RE: how to setup SSL_CTX to use private keys from smartcards.. ??

2001-11-14 Thread Tal Mozes
Aslam, I had the same problem. I solved it in the following way: I got the certificate from CryptoAPI and created a X509 struct from it. For the privatekey, I created a RSA struct and filled it with as much data as I could from CryptoAPI. I couldn't get the private key, of course, so I got only

ÉϹØϵͨƽ̨£¬½»ÊÂÒµÅóÓÑ£¬ÖÐÐĶ¯´ó½±

2001-11-14 Thread UP30
Title: ÉϹØϵͨ£¬½±ÉÌÎñͨ£¡ ÉϹØϵͨ£¬½±ÉÌÎñͨ

ÉϹØϵͨƽ̨£¬½»ÊÂÒµÅóÓÑ£¬ÖÐÐĶ¯´ó½±

2001-11-14 Thread UP30
Title: ÉϹØϵͨ£¬½±ÉÌÎñͨ£¡ ÉϹØϵͨ£¬½±ÉÌÎñͨ

[no subject]

2001-11-14 Thread Mads
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

RE: build in HP using aCC compiler

2001-11-14 Thread Wang, Kate
Title: RE: build in HP using aCC compiler Mark, I tried both 3.25 and 3.31, but both give me different error messages. I am compiling openssl-0.9.6a. I printed the error message from 3.25 below, hope you can give me a hand to solve this problem. I created a soft link cc to aCC. I have

Re: Need clarification on SSL_CTX_sess*() routines

2001-11-14 Thread Louis LeBlanc
, sch); log_error(errbuf); } I've configured the process to call this routine on reciept of a SIGUSR2 signal. Here is what it looks like in the log: 2004-19:20:10 20262: thread 0: waiting for QM 2004-19:20:10 20262: thread 1: dumping state 2004-19:20:10 20262: thread 2

RE: build in HP using aCC compiler

2001-11-14 Thread Mark Annal
Title: RE: build in HP using aCC compiler Hi Kate, I created a soft link cc to aCC This is the problem. The OpenSSL configure script selects the cc compiler which on my box is /bin/cc which is a soft link to /opt/ansic/bin/cc, the standard HP ANSI 'C' compiler. All of my Open Source 'C'

Creating a S/MIME cert

2001-11-14 Thread Harry Hoffman
Hey All, I'm very new to the list and have been searching all day trying to find this answer. I would like to create S/MIME keys for all of my mail users so that they can encrypt/sign emails. Can anyone point me in the direction of a good howto? TIA, Harry

Re: Non standard X509 V3 extension.

2001-11-14 Thread Rod Gilchrist
Hi, The -certopt command doesn't seem to be in either 0.9.6b or in the snapshot from Nov 13. Is it available somewhere else? I'm wondering if there is a certTemplate for server as well as client. - Rod Dr S N Henson wrote: Alexey Kobozev wrote: Hi, All! I'm having a

Re: Non standard X509 V3 extension.

2001-11-14 Thread Dr S N Henson
Rod Gilchrist wrote: Hi, The -certopt command doesn't seem to be in either 0.9.6b or in the snapshot from Nov 13. Is it available somewhere else? Its in the 0.9.7 development version. Steve. -- Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ Personal Email: [EMAIL

Ooerwriting the Private key file (file.pem)

2001-11-14 Thread Manty, George
I have a question regarding the private key file. I am working on writing a java program that will extract the public and private key from a keystore file and then overwrite the cert.pem and file.pemfrom another program that is using OpenSSL. The cert.pem and file.pem are created use the

x509 howto

2001-11-14 Thread Mads
Anyone knows of a good introduction to x509 certificates? I am looking for info on the structure and encoding. I am currently studying the openssl implementation to see how to extract keys from the certificate but a guide or howto would be much appreciated. Kind regards, Mads Open

Importing self-signed certs into Outlook

2001-11-14 Thread Tony Lill
I've managed to get outlook to work with stunnel and a self signed certificate for both sending and recieving mail. The only problem is that outlook keeps whining about not being able to verify the cert because the root certificate is not trusted. I tried importing it with the Certificate

Re: Importing self-signed certs into Outlook

2001-11-14 Thread Dr S N Henson
Tony Lill wrote: I've managed to get outlook to work with stunnel and a self signed certificate for both sending and recieving mail. The only problem is that outlook keeps whining about not being able to verify the cert because the root certificate is not trusted. I tried importing it

Re: Importing self-signed certs into Outlook

2001-11-14 Thread Dr S N Henson
Dr S N Henson wrote: Tony Lill wrote: I've managed to get outlook to work with stunnel and a self signed certificate for both sending and recieving mail. The only problem is that outlook keeps whining about not being able to verify the cert because the root certificate is not

SSL_connect and SSL_accept

2001-11-14 Thread Pascal Janse van Vuuren
Hi again, My problem with SSL_connect and SSL_accept that I was having yesterday has been tracked down to this... ssl23_get_server_hello ssl23_read_bytes... and then ... int ret=0; if (out != NULL){#ifndef BIO_FDclear_socket_error();ret=readsocket(b-num,out,outl); I've made a few

Re: Importing self-signed certs into Outlook

2001-11-14 Thread Michael Sierchio
Dr S N Henson wrote: Oops, didn't read the query enough. It may well not be possible to actually use a self signed user certificate. Netscape also has problems with this in that the same certificate has to be a user and CA certificate. You may have to create a self signed root CA and sign

RE: Importing self-signed certs into Outlook

2001-11-14 Thread Ryan Hurst
Tony, Outlook has a multi-dimensional certificate store. There are user stores and machine stores. Within each store there are various compartments my, intermediate, root, publishers, etc. You may have problems if the certificate was imported into the incorrect certificate store. Try using the

RE: Importing self-signed certs into Outlook

2001-11-14 Thread Ryan Hurst
Additionally since it is a self signed certificate place it in both the My store and the Root store. Ryan -Original Message- From: Ryan Hurst [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 14, 2001 4:33 PM To: '[EMAIL PROTECTED]' Subject: RE: Importing self-signed certs into

SSL_accept and SSL_connect

2001-11-14 Thread Pascal Janse van Vuuren
Hiya, To anyone who's interested- I found the problem. It was my own stupidity, and a load of WSock calls that was messing me around (Essentially because I'm inheriting from a slightly deviant socket implementation), but I've got it up and working now, all's well, connections work the