Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-20 Thread Sander Temme
Ben, On Dec 19, 2007, at 9:31 AM, Ben assis wrote: On Leopard with apache 2.2.6 and OpenSSL 0.9.7, configuration files have significantly changed; so, I cannot set my own web server to work with openssl under https protocol. Are you loading the SSL module? Look for a LoadModule line in

Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-20 Thread Marek Marcola
On Thu, 2007-12-20 at 09:38 -0500, Ben assis wrote: Hi Marek I thing you,re right ; my port 8083 is closed by my ISP. When I send the following command telnet localhost 8083 I receive : bash-3.2# telnet localhost 8083 Trying ::1... telnet: connect to address ::1: Connection refused

Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-20 Thread Ben assis
Hi Marek I thing you,re right ; my port 8083 is closed by my ISP. When I send the following command telnet localhost 8083 I receive : bash-3.2# telnet localhost 8083 Trying ::1... telnet: connect to address ::1: Connection refused Trying ::1... telnet: connect to address ::1: Connection refused

How to get ECC signature size by public key?

2007-12-20 Thread Dmitry
Hello! I have x509 asn1_decode - ed ECC certificate, and trying to parse public key: EC_KEY *key = NULL; key = o2i_ECPublicKey(NULL, pk.value, pk.len); return error. :( but if I use similar fuction for RSA public key: RSA *rsa = NULL; rsa = d2i_RSAPublicKey(NULL,pk.value, pk.len); return

ECC signature validation failure

2007-12-20 Thread Dmitry Zhigulin
Hello! I have ECC certificate: /// Subject Public Key Info: Public Key Algorithm: id-ecPublicKey EC Public Key: pub: 04:e0:fd:c3:07:be:0e:db:35:9c:05:c8:d7:82:36:

Re: ECC signature validation failure

2007-12-20 Thread Dmitry Zhigulin
I found post http://www.mail-archive.com/openssl-users@openssl.org/msg48477.html So I try to do: ERR_load_EC_strings(); X509 *x = NULL; int type = 0; EVP_PKEY *key = NULL; int len = 0; EC_KEY *ec = NULL; int ret = 0; char *er; d2i_X509(x, (const unsigned char**)pCert-pbCertEncoded,

Do I need to do anything special to get certificate validation to use a CDP?

2007-12-20 Thread Bruce Keats
Hi, I have an TLS/SSL client I wrote using openssl and I was wondering if I have to do anything special to verify if a certificate was revoked in one of the CRLs taken from one of the CDPs? Is there special code or calls I need to make in the verify_callback() that is installed by

PKCS#7 streaming in smime utility

2007-12-20 Thread Harald Latzko
Hello, I've read the following in the latest CHANGES file of the openSSL 0.9.9 snapshot 20071220: *) Add option -stream to use PKCS#7 streaming in smime utility. New function i2d_PKCS7_bio_stream() and PEM_write_PKCS7_bio_stream() to output in BER and PEM format. Does this work

FIPS Mode and SSLv3

2007-12-20 Thread Jacob Barrett
Is there anyway to allow SSLv3 on some SSL_CTXs? I realize that FIPS only allows TLS, but I don't need all my services to use FIPS to satisfy my requirements, so it would be nice to allow some to run with lowered standards, like SSLv3. Any chance that is a special method to allow this? Thanks,

Re: CDP and IDP v3 extensions

2007-12-20 Thread Damir Dzeko
On Thu, Dec 20, 2007 at 02:54:58AM +0100, Dr. Stephen Henson wrote: On Thu, Dec 20, 2007, Damir Dzeko wrote: I'm using debian package of Version: 0.9.8g-3 (libssl0.9.8), and version string reported is: OpenSSL 0.9.8g 19 Oct 2007. Arch is i386. I have read the

Re: CDP and IDP v3 extensions

2007-12-20 Thread Victor Duchovni
On Thu, Dec 20, 2007 at 11:02:03PM +0100, Damir Dzeko wrote: On Thu, Dec 20, 2007 at 02:54:58AM +0100, Dr. Stephen Henson wrote: On Thu, Dec 20, 2007, Damir Dzeko wrote: I'm using debian package of Version: 0.9.8g-3 (libssl0.9.8), and version string reported is: OpenSSL 0.9.8g 19 Oct

Re: FIPS Compile on Windows

2007-12-20 Thread Ben Sandee
On Dec 20, 2007 9:47 PM, Jacob Barrett [EMAIL PROTECTED] wrote: Following the instructions in the FIPS users guide I can build the FIPS Object Module just fine. What I can't get to work is the Windows DLL build of OpenSLL with the FIPS module. I can build that static libraries with FIPS and