d2i_X509() failed.

2004-07-12 Thread sakthi.subramaniam
Hi., I am using d2i_x509() function for converting the certificates from DER to PEM. It is failing at file :tasn_dec.c function:asn1_template_ex_d2i() line number 353. ( version 0.9.7c and 0.9.7b also) The DER format buffer contains valid certificates of 2048 bytes. At the end it has the sequenc

#MFUUJ#openssl-users@openssl.org@alfredo@letti.com.br

2004-07-12 Thread alfredo
Title: E-mail Protegido Esta conta está protegida. Mais informações: http://www.letti.com.br

Re: Fork() after a good SSL_connect and SSL_accept - does it work?

2004-07-12 Thread Paul L. Allen
I've got a client/server pair in which the server forks for each connection. It calls fork() after the accept() returns and then does all the ssl gymnastics in the child process. Other than probably being a bit more costly than using a thread, it works fine. Paul Allen mclellan, dave wrote: I hav

RSA makefile in the crypto/rsa folder

2004-07-12 Thread Joe smith
Hi, This is a question regarding the makefile in the crypto/rsa folder in openssl. I am trying to run the make file to give me a library that I can use to just run the RSA algorithm in openssl. But it seems the required .c file dependencies for the .o files are missing i.e. only the .h files are me

Re: server fingerprint and SSL certs

2004-07-12 Thread Grant
--- Charles Cranston <[EMAIL PROTECTED]> wrote: > Usually not. Do the two have the same DNS name? > Can the "new" server correctly decrypt the private > key (if it is pass-phrase encrypted)? > > I guess to go much further we should know what kind > of server software is in use. If it is apache,

FW: Problems using stunnel for LDAP-S to OID

2004-07-12 Thread david-e.hansen
Hello, I am trying to use a pre-built Win32 binary of the "stunnel" application (from www.stunnel.org), in order to get my 3rd-party Win32 application, which only speaks LDAP, to speak to an Oracle OID server running LDAP over SSL. I'm using stunnel version 4.05 along with OpenSSL / SSLeay vers

Re: problem with installation of openssl-0.9.7d

2004-07-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Jul 2004 17:03:26 +0200, "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> said: luca.dipiazza> I try to install openssl-0.9.7d because I have to install luca.dipiazza> openssh. luca.dipiazza> The problem is that in the install operation the command luca.dipiazza>

RE: TLS protocol question

2004-07-12 Thread Areg Alimian
EAP-TLS is a bit different from conventional TLS in its use of TLS Handshake and TLS Record layers. Usually when you use TLS for let's say a web server authentication session, the TLS handshake layer is used for authentication and key material derivation, and subsequently the TLS Record layer is u

Re: TLS protocol question

2004-07-12 Thread Richard Koenning
Frederic Evrard wrote: I'm using open-ssl to do EAP-TLS authentication, then I've a question about something strange for me. When you want to use TLS to mount an uncrypted tunnel, you need a session key, but in authentication you only need certificate checking ?? Why generate pre-master-key, master

Fork() after a good SSL_connect and SSL_accept - does it work?

2004-07-12 Thread mclellan, dave
Title: Fork() after a good SSL_connect and SSL_accept - does it work? I have a closed ('closed' in the sense that produce the client and the server applications) client/server application which optionally uses SSL to secure the session.   It's a mature propretiary client/server protocol which

problem with installation of openssl-0.9.7d

2004-07-12 Thread [EMAIL PROTECTED]
I try to install openssl-0.9.7d because I have to install openssh. The problem is that in the install operation the command "./config" works good, but after the command "make" there is this error string: "Makefile.ssl is older than Makefile.org reconfigure the source tree,[...] please. *** Error c

TLS protocol question

2004-07-12 Thread Frederic Evrard
Hello, I'm using open-ssl to do EAP-TLS authentication, then I've a question about something strange for me. When you want to use TLS to mount an uncrypted tunnel, you need a session key, but in authentication you only need certificate checking ?? Why generate pre-master-key, master-key, etc... if

problem with installation of openssl-0.9.7d

2004-07-12 Thread [EMAIL PROTECTED]
I try to install openssl-0.9.7d because I have to install openssh. The problem is that in the install operation the command "./config" works good, but after the command "make" there is this error string: "Makefile.ssl is older than Makefile.org reconfigure the source tree,[...] please. *** Error c

Re: Fundraising for OpenSSL development

2004-07-12 Thread Richard Levitte - VMS Whacker
[ This is a reminder, prompted by the fact that two individuals dug into their wallets and made a small contribution each. I've also heard from a few people who are talking with their management, so far without too much else happening. Through this, I want to make it clear that small contr

RE: Problems installing OpenSSL on Linux

2004-07-12 Thread John . Airey
> -Original Message- > From: J Harper [mailto:[EMAIL PROTECTED] > Sent: Thursday, 10 June 2004 20:39 > To: [EMAIL PROTECTED] > Subject: Re: Problems installing OpenSSL on Linux > > > This is an informative post, thank you. I'd like to add that > this is one of > the huge problems with R