RE: Get a private key from a pkcs12 file

2000-11-10 Thread David VERGIN
Thanks for all guys. It works fine. David Vergin - EPITA promo 2002 __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Re: fwd: Joke

2000-11-10 Thread hirntod
Hi, I use pine . I do not have problems with this stuff ;-) hirntod On Mon, 6 Nov 2000, Olivier Dumas wrote: Beware !!! This file is infected with the VBS.LoveLetter virus !!! Regards, Olivier __ OpenSSL Project

Usage/License Question

2000-11-10 Thread Brad Mock
My company is using OpenSSL in one of their applications. I cannot find the license(s) associated with OpenSSL at openssl.org. Can you point me in the right direction or email them to me. Thanks Brad Mock, Contracts Negotiator ADP - Dealer Services Division 2525 SW First Ave, Suite 450

Re: Correct nonblocking use

2000-11-10 Thread Eric Rescorla
James Gaskell [EMAIL PROTECTED] writes: EKR |I believe s_client/s_server handle this case correctly. There's |also some somewhat more minimal sample code on my web site at |http://www.rtfm.com/sslbook/examples |The relevant file is 'sclient.c'. I'd be interested to see that example too,

No Subject

2000-11-10 Thread CORNEL PETRESCU

fixpaths (was librsaref.a)

2000-11-10 Thread HOEFFNER
Hi Thanks to Paul Allen for straightening me out about the rsa stuff in openssl. I went back and redid the installation without the rsaref argument and it went in fine. Proceeding to ssh, I ran into a few problems, which I eventually manged to resolve, but I'm at a loss where it's bombing now.

Expired Certificate in CRL

2000-11-10 Thread Tridib Saha
Hi everybody, Could you please help me? My problem is following: 1. I am using OpesSSL to generate certificate and CRL. All revoked certificates will appear in CRL. 2. After the validity period of the revoked certificates, I don't want my CRL to get crowded with expired(and revoked)

Re: HTTP/HTTPS proxy

2000-11-10 Thread Peter Sylvester
Have you found any other solution to this? I would appreciate your help. Here an idea: - You create an https proxy (it may also be an http proxy) running on localhost. - The proxy is actually a CA. when it receives a connect request, it creates on the fly a server certificate signed

Can't start Apache

2000-11-10 Thread Chirawan Rojruchiwit
Hi all, I applied mod_ssl ver. 2.7.1 on Apache 1.3.14 with Openssl and it caused me to unable to start Apache. It just showed: == ./apachectl start: httpd could not be started == Also, in the error_logs file shows follow: == [Thu Nov 9 01:41:32 2000] [notice] caught

reading netscape exported certificates

2000-11-10 Thread Alexander Knack
hi, i have some file r2d2.p12, where i've exported a personal certificate from netscape. q1: how can i read this file with openssl q2: there are javascript methods for importing certificates into netscape navigator. i've some sample files here. does anybody know how to use

generating key

2000-11-10 Thread Eugen Kozynin
Hi! I've setup openssl with apache under RedHat Linux 6.2 Apache runs fine with test certificate. Now I am trying to generate private key for real certificate. The command I type is: ./openssl genrsa -rand /dev/urandom -out www.hardwarecorp.com.au 1024 After I hit 'Enter' it just freezes and

CRL's signed with SHA-1

2000-11-10 Thread Kristian Solberg
I’m trying to import a CRL generated by a commercial CA into Apache (build 1.3.12 Open SSL 0.9.4) but have run into a problem. When I try access the site with a certificate that’s in my CRL I am allowed access. If I create my own certificates and CRL using Microsoft Certificate Server,

Re: ostrich head in the sand... Please stop sending the virus!

2000-11-10 Thread amanda
Well, no. The list servers job should be to provide subscribers with information. I'd say that it just as irresponsible of Majordomo to redistribute viruses as it is by any other mail agent. You shouldn't blame Microsoft for selling insane mail agents if your own software is just as silly. I

rsa to pkcs8 question

2000-11-10 Thread Aaron Jackson
Background I administer a product that requires private keys to be in a specific format, which is not the format given by genrsa. After pulling teeth with the "customer support" people I found out that there is a tool included with the product that generates the required private keys. Also

Re: your mail

2000-11-10 Thread terr
IMHO you should tell your 3rd party to use SSH and you need to do a little "educating" in your organisation. On Wed, Nov 08, 2000 at 02:56:05PM +, Ian Diddams wrote: I've been tasked into investigating a link a 3rd party may be making to our servers shortly over SSL. I've downloaded

Simple Working Client/Server?

2000-11-10 Thread Matt Wright
As a complete novice to SSL, I was hoping someone could send me a minimal working client/server example...just something that gets the SSL handshake to work, and then executes a few simple read/write commands. I've played around with the cli.cpp and serv.cpp code included in the 0.9.6 release,

Crypt::SSLeay

2000-11-10 Thread DPine
This is a rquest for help installing the Crypt::SSLeay module. I am trying to install the Crypt::SSLeay module from Crypt-SSLeay-0.17.tar.gz on a RedHat 5.1 Linux system. Perl version is 5.004_04. I have installed the latest LWP successfully (libwww-perl-5.48). I previously installed Open SSL

HELP !

2000-11-10 Thread Zandi Patrick S TSgt AFRL/IFOSS
Hello, I am receiving the following error with openssl 0.9.6.. - ./openssl genrsa -des3 -out server.key 1024 warning, not much extra random data, consider using the -rand option Generating RSA private key, 1024 bit long modulus

RE:

2000-11-10 Thread John . Airey
There are at least two possibilities here: Either the 3rd party is using ssh, a kind of secure telnet (that runs on port 22) Or the client is using an ssl encrypted connection to the telnet port (23) or any other port for that matter. If it is the latter case it's worth checking out "stunnel"

Re: Correct nonblocking use

2000-11-10 Thread Eric Rescorla
"Scott Goodwin" [EMAIL PROTECTED] writes: Eric, I get a file not found from your link below. I track hacking on the URL and no luck. Doh! My web site is hosted by my ISP and they seem to have temporarily hosed the virtual servers. I'd try again in a couple of days. Sorry about the

Re: librsaref.a

2000-11-10 Thread Benjamin Branch
What OS are you trying to install OpenSSH on? If you are using Linux, have you tried installing either the RPM package or tried compiling SSH-2.2 instead of OpenSSH? Benjamin - Original Message - From: "Ed Hoeffner" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, November 07,

Re: Correct nonblocking use

2000-11-10 Thread Eric Rescorla
Sorry if people get this twice. I've been having mailer problems. "Scott Goodwin" [EMAIL PROTECTED] writes: Eric, I get a file not found from your link below. I track hacking on the URL and no luck. Doh! I just finished experiencing multiple single points of failure. My ISP changed over

RE:

2000-11-10 Thread John . Airey
Sorry to correct you, but ssh is much more than secured telnet. Using stunnel it is possible to encrypt telnet over an ssl link using a single key of 40/56/128 bits (this would probably be using the openssl libraries to do so). However ssh uses a combination of keys to encrypt the data. One of

Re: RSA key generation on Windows

2000-11-10 Thread Bodo Moeller
On Wed, Nov 08, 2000 at 12:00:57PM +0100, Frédéric Gariador wrote: I'd like to use Openssl to generate a RSA key pair on Window NT. I wonder about some issues : - I use the -rand option to specify files used to seed the random number generator. According to the number of these file and

RE:

2000-11-10 Thread David Lang
SSH is a secured telnet, plus a ftp, plus a tunnel for arbatrary ports. it can be configured to be only a secured telnet, but nothing stops your user from reconfiguring it to use it as a tunnel. David Lang On Wed, 8 Nov 2000, David Walgamotte wrote: Date: Wed, 8 Nov 2000 08:52:08 -0600

Re: HTTP/HTTPS proxy

2000-11-10 Thread Eric Rescorla
Carlos Vicente [EMAIL PROTECTED] writes: Browsing through the archives I found this post of yours. I am now working exactly on the same kind of SSL proxy you described, and I'm stuck exactly on the same problem. It's clear that browsers initiate the SSL session --sending the ClientHello

Re: HTTP/HTTPS proxy

2000-11-10 Thread Eric Rescorla
I'm resending this because I've been having mailer problems. Sorry if you get it twice. Carlos Vicente [EMAIL PROTECTED] writes: Browsing through the archives I found this post of yours. I am now working exactly on the same kind of SSL proxy you described, and I'm stuck exactly on the same

ANNOUNCE: ssldump-0.9b1

2000-11-10 Thread Eric Rescorla
ANNOUNCE: ssldump: an SSL protocol analyzer Version 0.9b1 http://www.rtfm.com/ssldump/ RTFM, Inc. is pleased to announce the availability of ssldump 0.9b1. ssldump is an SSLv3/TLS network protocol analyzer. It identifies TCP connections on the chosen network interface and attempts to interpret