Re: Unabe to create multiple certificates from a single self-signed CA.

2007-05-23 Thread Rajat Dudeja
Hi Mick, I want to create 5 certificates from a single self-signed CA. I 've been able to create 3 certificates as of now. However, only the first certificate of mine is working with the root certificate, the other 2 are not working. Could you please explain what do you mean by not

Problem with liebeay32d.lib (Link error in VS 2002)

2007-05-23 Thread Joydip Das
Hi, I am trying to compile a project in VS 2002 that has openSSL 0.9.7b dependency. I could generate the lib files from the openSSL source. But, I could not find any libeay32d.lib file in c:\openssl\out32dll folder. I have rename the libeay32.lib file to libeay32d.lib and added the out32dll as

Re: Unabe to create multiple certificates from a single self-signed CA.

2007-05-23 Thread Mick
On Wednesday 23 May 2007 08:05, Rajat Dudeja wrote: Could you please explain what do you mean by not working? The certificate sent in the message to the phone is not getting accepted by the phone. The phone must respond to the certificate message if it has received the certificate. In the

RE: Newbie questions

2007-05-23 Thread Mark
Hi, I downloaded and installed open-ssl on a windows environment. I then used the openssl application to start the s_client and s_server. I ran the client and server with the following commands. I then attempted to connect my client to the s_server. I managed to connect to the server but

Re: How to improve the performance of SSL_Read

2007-05-23 Thread ghouse mohiddin
Hi Rick, Thanks for your reply. I want to reduce the reading the response time, so that the performance will get improve. I want to read all the bytes at a time. SSL_read API is taking much time to read all the bytes of the response from the server. First time it is going to read 112 bytes,

Problem in BIO_gets( )

2007-05-23 Thread ghouse mohiddin
Hi All, I am getting problem in BIO_gets( ) API. I am able to read only Header part of the response. After that it is giving some exception before it starts to read the body content.I am not able to read the body content. Whether I have to set any flags before reading the huge nubmer of bytes

RE: CRL management pb

2007-05-23 Thread jfhuynh
Hello all, I build a ssl server with client authentication ( I use openssl 0.9.8d) I wanted to know why I have the error no certificate returned when the client certificat is revoked and not a more explicit one. I decided to compile the openssl code to check where my pb is : in s3_srvr.c , I

Sending data to s_server?

2007-05-23 Thread gary clark
Hello, I want to see a message from my test client to the openssl s_server. I connect fine. However when I send a message to the server I see from the following: C:\www\opensssl\bin\openssl.exe s_server -accept 2000 -debug -nocert Loading 'screen' into random state - done Using default temp DH

RE: Multi-threaded SSL Socket Usage

2007-05-23 Thread Dinh, Thao V CIV NSWCDD, K72
Hi Andrew Get SSL and TLS Designing and Building Secure Systems, read section 8.9 ( page 274). Get Network Security with OpenSSL, read example 5-16. I hope it will clear a little bit for you. TD -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew

trying to get valid SSL cert working with uw-imap server.

2007-05-23 Thread jason
hey list, I have a uw-imap server installed on a solaris box. We currently have a working SSL certificate thats about to expire on our server. On top of that, our internal team that issues the certificates is changing their root certs, so we need to update that as well. so I have a new cert

relationship between cipher suites and encoders

2007-05-23 Thread Yves Rutschle
Hi, I'm trying to work out the relationship between a cipher suite, and the encrypters available in OpenSSL. For example, in OpenSSL 0.9.8e I see there is blowfish encryption available (in `openssl enc`), yet none of the bf variants appear in the cipher suite list (`openssl ciphers`). So, where

RE: Newbie questions

2007-05-23 Thread gary clark
Hey Mark, Yep I think your right. Ordered the Network Security with OpenSSL book. Thanks, Garyc --- Mark [EMAIL PROTECTED] wrote: Hi, I downloaded and installed open-ssl on a windows environment. I then used the openssl application to start the s_client and s_server. I ran the

Re: trying to get valid SSL cert working with uw-imap server.

2007-05-23 Thread Rabellino Sergio
[EMAIL PROTECTED] wrote: hey list, I have a uw-imap server installed on a solaris box. We currently have a working SSL certificate thats about to expire on our server. On top of that, our internal team that issues the certificates is changing their root certs, so we need to update that as

Re: trying to get valid SSL cert working with uw-imap server.

2007-05-23 Thread jason
aha! so this is what I was suspecting actually. Please tell me where I can RTFM about setting up the root certs in my CA root certs dir? and how to do the hash thing? if theres a howto, please point me to it. thanks/regards, Jason But you must add your new root certs to the CA certs

Re: Newbie questions

2007-05-23 Thread Chas .
I believe a PDF is available for free on the Internet. I googled for it a few weeks ago thinking I would find an abstract of it and instead found the entire book. Chaz On 5/23/07, gary clark [EMAIL PROTECTED] wrote: Hey Mark, Yep I think your right. Ordered the Network Security with OpenSSL

Re: How to improve the performance of SSL_Read

2007-05-23 Thread Rick Jones
ghouse mohiddin wrote: Hi Rick, Thanks for your reply. I want to reduce the reading the response time, so that the performance will get improve. I want to read all the bytes at a time. SSL_read API is taking much time to read all the bytes of the response from the server. First time it is

Re: Newbie questions

2007-05-23 Thread gary clark
Hey Chas, You dont happen to know the link. Did a quick search and just got the pdf with just the first 5 chapters? Much appreciated, Garyc --- Chas. [EMAIL PROTECTED] wrote: I believe a PDF is available for free on the Internet. I googled for it a few weeks ago thinking I would find an

Re: Newbie questions

2007-05-23 Thread Chas .
When I get back to my house this evening I will send you the file. Will that be alright? Chas. On 5/23/07, gary clark [EMAIL PROTECTED] wrote: Hey Chas, You dont happen to know the link. Did a quick search and just got the pdf with just the first 5 chapters? Much appreciated, Garyc ---

Re: Newbie questions

2007-05-23 Thread gary clark
Excellent Chas. Thanks, Garyc --- Chas. [EMAIL PROTECTED] wrote: When I get back to my house this evening I will send you the file. Will that be alright? Chas. On 5/23/07, gary clark [EMAIL PROTECTED] wrote: Hey Chas, You dont happen to know the link. Did a quick search and

openssl how to remove BEGIN PUBLIC KEY/ END PUBLIC KEY p

2007-05-23 Thread Janet N
Hi, Are there ways to remove the -BEGIN PUBLIC KEY/ END PUBLIC KEY- heading from a public key? I have a public key that I extracted from my x509 certificate, but it gave me BEGIN PUBLIC KEY/ END PUBLIC KEY in the public key, I want to remove it and have the encoded base64 text all in

Re: openssl how to remove BEGIN PUBLIC KEY/ END PUBLIC KEY p

2007-05-23 Thread Marek Marcola
Hello, Are there ways to remove the -BEGIN PUBLIC KEY/ END PUBLIC KEY- heading from a public key? I have a public key that I extracted from my x509 certificate, but it gave me BEGIN PUBLIC KEY/ END PUBLIC KEY in the public key, I want to remove it and have the encoded base64 text

Re: openssl how to remove BEGIN PUBLIC KEY/ END PUBLIC KEY p

2007-05-23 Thread Janet N
Thanks! This works. On 5/23/07, Marek Marcola [EMAIL PROTECTED] wrote: Hello, Are there ways to remove the -BEGIN PUBLIC KEY/ END PUBLIC KEY- heading from a public key? I have a public key that I extracted from my x509 certificate, but it gave me BEGIN PUBLIC KEY/ END PUBLIC KEY

RE: How to improve the performance of SSL_Read

2007-05-23 Thread David Schwartz
I want to reduce the reading the response time, so that the performance will get improve. I want to read all the bytes at a time. SSL_read API is taking much time to read all the bytes of the response from the server. First time it is going to read 112 bytes, then 1300 bytes,1460