Using OpenSSL with VC++.Net 2003

2004-11-12 Thread Milan Tomic
Title: Using OpenSSL with VC++.Net 2003 I've tried to use libeay32.dll and libeay32.lib in my VC 7.1 project and got this error on startup: --- TestDLL.exe - Ordinal Not Found --- The ordinal 3236 could not be located in the dynamic link

Re: Using OpenSSL with VC++.Net 2003

2004-11-12 Thread Dr. Stephen Henson
On Fri, Nov 12, 2004, Milan Tomic wrote: I've tried to use libeay32.dll and libeay32.lib in my VC 7.1 project and got this error on startup: --- TestDLL.exe - Ordinal Not Found --- The ordinal 3236 could not be located in the dynamic

Newbie setup

2004-11-12 Thread Sunny Shum
Hello, I am new to the Apache SSL. I am setting a Fedora Core 2 box, with Apache 2.0 and openssl. Under the HTTP configuration tools, when I enable the SSL, it asked me to enter the path for 4 files: server.key, server.crt, ca.crt, ca-bundle.crt. I searched with Google and found the

Re: Hardware Acclerator for Mod exp calculations

2004-11-12 Thread Geoff Thorpe
On November 11, 2004 05:32 pm, fiero b wrote: I am having an API provided by hardwarwe crypto for public key mod exponent calculations. Please let me know what is the best way to hook up this Mod exp routine into the openssl public key operations so that DH,RSA will make use of the Hardware

Re: Newbie setup

2004-11-12 Thread Nikolas Mirin
ca.crt and ca-bundle.crt contain the CA certs i.e. certs that were used to sign and verify the other certs. The certs of Verising, Twahte etc. You need them in case the client of you server authenticates himself with some cert, so you can verify his cert with those among CA certs. You must have

Re: Newbie setup

2004-11-12 Thread Nikolas Mirin
Take a look at FAQ www.modssl.org Basically speaking, in order to provide both regular HTTP and HTTPS you must run two virtual servers in your apache that listen different ports 80 and 443 respectively, so, I do not see other way, that setup a redirect (url rewrite) from the HTTP location to

Re: Can you add to the DN after the certificate request is made?

2004-11-12 Thread ray v
Ok I can get x509 to accept the extension now, something like this extensions = extend [extend] #basicConstraints = critical,CA:true 1.3.6.1.4.1..1002 = DER:06:09:2B:06:01:04:01:D6:1F:87:6A openssl x509 -in test.crt -text -noout X509v3 extensions: 1.3.6.1.4.1..1002:

Re: Can you add to the DN after the certificate request is made?

2004-11-12 Thread Dr. Stephen Henson
On Fri, Nov 12, 2004, ray v wrote: Ok I can get x509 to accept the extension now, something like this extensions = extend [extend] #basicConstraints = critical,CA:true 1.3.6.1.4.1..1002 = DER:06:09:2B:06:01:04:01:D6:1F:87:6A openssl x509 -in test.crt -text -noout X509v3

Microsoft PFX format support

2004-11-12 Thread Bibbs, Christopher
I've started to look at this in the archives and it appears the Microsoft PFX format can't be easily manipulated with the existing OpenSSL library functions. As it stands, my attempts to access the data fails at a call to PKCS12_verify_mac() where the same call works for other P12 files. Is

No feedback with EVP_aes_256_xxx() functions

2004-11-12 Thread threadhead
dear list, i'm trying to develop a stable aes 256 bit cipher code with the EVP routines. everything works fine, but i dont seem to get feedback when using EVP_aes_256_cbc/cfb/ofb() modes, although i use an IV of 32 bytes. the order of my function callings is as follows: EVP_CIPHER_CTX_init();

Adding custom extensions (x509_extension) to your certificate

2004-11-12 Thread ray v
Hi all! I'm writting this up to help those that my wish to insert thier own values into the extension section of a certificate for use on internal applications. I do not know yet what the outcome will be when using these extension with main stream compliant applications. In the begining I didn't

3DES output

2004-11-12 Thread Ken Goldman
The documentation for 3DES (specifically DES_ede3_cbc_encrypt) doesn't talk about unusual data lengths. I found that, with some lengths (4 is a simple example) the function writes more data out than the length specifies. 1218 also gave me problems. Is there any documentation on what safe

Re: Newbie setup

2004-11-12 Thread Sunny Shum
Thanks for the reply. I check the /usr/share/ but I can't find the ca.crt or ca-bundle.crt. I did find a ca.1ssl.gz file. If I can't find it, can you please tell me how to create my own CA? Thanks! On Fri, 12 Nov 2004 22:22:30 +0300, Nikolas Mirin [EMAIL PROTECTED] wrote: ca.crt and

Re: Solaris make install problems with 0.9.7.e

2004-11-12 Thread Greg . Dunkel
I also had a problem with installing fips/des; the Makefile in des had a space after the \ __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL

Doubt regarding cert-chain validation

2004-11-12 Thread Chandra Sekhar Suram
Hi all, I hava a doubt regarding X509_verify_cert. What I understand from the documentation of verify is that we need to pass all the trusted certs and all the un-trusted certs. X509_verify_cert will construct the cert chain upto the ROOT CA and then validates the chain and finally verify the