Send Tuterials

2008-02-27 Thread Prasad Pawar
Dear all, I am new user of openssl. I have problem with compiling programs using gcc compiler in which i am using openssl functions for encryption purpose. So if possible try to send me all required settings and sample programs regarding this. thanks.

Problem with SSL_WRITE

2008-02-27 Thread vinaykumar.desai
Hi, We are using OPEN SSL library in our client server application. We are using SSL_WRITE and SSL_READ api used to read and write operations between them. Connection is broken When server sends very large message (more than 56K) using SSL_WRITE api. We fixed problem with set partial mode

Help in Indentifying a function

2008-02-27 Thread Skanda Nagaraja
Hello all, I am trying to use ECDSA Functions for some custom application. I am reading over the code and I am stuck at one spot. I am unable to understand how ECDSA_SIG_seq_tt is defined. I know they point to the ASN1_TEMPLATE structure but I am not too sure the values being passed to the

Re: OpenSSL client through proxy

2008-02-27 Thread Andrey Petrashenko
26.02.08, 23:23, [EMAIL PROTECTED]: Hello, I have to connect to my OpenSSL server through proxy server. How can I establish this connection? Establish tcp connection through proxy (connect, socks5, transparent, reverse or any other) and next run SSL on this tcp connection. Best

RE: Help regarding error

2008-02-27 Thread David Schwartz
when i compile the program p192.c i get following error [EMAIL PROTECTED] ~]# gcc p192.c This is not the command to compile. This is the command to compile and link. gcc -c p192.c is the command to compile, and you will likely get no errors. /tmp/ccicrxZV.o: In function `main':

RE: Problem with SSL_WRITE

2008-02-27 Thread David Schwartz
We are using OPEN SSL library in our client server application. We are using SSL_WRITE and SSL_READ api used to read and write operations between them. Connection is broken When server sends very large message (more than 56K) using SSL_WRITE api. That's probably due to a bug in your code.

Re: Convert a Windows CA to a Linux CA

2008-02-27 Thread Dmitrij Mironov
Hi, Stefano, In theory answer is YES, but in practice is much more easier to create new CA on linux, configure to support such OIDs and start to issue certificates. Old CA will be needed to issue CRL until all issued certificate will be expired. BR, Dmitrij [EMAIL PROTECTED] wrote:

Re: extracting CRL location from a certificate

2008-02-27 Thread Dmitrij Mironov
Hi, Jure, It seems that your certificate does not have URI CDP. Try another one. If you want, I can email you one for test. BR, Dmitrij Jure Vrscaj wrote: Hi, I'd like to extract the CRL location from a certificate, using this command: openssl x509 -text -in cert.pem But the only

Re: Convert a Windows CA to a Linux CA

2008-02-27 Thread DucaConte Balabam
Dmitrij Mironov ha scritto: Hi, Stefano, In theory answer is YES, but in practice is much more easier to create new CA on linux, configure to support such OIDs and start to issue certificates. Old CA will be needed to issue CRL until all issued certificate will be expired. BR, Dmitrij

RE: OpenSSL client through proxy

2008-02-27 Thread David Schwartz
26.02.08, 23:23, [EMAIL PROTECTED]: Hello, I have to connect to my OpenSSL server through proxy server. How can I establish this connection? Establish tcp connection through proxy (connect, socks5, transparent, reverse or any other) and next run SSL on this tcp connection. Best

Re: Convert a Windows CA to a Linux CA

2008-02-27 Thread Tomas Gustavsson
1. If you can export CA from windows, only MS can tell you. If you can export it in a usable format, for example PKCS#12 for the CA keys and PEM/DER for user certificate. Depending on the CA product in Linux you should be able to import it easily, OpenSSL CA, EJBCA, ... 2. You don't write

Re: OpenSSL client through proxy

2008-02-27 Thread Andrey Petrashenko
Excuse me that my question is too much general. The situation is like this: I have a client computer in a local network that is behind proxy server so it can not see a SSLServer directly. The SSL server is in Internet area. The type of proxy server is HTTP proxy. The task is a SSL data

RE: OpenSSL client through proxy

2008-02-27 Thread Shaw Graham George
You need to open a socket to the proxy server and send it an HTTP CONNECT request. If the proxy server sends back an OK reply, then it has opened a socket to the proxy. After that the proxy acts as a port forwarder, so you can continue your SSL dialog with the proxy as if it was the SSL server.

OpenSSL Error

2008-02-27 Thread Subhankar Katyayan
I have downloaded and installed Win32OpenSSL-0_9_8g.exe in C:\OpenSSL and I have linked it as follows, and my workpspace is C:\dhsmv1\api2 Project - Settings - C/C++ (tab) - Preprocessor (Category:) - Additional include directories - ../../OpenSSL/include/openssl Project - Settings - C/C++

Re: Convert a Windows CA to a Linux CA

2008-02-27 Thread DucaConte Balabam
Tomas Gustavsson ha scritto: 1. If you can export CA from windows, only MS can tell you. If you can export it in a usable format, for example PKCS#12 for the CA keys and PEM/DER for user certificate. Depending on the CA product in Linux you should be able to import it easily, OpenSSL CA,

Re: Convert a Windows CA to a Linux CA

2008-02-27 Thread Patrick Patterson
On Wednesday 27 February 2008 08:58:10 DucaConte Balabam wrote: Tomas Gustavsson ha scritto: 1. If you can export CA from windows, only MS can tell you. If you can export it in a usable format, for example PKCS#12 for the CA keys and PEM/DER for user certificate. Depending on the CA product

X509 extension

2008-02-27 Thread Carolin Latze
Hi everybody, I have some problems with X509 extensions. First of all, what I want to do: I want to define new extensions, simply some new extension fields that I want to fill with values. I thought, I just define them in an array: struct entry ext_entries[3] = {