Re: need help on: openssl pkcs12 --- avoid or manipulate propmpts

2010-03-20 Thread Mounir IDRASSI
Hi John, To avoid the password prompt, you can add the argument -password pass: to the command line. This will use an empty password for the PKCS12 file. For a non empty value, for example 1234, use -password pass:1234 instead. I hope this will help. Cheers, -- Mounir IDRASSI IDRIX

Re: client authentication and tokens.

2010-03-20 Thread John R Pierce
Peter Gubis wrote: On 13. 3. 2010 0:37, John R Pierce wrote: our security auditors yanked the token out, and the client continues to work, .. you'll probably need to listen for token removal event and destroy this ssl session after that. It is working for us in this way. Session should be

Openssl-0.9.8m On Darwin

2010-03-20 Thread Nigel Horne
Folks, I can't get the latest version of openssl to build on Darwin. I *think* the assembler is confused by the quotes in comments. I did this: ./Configure darwin-ppc-cc make The build fails thus: ... cc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN

Problem in using openssl in PC

2010-03-20 Thread Mohit Kumar
Hi, I am using openssl in QT4.I copy libeay32.dll,ssleay32.dll along with my application.In some machine its work fine.While in some other PC i get error ssl not supported Please help as only ssl creating problem. Its urgent Thanks in advanced

Apache client certificate authentication

2010-03-20 Thread Nuno Gonçalves
I'm trying to set client certificate authentication. It looks that I cant set even the simple demo... With apache2.2 installed: sudo a2enmod ssl sudo a2ensite default-ssl sudo /etc/init.d/apache2 restart Browse with firefox to (https)localhost - page retrieved after security warning, ssl

Memory handling and BIO_*

2010-03-20 Thread Mathieu Malaterre
Hi there, I am struggling with the BIO_* API to understand how I can control the memory. I found a nice function for read-only memory: BIO *data = BIO_new_mem_buf((void*)array, len); but I do not understand how to control output memory (I need to write to a C++ std::stringstream). So what

Re: Apache client certificate authentication

2010-03-20 Thread Graham Leggett
On 2010/03/20 6:55 PM, Nuno Gonçalves wrote: Questions: Is normal that firefox hangs when it doesn't have a valid certificate to provide? Openssl output looks OK?(or the error in the end is a exception?) I am not 100% sure of the details, but I do recall a hang being a symptom of using a

Re: Apache client certificate authentication

2010-03-20 Thread Michael S. Zick
On Sat March 20 2010, Nuno Gonçalves wrote: I'm trying to set client certificate authentication. It looks that I cant set even the simple demo... Look like your e-mail client isn't correct either, it seems to be sending the same message every two hours. Mike With apache2.2 installed: sudo

Re: Apache client certificate authentication

2010-03-20 Thread Dr. Stephen Henson
On Sat, Mar 20, 2010, Graham Leggett wrote: On 2010/03/20 6:55 PM, Nuno Gonçalves wrote: Questions: Is normal that firefox hangs when it doesn't have a valid certificate to provide? Openssl output looks OK?(or the error in the end is a exception?) I am not 100% sure of the details, but I

Re: Apache client certificate authentication

2010-03-20 Thread Nuno Gonçalves
Very sory. I was getting the following error: The following message to frank.heis...@messagingstrategy.com was undeliverable. The reason for the problem: 5.1.0 - Unknown address error 550-'5.7.1 Message rejected due to content restrictions' Final-Recipient:

Re: Apache client certificate authentication

2010-03-20 Thread Peter Sylvester
Wasn't there a pb with a great number of CA names? There are 16K already? The pb was in apache ad some of my three neurons seem to agree. https://issues.apache.org/bugzilla/show_bug.cgi?id=46952 /PS __ OpenSSL Project

Re: Apache client certificate authentication

2010-03-20 Thread Nuno Gonçalves
You are right. Looks ubuntu packages didn't get that update up to now. Thanks, Nuno 2010/3/20 Peter Sylvester peter.sylves...@edelweb.fr: Wasn't there a pb with a great number of CA names? There are 16K already? The pb was in apache  ad some of  my three neurons seem to agree.