Re: ITU X509/ RFC 3281 Attribute Certificates API Beta

2006-11-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 10 Oct 2006 11:35:30 +0200, "Daniel Diaz Sanchez" <[EMAIL PROTECTED]> said: dds> Hello, dds> dds> Some source code to generate attribute certificates using OpenSSL can be dds> found at: dds> dds> http://www.it.uc3m.es/dds/swRelease/pmi/pmi.xml dds> dd

Re: HTTPS security model

2006-12-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 5 Dec 2006 13:45:13 -0800, "David Schwartz" <[EMAIL PROTECTED]> said: davids> Authentication and authorization are the same thing. Generally speaking, that's incorrect, even if you might have a specific case where your statement applies. To take an example

Re: PMI patch for OpenSSH

2007-01-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Jan 2007 17:42:50 +0100, "Vincenzo Sciarra" <[EMAIL PROTECTED]> said: vincenzo.sciarra> I have just published a pre-alfa of a patch that has the goal to make vincenzo.sciarra> OpenSSH aware with PMI. vincenzo.sciarra> vincenzo.sciarra> Reference site :

[no subject]

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 11:34:22 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> The request to the MS CA needs the "enroll certtype extension" (OID mleuchtner> 1.3.6.1.4.1.311.20.2) where I put the name of the certificate template mleuchtner> in. mleu

Re: BMPSTRING in extensions

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 13:24:25 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> 362:d=6 hl=2 l= 51 cons: SEQUENCE mleuchtner> 364:d=7 hl=2 l= 9 prim: OBJECT:1.3.6.1.4.1.311.20.2 mleuchtner> 375:d=7 hl=2 l= 38 prim: OCTET STRING

Re: Can OpenSSL use the Linux crypto API?

2007-03-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 19 Mar 2007 14:28:57 -0800, Shane McDonald <[EMAIL PROTECTED]> said: Shane_McDonald> I have a hardware acceleration engine on a board for Shane_McDonald> which I've got a Linux device driver, but I don't have Shane_McDonald> an OpenSSL driver for the engin

Re: Permission to link OpenSSL

2005-07-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 26 Jul 2005 08:59:01 -0400, Charles Gagnon <[EMAIL PROTECTED]> said: charlesg> I help maintain wput, a command-line ftp-client that looks charlesg> like wget but instead of downloading, uploads files or whole charlesg> directories to remote ftp-servers (http

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 8 Aug 2005 20:32:09 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Can anyone tell me where can I find a library I need? johnnygonzalezl> I need the libncipher.so library, but I can't find johnnygonzalezl> it. Where should I look f

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 8 Aug 2005 22:16:13 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> I thought I only needed to download it somewhere in johnnygonzalezl> openssl sources or compile it and generate it.

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 00:24:50 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> Thanks a lot for your answer, however I have another johnnygonzalezl> question. johnnygonzalezl> johnnygonzalezl>

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 03:29:09 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Is this the same as that I need. My whole context is johnnygonzalezl> this: I have a CA software (OpenCA) which uses an HSM johnnygonzalezl> (nCipher), in some docs

Re: Can't to find .so libraries

2005-08-08 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 9 Aug 2005 03:45:01 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> > Hmm, maybe you should ask the OpenCA folks? They johnnygonzalezl> > may be counting on OpenSSL 0.9.8, which does indeed johnnygonzalezl> > contain that shared lib

Re: Can't to find .so libraries

2005-08-09 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 10 Aug 2005 03:27:23 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> > Hmm? It should, in the engines/ directory. johnnygonzalezl> Well, I don't know if I did it wrong, but I didn't johnnygonzalezl> find the libraries in the downloa

Re: Can't to find .so libraries

2005-08-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 10 Aug 2005 18:24:54 +0200 (CEST), Johnny Gonzalez <[EMAIL PROTECTED]> said: johnnygonzalezl> Hello Richard, johnnygonzalezl> johnnygonzalezl> I have just done it, a friend told me to add the johnnygonzalezl> shared option to the config command, like this:

Re: undefined references compiling demo program

2005-08-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Aug 2005 16:51:59 -0700, "Kevin L. King" <[EMAIL PROTECTED]> said: kevink> I installed OpenSSL 0.9.8 on Fedora in the default kevink> /usr/local/ssl directory. I tried compiling mkcert.c in the kevink> ../openssl-0.9.8/demos/x509 directory like this: kevi

Re: undefined symbol: X509_free

2005-08-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 30 Aug 2005 08:07:03 +0530, Toney Samuel <[EMAIL PROTECTED]> said: toney.samuel> i have downloaded openssl-0.9.8.tar.gz. I untared it then configured toney.samuel> it with these switches toney.samuel> ./config --prefix=/usr/local shared zlib-dynamic toney.s

Re: What does Outlook 2003 look for in a S/MIME cert?

2005-08-30 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 31 Aug 2005 07:11:28 +1200, Jason Haar <[EMAIL PROTECTED]> said: Jason.Haar> Richard Levitte wrote: Jason.Haar> Jason.Haar> > Jason Haar writes: Jason.Haar> > Jason.Haar> >> ... *IT CAN'T READ THE "SENT ITEMS" COPY OF THE EMAIL Jason.Haar> >> IT JUST SENT*

Re: Different versions of OpenSSL

2005-09-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 20 Sep 2005 13:49:12 -0300, "Cleidson" <[EMAIL PROTECTED]> said: cleidson> I use Linux 2.6.5, OpenSSL 0.9.7 and OpenVPN 2.0. cleidson> Now I want to use OpenVPN with OpenSSL 0.9.8, but keeping cleidson> other aplications using OpenSSL 0.9.7. cleidson> Someon

Re: AES test code

2005-09-21 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 21 Sep 2005 16:08:44 +0530, joseph k j <[EMAIL PROTECTED]> said: ark.papers> Why is there no unit test code available for AES, in ark.papers> crypto/aes. We use the newer EVP tester. See crypto/evp/evp_test.c and crypto/evp/evptests.txt. ark.papers> 1. I

Re: question on linking dynamic engines

2005-10-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 5 Oct 2005 21:25:34 -0700 (PDT), Anil Gunturu <[EMAIL PROTECTED]> said: anil_gunturu> How do I link the dynamic engine "so" and the library anil_gunturu> that the hardware vendor provides? For example, if I am anil_gunturu> using the ibmca engine in the demo

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 10:22:00 -0700, "David Schwartz" <[EMAIL PROTECTED]> said: davids> > I just tried to upgrade from openssl-0.9.7g to 0.9.7h davids> > and noticed that my openssh-4.2p1 server and clients now davids> > crash with segfault with the new openssl share

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 21:53:23 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> The patch to correct the problem is quite easy, though, and levitte> you can find it attached to this letter. That patch isn't enou

Re: Binary compatibility between 0.9.7g and 0.9.7h?

2005-10-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Oct 2005 22:08:35 +0200, "Matthias Buecher / Germany" <[EMAIL PROTECTED]> said: maddes.b> Do I have to apply this to 0.9.8a too? No, this is a 0.9.7h issue only. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.

Re: Licensing conditions in OpenSSL with proprietary software

2005-10-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 13 Oct 2005 11:15:33 +0500, "ahmad hassan" <[EMAIL PROTECTED]> said: guideveloper123> I am using OpenSSL as a static library with my guideveloper123> proprietary software for windows OS. I would like to guideveloper123> know what steps exactly i have to do p

[ANNOUNCE] OpenSSL version 0.9.7i released

2005-10-14 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.7i released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 0.9.7h caused crashes when the shared libcrypto was upgraded. This release fixes that pr

Re: ECB, CBC, CFB, OFB, and when and where you would use them.

2005-10-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 18 Oct 2005 09:31:44 -0400, David Gianndrea <[EMAIL PROTECTED]> said: dgianndrea> I wonder if some one could point me to some high level dgianndrea> document that would describe where, and when you would use dgianndrea> ECB, CBC, CFB, OFB modes. I have some

Re: E-mail address changed

2005-11-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 3 Nov 2005 10:01:01 +0200 (EET), Kande Kande <[EMAIL PROTECTED]> said: pierrekande> My e-mail address is changed to [EMAIL PROTECTED] pierrekande> The e-mail [EMAIL PROTECTED] is not longer available Please resubscribe from your new address. Your old one

Re: unable to free PROXY_CERT_INFO_EXTENSION

2005-12-02 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 02 Dec 2005 12:09:14 -0800, Matthew Rodriguez DSD staff <[EMAIL PROTECTED]> said: MKRodriguez> I can't seem to get rid of a memory leak when I create a MKRodriguez> proxyCertInfo extension. I've tried calling MKRodriguez> X509_EXTENSION_free, and then X509_E

Re: unable to free PROXY_CERT_INFO_EXTENSION

2005-12-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 05 Dec 2005 11:43:40 -0800, Matthew Rodriguez DSD staff <[EMAIL PROTECTED]> said: MKRodriguez> #include MKRodriguez> #include MKRodriguez> #include MKRodriguez> static char * pci_value = "critical, language:Inherit all"; MKRodriguez> MKRodriguez> int MK

Re: proxyCertInfo

2006-01-02 Thread Richard Levitte - VMS Whacker
In message on Tue, 3 Jan 2006 00:33:45 +0100, [EMAIL PROTECTED] said: mailinglists> I *have* read the RFC 3820 and the mailinglists> doc/HOWTO/proxy_certificates.txt, however I am still not mailinglists> sure about: mailinglists> mailinglists> - the language field: can someone explain the diffe

Re: Problem upgrading to 0.9.8a

2006-01-05 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 5 Jan 2006 11:37:40 -0500, Dan Peacock <[EMAIL PROTECTED]> said: bluedanunit> We have an application that is currently using OpenSSL bluedanunit> 0.9.6c in conjunction with an Apache server. We've been bluedanunit> told we should upgrade the libaries to 0.

Re: what exactly is the difference between ssl and ssh (secure shell)?

2006-01-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 19 Jan 2006 11:03:09 -0800, "Chong Peng" <[EMAIL PROTECTED]> said: ChongPeng> if you google "ssl and ssh", you will find a few pages ChongPeng> regarding this issue, such as: ChongPeng> ChongPeng> http://www.snailbook.com/faq/ssl.auto.html ChongPeng> http:/

Re: IPR Infringement Lawsuites

2006-02-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 20 Feb 2006 20:26:22 +0100, "Roger Boden" <[EMAIL PROTECTED]> said: roger_no_spam> Are there any known IPR infringement lawsuits as result roger_no_spam> of using or including openssl in a product? None that I know of. And honestly, if there had been a law

Re: porting to QNX4

2006-03-12 Thread Richard Levitte - VMS Whacker
In which OpenSSL versions have you tested this? Cheers, Richard In message <[EMAIL PROTECTED]> on Sun, 12 Mar 2006 12:19:27 +0300, kbob kbob <[EMAIL PROTECTED]> said: kbob_ru> Under QNX4 kbob_ru> kbob_ru> and I use in Configure: kbob_ru> "qnx4", "cc:-DL_ENDIAN -DTERMIO -DNO_STRINGS_H::(unknow

Re: Updating OPENSSL

2006-03-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 18 Mar 2006 02:27:18 -0500, "Hector Santos" <[EMAIL PROTECTED]> said: ssluser> I have multiple applications using OPENSSL 0.9.7c and I'm finally getting ssluser> around to updating it. ssluser> ssluser> I have downloaded and recompiled the *eay*.dll files

Re: pod2man: not found

2006-03-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 20 Mar 2006 14:05:15 -0700, "Ting Feng" <[EMAIL PROTECTED]> said: fengtingting2001> ./pod2mantest: pod2man: not found fengtingting2001> pod2man does not work properly('BasicTest' failed). Looking for another fengtingting2001> pod2man ... fengtingting2001> N

Re: HSM/engine/SmartCard for OpenVMS

2006-03-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 26 Mar 2006 00:51:54 +0100, Francesco Gennai <[EMAIL PROTECTED]> said: francesco.gennai+openssl> I need to sign e-mail messages in OpenVMS francesco.gennai+openssl> environment by a signing device (SmartCard, francesco.gennai+openssl> HSM, other...) francesc

Re: HSM/engine/SmartCard for OpenVMS

2006-03-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 26 Mar 2006 20:22:48 +0200, Francesco Gennai <[EMAIL PROTECTED]> said: francesco.gennai+openssl> thank you for the pointers. You're welcome. francesco.gennai+openssl> Now we need to move the private key to a francesco.gennai+openssl> signing device. Uhmm,

Re: [BUG] Installation problem on cygwin

2006-04-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 03 Apr 2006 10:22:26 +0200, Yann Coscoy <[EMAIL PROTECTED]> said: Yann.Coscoy> Technical Description: Yann.Coscoy> The script 'Configure' (line 1253) uses 'chop' function Yann.Coscoy> to suppress end-of-line characters. Unfortunalety under Yann.Coscoy> cygwi

Re: Licenses...

2006-04-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 09 Apr 2006 11:04:12 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tyler> I think that these programmers could be more happy and productive tyler> and get back to moving our planet forward if they didn't have tyler> to spend so much time thinking about li

Re: Licenses...

2006-04-11 Thread Richard Levitte - VMS Whacker
OK, boys and girls, however much I actually enjoy discussing the intricaties of licenses out the wazoo, I don't think a discussion on how to interpret the GPL belongs in this list. Let's move along, shall we? Cheers, Richard - Please consider sponsoring my work on free software. See http://

Re: Licenses...

2006-04-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 11 Apr 2006 14:51:58 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tyler> However, the descussion about how OpenSSL should interact with tyler> GPL software has been quite valuable. Yes, I entirely agree with you on that. Cheers, Richard - Please

Re: Patch Openssl

2006-04-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 12 Apr 2006 07:10:23 -0700 (PDT), "Sara978 (sent by Nabble.com)" <[EMAIL PROTECTED]> said: lists> gzip -cd ts-20060225-0_9_8a-patch.gz | patch -p1 lists> lists> but I have this error: lists> lists> ts-20060225-0_9_8a-patch.gz: not in gzip format lists> pat

Re: Licenses...

2006-04-12 Thread Richard Levitte - VMS Whacker
Hi Jeffrey, long time! In message <[EMAIL PROTECTED]> on Mon, 10 Apr 2006 22:28:22 -0400, Jeffrey Altman <[EMAIL PROTECTED]> said: jaltman> Tyler MacDonald wrote: jaltman> jaltman> > And it's not always even that simple: for example, the jaltman> > freeradius project's postgresql plugin li

Re: Patch Openssl

2006-04-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 13 Apr 2006 01:03:15 -0700 (PDT), "Sara978 (sent by Nabble.com)" <[EMAIL PROTECTED]> said: lists> TEST 5: lists> bash-3.00$ patch -p1 lists> can't find file to patch at input line 5 lists> Perhaps you used the wrong -p or --strip option? lists> The text le

Re: Licenses...

2006-04-14 Thread Richard Levitte - VMS Whacker
Oi, you're quite the speaker, aren't ya? In message <[EMAIL PROTECTED]> on Fri, 14 Apr 2006 17:28:47 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> OpenSSL needs to stick with the license that most closely tedm> reflects the philosophy of it's authors. That is, right now, an tedm> "a

Re: Licenses...

2006-04-15 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 14 Apr 2006 22:29:12 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> Binary distributions have one purpose - to boot up the system so tedm> you can get a full source tree on it and start building! It's tedm> no fun otherwise! :-) You know, if tha

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 15 Apr 2006 12:44:33 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> If the OpenSSL authors (you included) wanted to change the tedm> license you all would have done so, it's not like you don't have tedm> write access to the source and cannot chang

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 11:52:33 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tylerm> Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> wrote: tylerm> > And here, you pretend to know everything that's going on behind the tylerm> &

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 15:48:16 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> Since SSLeay is part of OpenSSL, Eric Young is by definition tedm> an OpenSSL author. That's a matter of definition, and I don't agree. Eric hasn't written one byte of OpenSSL

Re: Licenses...

2006-04-17 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 17:02:49 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> >Not at all, I spoke for myself (I do believe I said that tedm> >clearly enough), and only reported what I have seen happening tedm> >within the group. tedm> tedm> Which isn't re

Re: Licenses...

2006-04-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 17 Apr 2006 21:51:10 -0700, "Ted Mittelstaedt" <[EMAIL PROTECTED]> said: tedm> >If your point is that the "openssl authors" don't want to tedm> >change the license because Eric (presumably) doesn't want to tedm> >change the license, then there is nowhere lef

Re: Use of Makefile.ssl

2006-04-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 19 Apr 2006 11:15:47 +0530, "Bhat, Jayalakshmi Manjunath" <[EMAIL PROTECTED]> said: jayalakshmi.bhat> In openssl-0.9.8a I am not finding jayalakshmi.bhat> Makefile.ssl file. Please can you tell me They're called Makefile nowadays. We realised that it

Re: libcrypto.a

2006-04-27 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 27 Apr 2006 13:59:59 +0200, "Saurabh Arora" <[EMAIL PROTECTED]> said: tanish2k> Thankyou openssl group for your overwhelming, ZERO help support. You know, you sent the first mail about 24 hours ago, and you seem to expect the kind of support you'd normally

Re: [ANNOUNCE] OpenSSL version 0.9.8b and 0.9.7j released

2006-05-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 4 May 2006 17:14:01 -0700, Randy Turner <[EMAIL PROTECTED]> said: rturner> Is there a brief on the reasons why someone would want to use rturner> OpenSSL 0.9.7j or choose to use 0.9.8b? There are two answers to that. You nailed one of them: rturner> I be

Re: [ANNOUNCE] OpenSSL version 0.9.8b and 0.9.7j released

2006-05-04 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 05 May 2006 02:25:57 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: richard> In message <[EMAIL PROTECTED]> on Thu, 4 May 2006 17:14:01 -0700, Randy Turner <[EMAIL PROTECTED]> said: richard> richard>

Re: BIO_new_mem_buf() doesn't work after RSA_private_decrypt() failure.

2006-06-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 20 Jun 2006 21:16:49 +0900, Tatsuya Tsurukawa <[EMAIL PROTECTED]> said: Tsurukawa.Tatsuya> bioPtr = BIO_new_mem_buf( InputPEMstring, -1 ); Tsurukawa.Tatsuya> : Tsurukawa.Tatsuya> prvkey = PEM_read_bio_RSAPrivateKey( bioPtr, NULL, NULL, NULL ); Tsurukawa.T

Re: BIO_new_mem_buf() doesn't work after RSA_private_decrypt() failure.

2006-06-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 21 Jun 2006 10:44:33 +0900, Tatsuya Tsurukawa <[EMAIL PROTECTED]> said: Tsurukawa.Tatsuya> It seems I need to clear error queue after private Tsurukawa.Tatsuya> decryption error, but does the status of error Tsurukawa.Tatsuya> queue actually affect to the be

Re: obj_mac.num

2006-06-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 23 Jun 2006 17:03:53 +0530, "Bhat, Jayalakshmi Manjunath" <[EMAIL PROTECTED]> said: jayalakshmi.bhat> I went through objects.README. But I did not understand the jayalakshmi.bhat> obj_mac.num and objects.txt files use clearly. Where do I get more inf

Re: Can we tailor openSSL?

2006-07-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 19 Jul 2006 07:46:19 +0800, "Bo Xie" <[EMAIL PROTECTED]> said: xiebopublic> Does openSSL licence permit to tailor openSSL? e.g., we only need the xiebopublic> SHA-512 algorithm, so we want to tailor openSSL to only include this xiebopublic> algorithm in or

Re: Problem with Blowfish decryption

2006-08-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 03 Aug 2006 09:03:42 +0200, Andreas von Linden <[EMAIL PROTECTED]> said: Buglist> i have a problem with the Blowfish algorithm. When i encrypt a long Buglist> message i get the following error when i try to decrypt the message: Buglist> Buglist> 4156:error:

Re: Proxy Certs and security

2006-08-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 3 Aug 2006 14:20:50 -0500, Andrew White <[EMAIL PROTECTED]> said: aewhite> I was wondering what the general consensus was on proxy certs aewhite> and their security risks. I noticed this in the how-to, aewhite> "Noone seems to have tested proxy certificates

Re: license question

2006-08-22 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 22 Aug 2006 18:47:12 +0200, Richard Koenning <[EMAIL PROTECTED]> said: Richard.Koenning> Ryan Shon wrote: Richard.Koenning> Richard.Koenning> > My boss hopes to sell this OpenSSL variant as a Richard.Koenning> > product. Because of this, he would not want

Re: related license question

2006-08-22 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 22 Aug 2006 15:07:31 -0400, Ryan Shon <[EMAIL PROTECTED]> said: rshon> Presumably, a program, e.g. a web browser, could be written rshon> which uses OpenSSL (whether through linking to the libraries or rshon> by including actual pieces of OpenSSL code), and

Re: Newbie Needs Help!!!

2006-09-27 Thread Richard Levitte - VMS Whacker
Hi Dan, In message <[EMAIL PROTECTED]> on Mon, 25 Sep 2006 09:50:32 -0600, Dan O'Reilly <[EMAIL PROTECTED]> said: dano> My CA is another system (Windows) and I requested it to create dano> the trusted root certificate in PKCS7 format, which I copied to dano> my VMS system. I can use OPENSSL PKC

Re: rewriting Subject to make O=CN?

2006-09-28 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 29 Sep 2006 01:31:32 -0400, Iljun Kim <[EMAIL PROTECTED]> said: ij> I'd like to make the "O" equal to the "CN" while sign the CSR. ij> For example, if the Subject was ij> "C=US, O=Example Company, CN=www.example.com", ij> I'd like to issue a cert with

Re: does OpenSSL support AES ?

2003-12-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 26 Dec 2003 11:04:57 +0900, "Masiko, Naoki" <[EMAIL PROTECTED]> said: xNaoki.Masiko> Hello there. xNaoki.Masiko> I have a question about OpenSSL. xNaoki.Masiko> xNaoki.Masiko> Does OpenSSL support AES algorism? Yes. xNaoki.Masiko> and How use? As stated

Re: Kerberos support?

2004-01-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 6 Jan 2004 13:26:09 -0500, Jeff Fulmer <[EMAIL PROTECTED]> said: jeff> I'm the author of siege, an open source http regression tester. I jeff> recently started to recieve complaints from users on Red Hat 9.0 jeff> systems. Apparently openssl is built with

Re: Question about #defines

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Jan 2004 10:45:49 -0700, "Doug Smith" <[EMAIL PROTECTED]> said: doug> Is there any documentation on what some of the #defines in the source do? doug> For example, what are these for: doug> doug> doug> doug> OPENSSL_NO_SHA doug> doug>

Re: Win32 OpenSSL Updates/Announcements...

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 13 Jan 2004 08:00:57 -0500, "John S. Wolter" <[EMAIL PROTECTED]> said: johnswolter> Thank you for the Win32 information, I just joined the johnswolter> list and had assumed Win32 announcements would be johnswolter> included but I guess I'll have to join the

Re: OpenSSL file destinations

2004-01-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 13 Jan 2004 09:19:26 -0500, "John S. Wolter" <[EMAIL PROTECTED]> said: johnswolter> I've downloaded the latest OpenSSL and I'm going to johnswolter> target an already installed SUSE 8.1 for testing and then johnswolter> build a 9.0 system. I've noticed that

Re: [michellinhaggd@uol.com.br: OpenSSL's Installation]

2004-01-14 Thread Richard Levitte - VMS Whacker
> - Forwarded message from michellinhaggd <[EMAIL PROTECTED]> - >I am in trouble. I tried to > intall openvpn. > I installed OpenSSl: > > version: openssl-1.5.0 > > I did:(I believe that was a "hardware" > problem so try) > > #./configure linux-pentium thread shared > #make > #ma

Re: [michellinhaggd@uol.com.br: OpenSSL's Installation]

2004-01-14 Thread Richard Levitte - VMS Whacker
A small correction: in all places where I've written 'include/openssl', it should really say 'include': In message <[EMAIL PROTECTED]> on Wed, 14 Jan 2004 10:34:36 +0100 (CET), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> &g

Re: Email-Entries in Certificates

2004-01-14 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 14 Jan 2004 14:23:46 +0100, Olaf Gellert <[EMAIL PROTECTED]> said: og> I just came across some significant change between og> openssl 0.9.6 and openssl 0.9.7 (at least I compared og> openssl 0.9.6k and 0.9.7c): When I print a DN containing og> an Email-Addre

Re: unable to load certificate: Expecting: TRUSTED CERTIFICATE

2004-02-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 3 Feb 2004 14:18:45 +0100 , Kohler Benjamin <[EMAIL PROTECTED]> said: Benjamin.Kohler> Hi, Benjamin.Kohler> I have problems with sign a certificate. Benjamin.Kohler> Benjamin.Kohler> I do it with the following command: Benjamin.Kohler> openssl ca -name CA_

Re: How to enable Debug mode for OpenSSL? Is there a need to change CC to gcc ?

2004-02-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 3 Feb 2004 11:45:13 +0530, "murugesan" <[EMAIL PROTECTED]> said: mukeshgct> I need to enable debug mode for OpenSSL. How can I mukeshgct> achieve this. There is no such option for Configure. Try './config -d'. If there's a debug target for your platfor

Re: problems compiling openssl-0.9.7c/libgcc-3.3

2004-02-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 18 Feb 2004 18:49:35 +, <[EMAIL PROTECTED]> said: luciusm> Ran "truss -o /tmp/truss.out -aelf -rall -vall -wall make" luciusm> luciusm> command and attached the output, hoping you guys could help luciusm> me decipher the output errors. I think you wan

Re: Regarding all the spam...

2004-02-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 24 Feb 2004 13:32:40 +0100, Mads Toftum <[EMAIL PROTECTED]> said: mads> On Tue, Feb 24, 2004 at 01:27:05PM +0100, Richard Levitte - VMS Whacker wrote: mads> > mads> > I think I misunderstood that question. I honestly don't

Re: Regarding all the spam...

2004-02-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 24 Feb 2004 12:59:37 +0100, "Lyngmo Ted" <[EMAIL PROTECTED]> said: ted.lyngmo> Is it possible to post messages to the mailing list ted.lyngmo> without being a member? Yes, openssl-users is completely open. ted.lyngmo> If so, what would we lose by changing

Re: Regarding all the spam...

2004-02-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 24 Feb 2004 12:59:37 +0100, "Lyngmo Ted" <[EMAIL PROTECTED]> said: ted.lyngmo> If so, what would we lose by changing that? I think I misunderstood that question. I honestly don't know what we would lose. Maybe a sense of openness. - Please consider s

Re: Regarding all the spam...

2004-02-24 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 24 Feb 2004 13:54:57 +0100, Mads Toftum <[EMAIL PROTECTED]> said: mads> On Tue, Feb 24, 2004 at 01:40:03PM +0100, Richard Levitte - VMS Whacker wrote: mads> > mads> get someone to moderate the list - problem solved. mads> > ma

Re: How to extend the validity of a certificate

2004-02-26 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 26 Feb 2004 12:43:12 +0100, Andreas Feldner <[EMAIL PROTECTED]> said: feldner> I'm wondering what to do to extend the validity of the feldner> certificate of sort-of a sub-CA. Currently, I'm using the feldner> openssl ca command. The current certificate expi

Re: encrypt with RSA public key!

2004-02-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 28 Feb 2004 15:55:10 +0800, "todayhill" <[EMAIL PROTECTED]> said: todayhill> encrypt with RSA public key! todayhill> but my public key come from a buffer,like char* buf,how can I use this buf encrypt my data?I know maybe use RSA struct,so how can I use that

Re: RSA_dup

2004-02-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 28 Feb 2004 00:16:39 -0800 (PST), "S.Mehdi Sheikhalishahi" <[EMAIL PROTECTED]> said: sm_justice> Hi All sm_justice> I want to have a function that get an RSA* and return sm_justice> a newly allocated RSA structure. sm_justice> RSA* RSA_new(RSA*); sm_justice

Re: STACK

2004-02-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 28 Feb 2004 22:50:57 -0800 (PST), "S.Mehdi Sheikhalishahi" <[EMAIL PROTECTED]> said: sm_justice> Hi Group sm_justice> I want to use sk_pop to retreive the last item in sm_justice> stack I want to know that the what's the length of the sm_justice> returned c

Re: BER Format ?

2004-02-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 01 Mar 2004 15:30:31 +0800, "Surrealistic Dreamer" <[EMAIL PROTECTED]> said: surrealistic_dreamer> I need to convert the PEM X509 certificate to surrealistic_dreamer> the BER format ... can anybody tell me how to do surrealistic_dreamer> this using the OpenS

Re: Using 2 or more engines

2004-03-02 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 2 Mar 2004 16:58:29 +0100, "Giovanni Calzuola" <[EMAIL PROTECTED]> said: giovanni.calzuola> I'd like to use 2 or more engines without using the giovanni.calzuola> functions ENGINE_set_default, due to problems of giovanni.calzuola> concurrency. I want to sign

Re: Windows Installation Walkthrough

2004-03-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 04 Mar 2004 00:34:30 -0500, "Thomas J. Hruska" <[EMAIL PROTECTED]> said: shinelight> The link is on the OpenSSL.org site...just kind of tucked away: shinelight> shinelight> http://www.openssl.org/related/binaries.html shinelight> shinelight> A lot of peopl

Re: custom stuff in a certificate

2004-03-06 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 6 Mar 2004 01:40:14 -0700, Joseph Bruni <[EMAIL PROTECTED]> said: brunij> I'm working on a server that will handle connections from brunij> clients on two different interfaces -- a public interface and brunij> a private. What I would like to do is somehow en

Re: ENGINE_load_private_key

2004-03-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 10 Mar 2004 09:06:36 -0800 (PST), Josh Winkle <[EMAIL PROTECTED]> said: securesockets2004> I was wondering what is the purpose of the ui_method securesockets2004> and callback_data arguments to this function. This is securesockets2004> what I want to do: sec

Re: where is crytpo library AES man page?

2004-03-11 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 11 Mar 2004 22:12:28 -0600 (CST), Xinwen Fu <[EMAIL PROTECTED]> said: xinwenfu> I'm trying to use AES functions in openssl's crypto xinwenfu> library and installed openssl-0.9.7c. xinwenfu> xinwenfu> But I could not find man pages for those AES

Re: EVP_PKEY

2004-03-13 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 13 Mar 2004 05:11:27 -0800 (PST), "S.Mehdi Sheikhalishahi" <[EMAIL PROTECTED]> said: sm_justice> How can I get the RSA key of a EVP_PKEY. What version of OpenSSL? In OpenSSL 0.9.7{x}, there's the function EVP_PKEY_get1_RSA(). - Please consider sponso

Re: New CA index subfiles (.attr, .attr.new, .attr.old, .new)

2004-03-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Mar 2004 11:33:07 +1100, "Steven Reddie" <[EMAIL PROTECTED]> said: smr> Hi Richard, smr> smr> I'm confused by changes to the "openssl ca" command changes in 0.9.7d that smr> now spit out several CA index files. Previously we got a single index.txt smr>

Re: New CA index subfiles (.attr, .attr.new, .attr.old, .new)

2004-03-18 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Mar 2004 14:31:55 +1100, "Steven Reddie" <[EMAIL PROTECTED]> said: smr> Hi Richard, smr> smr> Ah, that's the problem then. The .new file is remaining and the smr> contents aren't being rolled into the index.txt file. All I've smr> done is upgrade from

Re: binaries built with openssl 0.9.7b running on openssl 0.9.6b or 0.9.6g

2004-03-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Mar 2004 10:52:21 -0600, Mark Rowe <[EMAIL PROTECTED]> said: rowe> If I build applications using a later version of rowe> openssl and run the compiled binaries on an rowe> operating system with earlier versions of openssl rowe> will there be any problems?

Re: binaries built with openssl 0.9.7b running on openssl 0.9.6b or 0.9.6g

2004-03-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Mar 2004 17:57:55 -0700, Joseph Bruni <[EMAIL PROTECTED]> said: brunij> If you build your application on OS X or Darwin, you'll run into the brunij> really nasty problem where the LinkEditor will bind your app to shared brunij> libraries even if you spe

Re: /dev/random

2004-03-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 20 Mar 2004 02:28:01 -0600, "Vu Pham" <[EMAIL PROTECTED]> said: vu> I run the following function on Solaris x86 and Linux (RH9) vu> RAND_load_file("/dev/random", 2048) vu> vu> On the Solaris x86 ( AMD 2700+) , it takes less than 1 second. vu> On the RH9 ( A

Re: how to generate one rsa key which size is 256 or less than 256

2004-03-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 24 Mar 2004 13:37:06 +0800, "linux guy" <[EMAIL PROTECTED]> said: linuxguy> thx,I am sorry for that i misdescribe my problem,the linuxguy> fact is that I can generate 256 RSA key,but I can't create linuxguy> certificate with this key,the wrong mesg is as bel

Re: Problems with CA certificate

2004-03-27 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 27 Mar 2004 16:05:52 -0500, Ohaya <[EMAIL PROTECTED]> said: ohaya> Hi, ohaya> ohaya> I'm trying to work with getting a CA cert installed. ohaya> ohaya> I downloaded it using IE, and ended up with a .CER file, but in Windows, ohaya> when I click on the .CE

Re: order of extensions

2004-03-29 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 29 Mar 2004 16:55:27 +0200 (MEST), "Claus Nagel" <[EMAIL PROTECTED]> said: claus-nagel> hi, is there a certain order, in which for example claus-nagel> extensions have to appear in the asn-code of a claus-nagel> acertificate? do basicConstraints for example

  1   2   3   4   5   6   7   8   >