Re: Simple way to use PKI for larger data sets

2006-08-28 Thread Bernhard Froehlich
snacktime wrote: [...] I could generate a random key for each request, encyrpt it, and stick it in the database with the request, but I was hoping for a simpler solution. Are there any asymmetric ciphers in openssl that don't have the same limitation on the amount of data that can be encrypted?

RE: How to retrive the delta CRL location and revocation reason?

2006-08-28 Thread surendra.ande
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Sunday, August 27, 2006 4:03 AM To: openssl-users@openssl.org Subject: Re: How to retrive the delta CRL location and revocation reason? On Fri, Aug 25, 2006, [EMAIL PROTECTED]

RE: How to retrive the delta CRL location and revocation reason?

2006-08-28 Thread surendra.ande
How to retrieve the delta crl's CDP? Could you please elaborate the same? Thank you, -Surendra On Fri, Aug 25, 2006, [EMAIL PROTECTED] wrote: Hi Team, I am working on the CRL validation. I am seeing some issues in extracting the - delta crl distribution point and - reason for

Re: What are the letter codes for SSL_state_string()

2006-08-28 Thread Marek Marcola
Hello, Hello, knows anyone the letter codes of the function SSL_state_string()? The the doc I only can read: RETURN VALUES Detailed description of possible states to be included later. :( This strings are build from first letters of SSL state and SSL version information. For example:

unable to get local issuer certificate

2006-08-28 Thread Milan Tomic
While atempting to establish SSL connection I got this OpenSSL error: Certificate Verification: Error (20): unable to get local issuer certificate Yes, I have read OpenSSL documentation and used Google to search for possible solution, but nothing matches my problem. I do have server issuer

Re: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Robert . Zander
Nils, Yes, 0.9.6b is the exact version. Please help! Nils Larsch [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/26/2006 06:23 AM Please respond to openssl-users@openssl.org To openssl-users@openssl.org cc Subject Re: Unable to locate the keystore/certificate store or

Re: related license question

2006-08-28 Thread Richard Koenning
Ted Mittelstaedt wrote: - Original Message - From: David Schwartz [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Tuesday, August 22, 2006 2:04 PM Subject: RE: related license question Certainly. Nothing in the OpenSSL licenses requires you to allow redistribution of any

Re: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Nils Larsch
[EMAIL PROTECTED] wrote: Nils, Yes, 0.9.6b is the exact version. Please help! hmm, did you read the rest of my mail ? Do you have the source code ? Cheers, Nils __ OpenSSL Project

Re: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Robert . Zander
Nils, Yes. I read the entire e-mail. I can't find ANYWHERE where it's being fed to the application, (including the source code). As far as I can see, it's definitely not being used in an ssl_ library call nor is he building his own in memory or using some other filename etc. I don't see how the

RE: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Diffenderfer, Randy
Title: Message I don't see the execution platform given here. Perhaps you might consider doing an 'strace' (if linux)? Anything that is opened and "secretly" imported into the program should be discernible from this. Just a thought... rnd -Original Message-From: [EMAIL

RE: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Robert . Zander
The platform is AIX. I don't think they've ever explicitly used a *.pem file. Somehow the app was able to communicate with an IIS server and complete the handshake process or at least communicate and get txn's across, (I'm not sure how). Diffenderfer, Randy [EMAIL PROTECTED] Sent by:

RE: Unable to locate the keystore/certificate store or private key

2006-08-28 Thread Robert . Zander
The server side SSL is no longer terminated on the IIS server. It is being handled by Cisco 11500 series content switches and it the application will no longer work. Diffenderfer, Randy [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/28/2006 03:23 PM Please respond to

RE: Simple way to use PKI for larger data sets

2006-08-28 Thread Fukuba, Yoshiki
Hi, Can you use GPGME instead of OpenSSL? Perhaps it provides a High-Level Crypto API including hybrid encryption. Yoshiki FUKUBA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of snacktime Sent: Sunday, August 27, 2006 3:23 AM To: openssl-users

RE: related license question

2006-08-28 Thread David Schwartz
Certainly. Nothing in the OpenSSL licenses requires you to allow redistribution of any derivative works you create. Wrong. See the following: ...The licence and distribution terms for any publically available version or derivative of this code cannot be changed...