Problems compiling openssl on solaris 2.6

2002-11-07 Thread Daniel . D . Olsson
Hello I can not compile openssl-0.9.6g on Sun Solais 2.6. I use GCC 3.2 and make 3.80 One error message comes out then I do the make command. ./config --prefix=/opt/openssh No Errors Configured for solaris-sparcv9-gcc. then make command + rm -f libcrypto.so.0 + rm -f libcrypto.so + rm -f

PKCS#11 and the Schlumberger smartcard

2002-11-07 Thread Bruce Cartland
I am using PKCS#11 libraries supplied by vendors (although I'm starting to look at openCryptoki) to generate oncard keypairs and sign data for authentication (non cert based). However, when I then run the resulting signature through OpenSSL 0.9.6 RSA_public_decrypt() with padding type of

RE: Problems compiling openssl under irix64 (6.5)

2002-11-07 Thread Zhao Lisa-alz002
Agreeting, How can I be removed from this mailling list? Thanks, Lisa -Original Message- From: [EMAIL PROTECTED] [mailto:John.Airey;rnib.org.uk] Sent: Thursday, November 07, 2002 7:55 AM To: [EMAIL PROTECTED] Subject: RE: Problems compiling openssl under irix64 (6.5) Hi Joe. Can you

Re: how do i make SSL_connect time out ?

2002-11-07 Thread Tim Regovich
Try setting an alert if the socket is not timing out to your liking. Better yet, switch to using non blocking asynch sockets and manage socket timeouts sepperately, on your own schedule. Hope this helps, Tim --- Guillaume Peersman [EMAIL PROTECTED] wrote: Hi, I am trying to find a way to

How can I get the public key from a key file?

2002-11-07 Thread petik
Hello! I generate a private key using: openssl genrsa -out xxx.key 1024 It contains the private key, but I can get the public key this way: openssl rsa -in xxx.key -pubout -out yyy.pub I can get the private key in a C program using PEM_read_PrivateKey(..), but I can't find

Re: Problems compiling openssl on solaris 2.6

2002-11-07 Thread mhaverka
Make sure that /usr/ccs/bin is in your path. Michael Haverkamp IT System Engineer (Sr.) Honeywell Federal Manufacturing Technologies 816-997-3788

SSL_read() hang after read http 100 continue headers

2002-11-07 Thread Lin Ma
Title: SSL_read() hang after read http 100 continue headers Thanks. The problem is SSL_Read hangs there without giving any error. The sequence should be: HTTP/1.1 100 Continue Server: Microsoft-IIS/5.0 Date: Thu, . HTTP/1.1 200 OK .. But after the Date header and empty line,

Re: PKCS#10?

2002-11-07 Thread Oblio
Does anyone know what to do with a PKCS#10 cert request? Oblio __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Re: PKCS#10?

2002-11-07 Thread Karl-Michael Werzowa
this is very basic. pkcs#10 is the standard request format. under normal circumstances, the client ( person who requests a certificate) sends a pkcs#10 to the ca and the ca signs this request. in openssl this is done with openssl ca -in thePKCS#10.pem -out theCert.pem, using different options

Re: PKCS#10?

2002-11-07 Thread Oblio
Ok, I know it's very basic, it's just that there's no easy starting point for someone who's never done this. First, understand that I'm attempting all this under WinNT, and I couldn't even get the thing to compile. Fortunately, the folks at shininglightpro.com posted a win32 port, so at least

RE: PKCS#10?

2002-11-07 Thread Bob Kupperstein
Oblio, You're right; it is difficult getting started with OpenSSL. Make sure you've read the man pages at http://www.openssl.org/docs/apps/openssl.html (go through the individual commands). Look at the config page to get a idea what the config file looks like. To get a better idea, look for

Re: How can I get the public key from a key file?

2002-11-07 Thread Jean Pierre Cognasse
why do you use openssl genrsa which only generates private key. Try to use openssl rsa ... : It generates RSA key pair (private public) Jipé [EMAIL PROTECTED] a écrit : Hello! I generate a private key using: openssl genrsa -out xxx.key 1024 It contains the private key, but I can

Re: Problems compiling openssl on solaris 2.6

2002-11-07 Thread Jean Pierre Cognasse
Hello, Verify if you have the command ar on your system. if yes, verify you have the rigth path in your PATH variable the make need it to create the library libcrypto.a Jipé [EMAIL PROTECTED] a écrit : Hello I can not compile openssl-0.9.6g on Sun Solais 2.6. I use GCC 3.2 and make 3.80

Having an SSL server validate with two CAs...

2002-11-07 Thread Richard Levitte - VMS Whacker
While holding a lecture on PKI today, I was presented with a rather interesting question that I couldn't answer: A company wants to set up a web server that is secured through SSL, and would like it to have maximum availability to the public out there while keeping maximum trust within the

Memset not clearing sensitive data

2002-11-07 Thread Xperex Tim
An article by Michael Howard (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure10102002.asp) points out that when memset used to clear sensitive information like keys out of RAM, the memset (or equivalent code) can be optimized away by the compiler. He proposes

Re: Memset not clearing sensitive data

2002-11-07 Thread Eric Rescorla
Xperex Tim [EMAIL PROTECTED] writes: An article by Michael Howard (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure10102002.asp) points out that when memset used to clear sensitive information like keys out of RAM, the memset (or equivalent code) can be

Re: SSL_read() hang after read http 100 continue headers

2002-11-07 Thread Tim Regovich
Lin Ma, Please reference : http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.2.3 I beleive that the other end of the connection is waiting for a message body to be passed. Regards, Tim --- Lin Ma [EMAIL PROTECTED] wrote: Thanks. The problem is SSL_Read hangs there without

how long should it take to generate a RSA private key? doing something wrong?

2002-11-07 Thread Mitchel, Jennifer (Jem)
Hi all, I got my openssl 0.9.6g installed today. i am brand new to this so i am a bit concerned about the timeframe here. I entered the command genrsa -des3 -out server.key 1024 and i got the PRNG not seeded problem. So I installed /dev/random Then I entered the command

Re: PKCS#10?

2002-11-07 Thread Karl-Michael Werzowa
Basically, you have to create a CA at first. This means to have a private key to sign certificates. The private key needs to be kept under very strict security. (create by; openssl genrsa ...) The first cert you create is a self-signed root certificate. This includes the public key (openssl req

Re: how long should it take to generate a RSA private key? doing som ething wrong?

2002-11-07 Thread David Schwartz
On Thu, 7 Nov 2002 17:17:17 -0600, Mitchel, Jennifer (Jem) wrote: Hi all, I got my openssl 0.9.6g installed today. i am brand new to this so i am a bit concerned about the timeframe here. I entered the command genrsa -des3 -out server.key 1024 and i got the PRNG not seeded problem. So I

openssl problems

2002-11-07 Thread fxian_2003
Hi,openssl-users I met a trouble. Today I encrypted a txt file with openssl package (windows version) in win2k, but I couldn't decrypt it with openssl lib(linux version) in linux(RH7.2). The APIs I used are : EVP_cipherinit(); EVP_cipherupdate(); EVP_cipherfinal(). Look forward to your

Any summary of differences of API between 0.9.6 and 0.9.7

2002-11-07 Thread Hugo Jacques
Hi all, I am in the process of choosing between OpenSSL 0.9.7 and 0.9.6 for an application I want to deploy soon. Since 0.9.7 is still in beta, I am a bit affraid to go right away in production with it. I would like to know if there exist any document that summarizes the differences between the

Not able to complie on Windows

2002-11-07 Thread Ashish Garg
I am trying to build OpenSSL 0.9.6.g on Windows 2K. I am using Cygwin for build. When I do: make it gives me error: make[2]: Entering directory `/c/tmp/openssl-0.9.6g/crypto/objects' /usr/bin/perl objects.pl objects.txt obj_mac.num obj_mac.h objects.txt:92:Undefined identifier SMIME make[2]: