 on solaris 7. i ran ssldump and this is what i got... > 1 1 0.0500 (0.0500) C>S Handshake > ClientHello >Version 3.0 >cipher suites >SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA >SSL

Re: Problem with installing Crypt::SSLeay

2001-10-31 Thread Keary Suska
My bad, I was misreading the output. I think the other posters have it covered... Keary Suska Esoteritech, Inc. "Leveraging Open Source for a better Internet" > From: "Mark Strong" <[EMAIL PROTECTED]> > Reply-To: [EMAIL PROTECTED] > Date: Thu, 1 Nov 2001 08:44:19 +1100 > To: <[EMAIL PROTECTED]>

WinCE->OpenSSL problem

2001-10-31 Thread Matthew Fleming
Netmeisters, I would appreciate your help with the following, although it is not strictly (or not only) and OpenSSL problem. I am trying to connect a Pocket PC to a Linux server. The Pocket PC uses Schannel (which on the PPC apparently includes SSLv2 and SSLv3 but not TLS) and the Linux server

RE: Problem with installing Crypt::SSLeay

2001-10-31 Thread Mark Strong
Looks like your loader can't find "libgcc_s.so.1" which is used by "SSLeay.so", make a sym link to a lib path that it will look in (like "/usr/local/lib"). And then recompile "Crypt::SSLeay" Then make test should work. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Re: Problem with installing Crypt::SSLeay

2001-10-31 Thread Joshua Chamas
"Feng, James" wrote: > > Hi Keary, > > After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64, > HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I > tried to install SSLeay, at the point of 'make test' I still got the > error I previously got but this time I

Re: porting openssl to linux kernel

2001-10-31 Thread Steven A. Bade
On Wed, Oct 31, 2001 at 12:35:25PM -0800, Imran Badr wrote: > I think Eric Rescorla responded to a similar question sometimes ago that RSA > operation would be a limiting factor. But if you take that bottleneck away > then I think putting SSL handshake and record porcessing layers in kernel > spac

RE: Problem with installing Crypt::SSLeay

2001-10-31 Thread Feng, James
Hi Keary, After I recompiled perl 5.6.1, I installed modules, URI, MIME-Base64, HTML-Parser, libnet and Digest-MD5, then I installed libwww-perl. When I tried to install SSLeay, at the point of 'make test' I still got the error I previously got but this time I did 'make install' any way. It looke

RE: porting openssl to linux kernel

2001-10-31 Thread Imran Badr
I think Eric Rescorla responded to a similar question sometimes ago that RSA operation would be a limiting factor. But if you take that bottleneck away then I think putting SSL handshake and record porcessing layers in kernel space would be a next better thing to do because we can see many new har

X509 Certificate Size

2001-10-31 Thread Muni Tripathi
Hi, Is there any limit on X509 certificate size (like 2K or something) imposed by standard. Or certificates can be any size. thanks muni __ OpenSSL Project http://www.openssl.org User Support Mai

RE: porting openssl to linux kernel

2001-10-31 Thread Imran Badr
The (un)encrypted data stream is already coming from the kernel ( socket read/write ) calls. So if everyting is in kernel space then you again save yourself from the overhead of context switch in reading/writing sockets ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PR

Re: WinCE SChannel -> OpenSSL

2001-10-31 Thread Eric Rescorla
"Matthew Fleming" <[EMAIL PROTECTED]> writes: > I would appreciate your help with the following, although it is not > strictly (or not only) and OpenSSL problem. > > I am trying to connect a Pocket PC to a Linux server. The Pocket PC uses > Schannel (which on the PPC apparently includes SSLv2 and

Re: /dev/random on Solaris 8 (Sparc)

2001-10-31 Thread Paul Allen
Christopher Crowley wrote: > > I am interested in providing a /dev/urandom for a Solaris 8 machine. EGD > doesn't provide sufficient randomness for sendmail 8.11.6, according to the > system logs. However, the SUNWski package doesn't install properly on > Solaris 8 (Sparc). What other method do

WinCE SChannel -> OpenSSL

2001-10-31 Thread Matthew Fleming
Netmeisters, I would appreciate your help with the following, although it is not strictly (or not only) and OpenSSL problem. I am trying to connect a Pocket PC to a Linux server. The Pocket PC uses Schannel (which on the PPC apparently includes SSLv2 and SSLv3 but not TLS) and the Linux server

RE: /dev/random on Solaris 8 (Sparc)

2001-10-31 Thread Billy Shaw
I use prngd on Solaris 8. http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html It compiled fine with gcc and gnu make. It works like egd so you should be able to have it use /dev/random. I currently use /var/run/egd-pool and that works fine for my needs. >From the prngd home page

Re: Problem with installing Crypt::SSLeay

2001-10-31 Thread Keary Suska
It appears that the SSLeay loadable is not being created: 'blib/arch/auto/Crypt/SSLeay/SSLeay.so' If this file isn't there, try just running 'make' and look again. You could also do a 'find' in the source tree to see if it is being created elsewhere, but it shouldn't. Perhaps the makfile isn't

Re: /dev/random on Solaris 8 (Sparc)

2001-10-31 Thread Arin Komins
On Wed, 31 Oct 2001, Christopher Crowley wrote: :Subject: /dev/random on Solaris 8 (Sparc) : :I am interested in providing a /dev/urandom for a Solaris 8 machine. EGD :doesn't provide sufficient randomness for sendmail 8.11.6, according to the :system logs. However, the SUNWski package doesn't i

Re: Problems with pop3s on Outlook Express

2001-10-31 Thread Corin Hartland-Swann
Hi there, On Wed, 31 Oct 2001, Tom Karches wrote: > Corin Hartland-Swann wrote: > > I've replaced the 'localhost' certificates with mine, and it now works > > fine on Windows 2000, and almost works with MacOS. > > > > When you hit "Send & Receive Mail" on MacOS it prompts you for a password. > >

/dev/random on Solaris 8 (Sparc)

2001-10-31 Thread Christopher Crowley
I am interested in providing a /dev/urandom for a Solaris 8 machine. EGD doesn't provide sufficient randomness for sendmail 8.11.6, according to the system logs. However, the SUNWski package doesn't install properly on Solaris 8 (Sparc). What other method do you suggest? Thank you in advance fo

Re: Errors in compiling Net_SSLeay

2001-10-31 Thread Lutz Jaenicke
On Tue, Oct 30, 2001 at 08:22:59PM -0500, DING,SCOTT (HP-PaloAlto,ex1) wrote: > I tried to install Net_SSLeay as part of process to set perl-ldap up. When I > compile the Net_SSLeay, I got the errors: > > ld: Invalid loader fixup in text space needed in output file for symbol > "$0058" in inp

Re: OpenSSL exception linking MSVCRT but not MSVCRTD

2001-10-31 Thread Christopher Crowley
I am interested in providing a /dev/urandom for a Solaris 8 machine. EGD doesn't provide sufficient randomness for sendmail 8.11.6, according to the system logs. However, the SUNWski package doesn't install properly on Solaris 8 (Sparc). What other method do you suggest? Thank you in advance fo

Problem with installing Crypt::SSLeay

2001-10-31 Thread Feng, James
Hi All, When I tried to install Crypt::SSLeay on a Solaris 8 box, I got the following error at doing "make test". PERL_DL_NONLAZY=1 /usr/local/bin/perl -Iblib/arch -Iblib/lib -I/usr/local/lib/perl5/5.6.1/sun4-solaris -I/usr/local/lib/perl5/5.6.1 -e 'use Test::Harness qw(&runtests $verbose); $ver

OpenSSL exception linking MSVCRT but not MSVCRTD

2001-10-31 Thread Kim Majikes
I'm having problems when running some OpenSSL commands from the command line. I performed the following steps as outlined in the "Install.w32" file. - used ms\do_ms to create the mak files - compiled using ntdll.mak - Tested the following openssl commands. >openssl req -x

Using OpenSSL to send S/MIME email

2001-10-31 Thread Steve Barnes
Hi, I have read bits & pieces of what I need here, and am losing the run of myself a bit. I cannot find a complete list of what to do if I want to send S/MIME email using Outlook. I purchased a Personal Certificate from BT Trustwise a while back to test Digitally Signed messaging & encryption w