Re: PKC12 to PEM to DER

2003-07-08 Thread Whitaker, Andrew
Hi Christian, I think I'm almost there. Thanks for the detail on certificate verification and by the way my IE error was just me trying to convert a pem file using the rsa instead of x509. anyway could you possibly assist with hopefully one final thing :-) My situation: 1)I have a client

Re: PKC12 to PEM to DER

2003-07-08 Thread Christian Hohnstaedt
Hi Andrew, the pkcs12 utility writes the Certificate(s) and the key separated into one file the (3) only reads the first x509 structure and writes it in DER format (-outform DER) but doesn' t look at the rest of the file. You can use cutpaste to edit the pkcs12 output into several files. the

RE: PKC12 to PEM to DER

2003-07-08 Thread Whitaker, Andrew
Hi Christian, Thanks for you time. Yes you are correct, all I want to do is have a PKCS12 structure and push it into a DER format for use with some EAI server applications. It only takes DER files and hence we need some conversion to get it in. What is the best way whilst retaining as

SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC error on W2K Serverfor openssl compiled on W2K Pro

2003-07-08 Thread Maksim Pakhutkin
I'm trying to compile the most recent Apache 1.3.27, mod_ssl-2.8.14-1.3.27 and openssl-0.9.7b on win32. I've successfully compiled it on my Windows 2000 Professional SP4 workstation with Microsoft Visual Studio 6.0 Service Pack 5. And when I run the newly-compiled Apache on the same workstation

Using SSL formed session

2003-07-08 Thread pankaj Goel
Hello, I am trying to implement PEAP into freeradius. I have formed a SSL tunnel using openssl between the client and the server, I need to run an EAP exchange over this tunnel. Can anybody point me to the examples or throw more light on how to use the formed SSL session to tunnel (exchange)

RE: Using SSL formed session

2003-07-08 Thread Fred Crable
There are several examples on how to use SSL w/sockets (I'm not familiar w/PEAP). It's a minor change to the code to actually tunnel through SSL once the session is established. Use SSL_write() or SSL_read() with your SSL session instead of std::write and std::read. If you are in fact using

RE: Using SSL formed session

2003-07-08 Thread Fred Crable
I got some examples from the web, but yes there is a bit of setup to perform. You must create the sockets, attach them to a context, and verify the certificates before you start using them. Look at the examples from this website (this doesn't seem to be a reliable source, but I don't remember

Re: SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC error on W2KServerfor openssl compiled on W2K Pro

2003-07-08 Thread Maksim Pakhutkin
Sorry, after sending the previous (desperate) message, I decided to try one last time, and managed to figure it out. It appears to be a problem with mod_ssl. The bug seems to have been introduced in 2.8.13, because compiling mod_ssl-2.8.12 worked, but nothing starting with 2.8.13 did. [EMAIL

Re: Special characters in config file

2003-07-08 Thread Fiel Cabral
Thanks. --- Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Thu, Jul 03, 2003, Fiel Cabral wrote: Hello, Does anyone have an idea of the escape sequences supported by the config file? I'm trying to escape special characters that could occur in the distinguished name attribute

soslaris 9 openssl-0.9.7b compile problem

2003-07-08 Thread Wayne Rasmussen
In the long run, I am trying to get samba-3.0beta2 to compile with kerberos and ldap. We have to support Kerberos V5, and LDAPV3. looking for answers to this problem at the end of the document: openldap-2.1.21 recommends OpenSSL 0.9. krb5-1.3-beta5 has been compiled and installed in

Re: Estimating the packet overhead imposed by SSL.

2003-07-08 Thread Shashank Khanvilkar
- Original Message - From: Fred Crable [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, July 07, 2003 4:12 PM Subject: RE: Estimating the packet overhead imposed by SSL. Far from trying to calculate the overhead, I would try finding the lowest level function call to std::write

Re: Estimating the packet overhead imposed by SSL. (updated)

2003-07-08 Thread Shashank Khanvilkar
Sorry, I don't have much knowledge of the SSL API's. So have to rely on the published Standards: According to http://www.ietf.org/rfc/rfc2246.txt, below is an example of calculating overhead: Example: If the block length is 8 bytes, the content length (TLSCompressed.length) is