Sessions !

2000-02-24 Thread vijay karthik
Hi ! How do i know if the SSL session is cached on the server ? How can i find out if the server is reusing the previously negotiated SSL session or not ? can i find this out in some log file ?? Thanks Vijay __ Do You Yahoo!? Talk to your

unable to get local issuer certificate?

2000-02-24 Thread Dennis Xu
I have a client - server programs, which are refered to openssl s_server s_client. And I have my own CA (verisign test Onsite). I applied certificatefor both my server and client from this same test CA.When I test it in my own client and server program, I found the following error,

Re: Certificate management tools

2000-02-24 Thread Jeremy Hunt
From: Bennett Samowich [EMAIL PROTECTED] Subject: Certificate management tools Greetings, This may or may not be the right place to ask this, but does anyone know of "canned" utilities for certificate management. A client of ours may want to start using proprietary certs and I don't

Re: Subprime into A Paper in SIX Months ! !

2000-02-24 Thread Antonn Novak
I am not interested thanks. I am not a legal eagle, but I would have thought that if a message like this is sent to a mailing list such as this, - the message is unsolicited and only if the list administrator cancels it will the list be unsubscribed. Unless other users of this list have

Re: Wanted PKI and Encryption Programming Experts

2000-02-24 Thread jeffkoch
We are looking for Unix, PC and Mac PKI and encryption programming experts to join us in a new internet startup that will be delivering feature length videos over the Internet. Positions are located in New York City. You'll get a competitive salary and generous equity and stock option package.

Re: Subprime into A Paper in SIX Months ! !

2000-02-24 Thread Andrew Krone
I second Antonin From: "Antonín Novak" [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: Subprime into A Paper in SIX Months ! ! Date: Tue, 22 Feb 2000 07:18:28 +0100 I am not interested thanks. I am not a legal eagle, but I would have thought

Re: strange phenomenon

2000-02-24 Thread Pascal Junod
Non, je n'ai pas repondu a Jocelyne, je crois que je viens d'effacer son Mail !!! Tu peux lui repondre : on commencera vers 20h00 avec les autres et on les attend tous les deux vers 20h30, ce nést pas tres genant ?Qu'en penses-tu ? Pour apporter qq chose , a toi de choisir, je ne sais pas

Re: Certificate management tools

2000-02-24 Thread Mike Hoegeman
Andy Moskoff wrote: andy, you rule. send me a copy.. -mike On Wed, 23 Feb 2000, Bennett Samowich wrote: Greetings, This may or may not be the right place to ask this, but does anyone know of "canned" utilities for certificate management. A client of ours may want to start using

Certificates and authorities.

2000-02-24 Thread winterlion
Okay, I'm trying to get a test WWW-server setup. And am not ready yet to pick up official cert... Is it possible to run a test-cert for a short period (and how to limit period) that at least netscape 4 will accept (though maybe with a warning)? Curious and am not sure [I didn't find it in a

Installing as Root into NS and MSIE

2000-02-24 Thread drew
Hi there, does anyone have information about getting ones CA cert installed into Microsoft and Netscapes Browsers, ie becoming a fully qualified CA many thanks 'd __ OpenSSL Project

how to download a certificate to browser?

2000-02-24 Thread alohaz
Hi, everyone: I set up my own CA and sign client certificates. I can use the program of perl provided by F.J Hirsch in his paper" Introducing SSL and Certificates using SSLeay" to download certificate to netscape browser. But I can not use my C program to do the work. This is

Problem importing Certs in Netscape windows.

2000-02-24 Thread Francisco Javier Martínez Martínez
Hello. Recently I had setupatest CA. I had created and signed a few certificates with openssl, whichs can be imperted in PKCS12 format without problems into Linux Netscape, I had tested encripted and signed emails succefully, but when I had tried to import the same certificates into Windows

LYNX+SSL

2000-02-24 Thread Alejandro Lucero Palau
Hello! I have configurated lynx program with ssl. It's necesary openssl is installed in the machine. I have proved to connect with lynx to a secure web server, and it works. I want to use lynx to monitorize a secure web server ( Netscape ), that uses client certificates authentication, and I

Stunnel 3.8

2000-02-24 Thread Michal Trojnara
Stunnel 3.8 has been released on http://mike.daewoo.com.pl/computer/stunnel/ New in version 3.8, 2000.02.24: * Checking for threads in c_r library for FreeBSD. * Some compatibility fixes for Ultrix. * configure.in has been cleaned up. Separate directories for SSL certs and SSL

Problem whith PKCS12 and DSA

2000-02-24 Thread Xavier Gonzalez
Hi, I tried to read a pkcs12 file which contains a DSA certificate and private key. Application failed whith this error: OpenSSL pkcs12 -in AutoSign_1024_DSA.p12 -info Enter Import Password: MAC Iteration 1 MAC verified OK PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 1 Key bag

Certificate management tools

2000-02-24 Thread Bennett Samowich
Greetings, This may or may not be the right place to ask this, but does anyone know of "canned" utilities for certificate management. A client of ours may want to start using proprietary certs and I don't want to reinvent the wheel. Thanks in advance, - Bennett

Re: Problem whith PKCS12 and DSA

2000-02-24 Thread Dr Stephen Henson
Xavier Gonzalez wrote: Hi, I tried to read a pkcs12 file which contains a DSA certificate and private key. Application failed whith this error: OpenSSL pkcs12 -in AutoSign_1024_DSA.p12 -info Enter Import Password: MAC Iteration 1 MAC verified OK PKCS7 Encrypted data:

Re: Is OpenSSL supported on WinCE3.0?

2000-02-24 Thread Richard Dykiel
Have you tried to create a Visual Studio project of type "makefile"? It's easy to use the OpenSSL makefiles as they are. You can compile from the IDE, jump to correct errors from the build window, start debugging sessions on executables (trickier), etc... Having an external makefile does not

Re: server configuration problem

2000-02-24 Thread Osvaldo Brito
Hi, when run this command line, $ openssl s_client -host localhost -port 443 I get this stdout error message, CONNECTED(0003) [EMAIL PROTECTED] verify error:num=18:self signed certificate verify return:1 [EMAIL PROTECTED] verify error:num=7:certificate signature failed verify

RE: basic...

2000-02-24 Thread Airey, John
server.key = Your server's private key. Guard this with your life! server.crt = Certificate signed by a certification authority. server.csr = Certificate signing request. This contains your server key and is used to request your server.crt from a certification authority. Guard this with your

openssl basic

2000-02-24 Thread Osvaldo Brito
Hi, I'm trying to make a self sign certificate for testing purposes. I'm using the method in the openssl faq list, but the last step (using the SSLEAY ca.sign) seems impossible. I've already created the server.key, server.csr, ca.key e server.crt. Now i want to sign the *.csr with my own

Re: server configuration problem

2000-02-24 Thread Bodo Moeller
Osvaldo Brito [EMAIL PROTECTED]: $ openssl s_client -host localhost -port 443 14228:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100: 14228:error:04067071:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:394: