inconsistent failed ssl connections. Encrypted Alert

Hi, we've got this SSL web server setup, [ actually several servers on a round robin DNS entry, using the same key and cert. ] We have a sort of intermittent, connection failure. The setup has worked with IE6 and ie7 on windows, as well as safari, camino, opera, and firefox on osx.

Re: FIPS-capable curl: Solaris 9 - fingerprint does not match

I am trying to test the Fips capable openssl and when i am testing it i am getting some error openssl req -x509 -newkey rsa:2048 -out $HOME/exampleca/cacert.pem -outform PEM Generating a 2048 bit RSA private key

Re: DTLS clue requested.

Hi David, unfortunately I've been out of touch with the developments to DTLS for some time. I forwarded your message to Eric Rescorla who worked with Cisco to get their implementation working. I suspect that Cisco has proprietary patches that they haven't disclosed (or don't know how to).

CSR has invalid signature

Hi Everyone I am very new to this. I have generated an RSA and CSR using openssl on solaris. I have tried submitting CRS to comodo however when validating it says Invalid signature. Interesting thing is that on these sites it works correctly: http://www.redkestrel.co.uk/cgi/decodeCSR.pl

RE: Using a memory BIO to decrypt a SSL Stream

Dave, All First let me say that I understand the apprehension of helping illegitimate users attempt to compromise another entity's data. I am a software developer that works for a company (www.InsightETE.com) that builds an end to end user experience data picture of a given n-tier

Signing Exchange 2007 certificate request

I'm trying to sign a csr generated from Exchange 2007, but openssl doesn't seem able to parse the request. I get the following: $ openssl req -in exchange-smtp.req -text unable to load X509 request $ openssl req -in exchange-smtp.req -text -inform der unable to load X509 request

Re: CSR has invalid signature

Jacob, try putting that CSR thru openssl req -text -noout -verify. For me, that command reports... verify failure 7046:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 7046:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check

Re: Strange error for multiple SSL sessions

Hi, Thanks for your reply. Here is my program flow: SSL_CTX_new(SSLv23_server_method()); // setting veraires options and certificates SSL_OP_ALL|SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION create a non-blocking socket main_sock and add it to epoll listening queue in the main loop. When a

Re: FIPS-capable curl: Solaris 9 - fingerprint does not match

On Thu, Sep 25, 2008, joshi chandran wrote: I am trying to test the Fips capable openssl and when i am testing it i am getting some error openssl req -x509 -newkey rsa:2048 -out $HOME/exampleca/cacert.pem -outform PEM Generating a 2048 bit RSA private key

Re: FIPS-capable curl: Solaris 9 - fingerprint does not match

On Thu, Sep 25, 2008, joshi chandran wrote: I am trying to test the Fips capable openssl and when i am testing it i am getting some error openssl req -x509 -newkey rsa:2048 -out $HOME/exampleca/cacert.pem -outform PEM Generating a 2048 bit RSA private key

Re: FIPS-capable curl: Solaris 9 - fingerprint does not match

I am using openssl 0.9.7m . Yes,I have the used the OPENSSL_FIPS=1 when calling the command . i am attaching the testscript which i am using. please help me Thanks Joshi On Thu, Sep 25, 2008 at 10:02 PM, Dr. Stephen Henson [EMAIL PROTECTED]wrote: On Thu, Sep 25, 2008, joshi chandran

Building OpenSSL on Windows

I downloaded OpenSSL 0.9.8i on my Vista machine and tried to build it without any changes but failed. I have Cygwin and gcc installed on my machine. I ran 'config' on the top level and then ran 'make' to build. The build process stopped with the following error: gcc -I.. -I../..