tag:old.nabble.com,2006:forum-977Nabble - OpenSCEP2009-07-15T00:04:15Z<a href="http://openscep.othello.ch/" target="_top" rel="nofollow">OpenSCEP</a> is an open source implementation of the SCEP protocol used by Cisco routers for certificate enrollment to build VPNs. It implements most of the draft specification, include as reference in the distribution.tag:old.nabble.com,2006:post-24493273Re: OpenSCEP & OS X Server & iPhones?2009-07-15T00:04:15Z2009-07-15T00:04:15ZAndreas Mueller-9Quoting Jakob Peterhänsel <<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=24493273&i=0" target="_top" rel="nofollow">jap@...</a>>:
<br>> Just found OpenSCEP and this list after reading up on Enterprice
<br>> features on the new iPhone OS 3.0
<br>> It allowes for provisioning via SCEP, so I would like to dig into that.
<br>>
<br>> I just downloaded the latest release, abut it fails to compile on a
<br>> standard OS X 10.5.7 client - anyone have any clues?
<br>> Here is the output of ./configure & make:
<br>OpenSCEP has not been worked on for a long time. It comes from a
<br>time when openssl did not even provide some of the message formats
<br>that SCEP requires. Lots of things could probably be removed completely
<br>today. However, I don't expect to find the time anything soon to
<br>work on it.
<br><br>However: isn't SCEP dead anyway since MD5 has been essentially
<br>broken?
<br><br>Best regards
<br><br>Andreas
<br><br>--
<br>Prof. Dr. Andreas Mueller
<br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=24493273&i=1" target="_top" rel="nofollow">andreas.mueller@...</a>
<br>Bubental 53, 8852 Altendorf
<br>Voice: +41 55 4621481 Fax/Data: +41 55 4621485
<br><br><br>tag:old.nabble.com,2006:post-24483294OpenSCEP & OS X Server & iPhones?2009-07-14T08:56:45Z2009-07-14T08:56:45ZJakob Peterhänsel-2<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi All,<div><br></div><div>Just found OpenSCEP and this list after reading up on Enterprice features on the new iPhone OS 3.0</div><div>It allowes for provisioning via SCEP, so I would like to dig into that.</div><div><br></div><div>I just downloaded the latest release, abut it fails to compile on a standard OS X 10.5.7 client - anyone have any clues?</div><div>Here is the output of ./configure & make:</div><div><br></div><div><div><b>JAP.local [openscep-0.4.2] >./configure </b></div><div>checking build system type... i386-apple-darwin9.7.0</div><div>checking host system type... i386-apple-darwin9.7.0</div><div>checking target system type... i386-apple-darwin9.7.0</div><div>checking for a BSD compatible install... /usr/bin/install -c</div><div>checking whether build environment is sane... yes</div><div>checking whether make sets ${MAKE}... yes</div><div>checking for working aclocal... found</div><div>checking for working autoconf... found</div><div>checking for working automake... found</div><div>checking for working autoheader... found</div><div>checking for working makeinfo... found</div><div>checking for gcc... gcc</div><div>checking for C compiler default output... a.out</div><div>checking whether the C compiler works... yes</div><div>checking whether we are cross compiling... no</div><div>checking for executable suffix... </div><div>checking for object suffix... o</div><div>checking whether we are using the GNU C compiler... yes</div><div>checking whether gcc accepts -g... yes</div><div>checking for a BSD compatible install... /usr/bin/install -c</div><div>checking for mv... /bin/mv</div><div>checking for ldapsearch... /usr/bin/ldapsearch</div><div>checking for ldapsearch... /usr/bin/ldapsearch</div><div>checking for openssl... /usr/bin/openssl</div><div>checking for gethostbyname in -lnsl... no</div><div>checking for socket in -lsocket... no</div><div>checking for res_query in -lresolv... yes</div><div>checking for ber_init in -llber... yes</div><div>checking for ldap_init in -lldap... yes</div><div>checking for date... /bin/date</div><div>checking for pkgmk... no</div><div>checking for rpm... no</div><div>checking for perl... /usr/bin/perl</div><div>checking "whether we have the altzone global variable"... no</div><div>checking for ld used by GCC... /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld</div><div>checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no</div><div>checking for /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld option to reload object files... -r</div><div>checking for BSD-compatible nm... /usr/bin/nm -p</div><div>checking whether ln -s works... yes</div><div>checking how to recognise dependant libraries... file_magic Mach-O dynamically linked shared library</div><div>checking command to parse /usr/bin/nm -p output... rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>ok</div><div>checking how to run the C preprocessor... gcc -E</div><div>checking for dlfcn.h... yes</div><div>checking for ranlib... ranlib</div><div>checking for strip... strip</div><div>checking for objdir... .libs</div><div>checking for gcc option to produce PIC... -fno-common</div><div>checking if gcc PIC flag -fno-common works... yes</div><div>checking if gcc static flag -static works... no</div><div>checking if gcc supports -c -o file.o... yes</div><div>checking if gcc supports -c -o file.lo... yes</div><div>checking if gcc supports -fno-rtti -fno-exceptions... yes</div><div>checking whether the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) supports shared libraries... yes</div><div>checking how to hardcode library paths into programs... unsupported</div><div>checking whether stripping libraries is possible... no</div><div>checking dynamic linker characteristics... darwin9.7.0 dyld</div><div>checking if libtool supports shared libraries... yes</div><div>checking whether to build shared libraries... yes</div><div>checking whether to build static libraries... yes</div><div>checking for shl_load... no</div><div>checking for shl_load in -ldld... no</div><div>checking for dlopen... yes</div><div>checking whether a program can dlopen itself... yes</div><div>checking whether a statically linked program can dlopen itself... yes</div><div>creating libtool</div><div>checking for dlopen in -ldl... yes</div><div>checking for ANSI C header files... rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>yes</div><div>checking whether byte ordering is bigendian... no</div><div>checking for strdup... yes</div><div>configure: creating ./config.status</div><div>config.status: creating Makefile</div><div>config.status: creating include/Makefile</div><div>config.status: creating lib/Makefile</div><div>config.status: creating scep/Makefile</div><div>config.status: creating scepd/Makefile</div><div>config.status: creating cgi-bin/Makefile</div><div>config.status: creating ldap/Makefile</div><div>config.status: creating openssl/Makefile</div><div>config.status: creating doc/Makefile</div><div>config.status: creating html/Makefile</div><div>config.status: creating man/Makefile</div><div>config.status: creating package/Makefile</div><div>config.status: creating rpm/Makefile</div><div>config.status: creating config.sh</div><div>config.status: creating include/config.h</div><div>configure: configuring in libltdl</div><div>configure: running /bin/ksh './configure' --enable-ltdl-convenience --cache-file=/dev/null --srcdir=.</div><div>loading cache /dev/null</div><div>checking for a BSD compatible install... /usr/bin/install -c</div><div>checking whether build environment is sane... yes</div><div>checking whether make sets ${MAKE}... yes</div><div>checking for working aclocal... found</div><div>checking for working autoconf... found</div><div>checking for working automake... found</div><div>checking for working autoheader... found</div><div>checking for working makeinfo... found</div><div>checking whether to enable maintainer-specific portions of Makefiles... no</div><div>checking for gcc... gcc</div><div>checking whether the C compiler (gcc ) works... yes</div><div>checking whether the C compiler (gcc ) is a cross-compiler... no</div><div>checking whether we are using GNU C... yes</div><div>checking whether gcc accepts -g... yes</div><div>checking for working const... yes</div><div>checking for inline... inline</div><div>checking host system type... i386-apple-darwin9.7.0</div><div>checking build system type... i386-apple-darwin9.7.0</div><div>checking for ranlib... ranlib</div><div>checking for ld used by GCC... /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld</div><div>checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no</div><div>checking for BSD-compatible nm... /usr/bin/nm -p</div><div>checking whether ln -s works... yes</div><div>updating cache /dev/null</div><div>loading cache /dev/null within ltconfig</div><div>checking for object suffix... o</div><div>checking for executable suffix... rm: conftest.dSYM: is a directory</div><div>.dSYM</div><div>checking for gcc option to produce PIC... -fPIC</div><div>checking if gcc PIC flag -fPIC works... rm: conftest.dSYM: is a directory</div><div>yes</div><div>rm: conftest.dSYM: is a directory</div><div>checking if gcc supports -c -o file.o... yes</div><div>checking if gcc supports -c -o file.lo... rm: conftest.dSYM: is a directory</div><div>yes</div><div>rm: conftest.dSYM: is a directory</div><div>checking if gcc supports -fno-rtti -fno-exceptions ... rm: conftest.dSYM: is a directory</div><div>no</div><div>rm: conftest.dSYM: is a directory</div><div>checking if gcc static flag -static works... rm: conftest.dSYM: is a directory</div><div>none</div><div>rm: conftest.dSYM: is a directory</div><div>checking if the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) is GNU ld... no</div><div>checking whether the linker (/usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld) supports shared libraries... no</div><div>checking command to parse /usr/bin/nm -p output... rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>rm: conftest.dSYM: is a directory</div><div>ok</div><div>checking how to hardcode library paths into programs... unsupported</div><div>checking for /usr/libexec/gcc/i686-apple-darwin9/4.0.1/ld option to reload object files... -r</div><div>checking dynamic linker characteristics... no</div><div>checking if libtool supports shared libraries... no</div><div>checking whether to build shared libraries... no</div><div>checking whether to build static libraries... yes</div><div>checking for objdir... .libs</div><div>creating libtool</div><div>updating cache /dev/null</div><div>loading cache /dev/null</div><div>checking which extension is used for shared libraries... </div><div>checking which variable specifies run-time library path... </div><div>checking for objdir... </div><div>checking how to run the C preprocessor... rm: conftest.dSYM: is a directory</div><div>gcc -E</div><div>checking for ANSI C header files... yes</div><div>checking for malloc.h... no</div><div>checking for memory.h... yes</div><div>checking for stdlib.h... yes</div><div>checking for stdio.h... yes</div><div>checking for ctype.h... yes</div><div>checking for dlfcn.h... yes</div><div>checking for dl.h... no</div><div>checking for dld.h... no</div><div>checking for string.h... yes</div><div>checking for strchr... yes</div><div>checking for strrchr... yes</div><div>checking whether libtool supports -dlopen/-dlpreopen... no</div><div>checking for dlopen in -ldl... yes</div><div>checking for shl_load... no</div><div>checking for shl_load in -ldld... no</div><div>checking for dld_link in -ldld... no</div><div>checking for dlerror... yes</div><div>checking command to parse /usr/bin/nm -p output... yes</div><div>checking for _ prefix in compiled symbols... (cached) yes</div><div>checking whether we have to add an underscore for dlsym... no</div><div>updating cache /dev/null</div><div>creating ./config.status</div><div>creating Makefile</div><div>creating config.h</div><div><br></div><div><b>JAP.local [openscep-0.4.2] >make</b></div><div>Making all in libltdl</div><div>/bin/ksh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -c ltdl.c</div><div>./libtool[727]: test: argument expected</div><div>gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -c ltdl.c -o ltdl.o</div><div>echo timestamp > ltdl.lo</div><div>/bin/ksh ./libtool --mode=link gcc -g -O2 -o libltdlc.la ltdl.lo -ldl </div><div>mkdir .libs</div><div>rm -fr .libs/libltdlc.la .libs/libltdlc.* .libs/libltdlc.*</div><div>ar cru .libs/libltdlc.a ltdl.o </div><div>ranlib .libs/libltdlc.a</div><div>creating libltdlc.la</div><div>(cd .libs && rm -f libltdlc.la && ln -s ../libltdlc.la libltdlc.la)</div><div>Making all in include</div><div>Making all in openssl</div><div>sh ../config.sh <openscepsetup.in >openscepsetup</div><div>sh ../config.sh <openscep.cnf.in >openscep.cnf</div><div>Making all in ldap</div><div>sh ../config.sh <openscep.ldif.in >openscep.ldif</div><div>sh ../config.sh <slapd.conf.in >slapd.conf</div><div>sh ../config.sh <setupldap.in >setupldap</div><div>Making all in lib</div><div>/bin/ksh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include -DOPENSCEPDIR=\"/usr/local/lib/openscep\" -g -O2 -c init.c</div><div>mkdir .libs</div><div>gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c init.c -fno-common -DPIC -o .libs/init.lo</div><div>gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c init.c -o init.o >/dev/null 2>&1</div><div>mv -f .libs/init.lo init.lo</div><div>/bin/ksh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include -DOPENSCEPDIR=\"/usr/local/lib/openscep\" -g -O2 -c isasu.c</div><div>rm -f .libs/isasu.lo</div><div>gcc -DHAVE_CONFIG_H -I. -I. -I../include -I../libltdl -I../include -I/usr/local/ssl/include "-DOPENSCEPDIR=\"/usr/local/lib/openscep\"" -g -O2 -c isasu.c -fno-common -DPIC -o .libs/isasu.lo</div><div>isasu.c: In function 'd2i_issuer_and_subject':</div><div>isasu.c:42: error: 'ASN1_F_D2I_PKCS7_ISSUER_AND_SERIAL' undeclared (first use in this function)</div><div>isasu.c:42: error: (Each undeclared identifier is reported only once</div><div>isasu.c:42: error: for each function it appears in.)</div><div>isasu.c: In function 'issuer_and_subject_new':</div><div>isasu.c:53: error: 'ASN1_F_PKCS7_ISSUER_AND_SERIAL_NEW' undeclared (first use in this function)</div><div>make[1]: *** [isasu.lo] Error 1</div><div>make: *** [all-recursive] Error 1</div><div>JAP.local [openscep-0.4.2] ></div><div><br></div></div><div><br></div><div><br><div apple-content-edited="true"> <span class="Apple-style-span" style="font-size: 12px; "><div><br class="Apple-interchange-newline">Venligst / Kind Regards, </div><div><br></div><div> Jakob Peterhänsel</div><div> Konsulent - Humac A/S</div><div><div><br></div><div> Apple Certifications: ACSP, ACTC, FCP6 L1, FCS L1</div><div> AppleSeed/CQF member since 1998</div></div><div> Kerio Messaging Partner</div><div><br></div><div>Tlf:<span class="Apple-tab-span" style="white-space: pre; "> </span>+45 7021 5353</div><div>Mobil:<span class="Apple-tab-span" style="white-space: pre; "> </span>+45 3078 7715</div><div>Web:<span class="Apple-tab-span" style="white-space: pre; "> </span><a href="http://www.humac.dk" target="_top" rel="nofollow">www.humac.dk</a></div><div><br></div></span><br class="Apple-interchange-newline"> </div><br></div></body></html>tag:old.nabble.com,2006:post-19602694Download client certificate2008-09-21T23:47:53Z2008-09-21T23:47:53Zabhishek@2008Hi everyone,
<br><br>I am working with Openscep that is compatible with openssl -0.9.8. I am able to generate the certificate on the server. But I am unable to download the certificate on the client. Probably some issue with request. I am posting the request using the GET to http. Can anybody help me with this.
<br><br>Please help.
<br><br>Warm regards,
<br>Abhishektag:old.nabble.com,2006:post-19490267Re: configure error: no BER library found2008-09-15T03:12:09Z2008-09-15T03:12:09Zabhishek@2008Hello everyone,
<br><br>All you have to do is first install the compatible openssl version and then try to install openscep with configure, make and make install.
<br><br>Regards,
<br>abhishek
<br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Hegedüs Ervin wrote:</div>
<div class="quote-message shrinkable-quote">Hello,
<br><br>I try to compile openscep, but gets this message:
<br><br>checking for ber_init in -llber... no
<br>configure: error: no BER library found
<br><br>checking libber on system (Debian Sarge):
<br># dpkg -l "libber0-dev"
<br>[...]
<br>ii libber0-dev 0.4.1 Development files for the BER library
<br><br>and libber.a exists:
<br><br># ls -l /usr/lib/libber.a
<br>-rw-r--r-- 1 root root 17342 Feb 29 2004 /usr/lib/libber.a
<br><br><br><br>what may be the problem?
<br><br><br>thanks:
<br><br>a.
<br><br></div>
</div></blockquote>
tag:old.nabble.com,2006:post-18117272Forum ?2008-06-25T09:15:24Z2008-06-25T09:15:24ZPaul-Marcelin N. NANA<div>Hi there,</div>
<div>I'm new in the list and can't find the forum in order to read messages before posting my question. Could somebody help me ?</div>
<div> </div>
<div>Thx</div>
tag:old.nabble.com,2006:post-17445124scep2008-05-24T00:15:14Z2008-05-24T00:15:14ZmctiewUsing the patched version of openscep maintained on Tomas Gustavsson-2 website as a base ( and applied a few other patches mentioned in this maillist ), I managed to get openscep compiled. But after setting up, I tried running 'scep' to test it, the scep will segmentation fault :-
<br><br>init.c:103: added oid 2.16.840.1.113733.1.9.6 for name recipientNonce
<br>init.c:103: added oid 2.16.840.1.113733.1.9.7 for name transId
<br>init.c:103: added oid 2.16.840.1.113733.1.9.8 for name extensionReq
<br>init.c:103: added oid 1.3.6.1.4.1.4263.5.5 for name proxyAuthenticator
<br>init.c:127: scep structure initialized
<br>scep.c:340: decoded URL 192.168.188.3|80|/cgi-bin
<br>scep.c:131: public key decoded
<br>Enter PEM pass phrase:
<br>scep.c:150: private key decoded @0x80565f0
<br>scep.c:363: end request coincides with SCEP client
<br>fingerprint.c:70: computing MD5 fingerprint
<br>fingerprint.c:59: the fingerprint is 'A296893BA9F1DE62DE18D4922E4863B2'
<br>scep.c:396: transaction ID is A296893BA9F1DE62DE18D4922E4863B2
<br>scep.c:405: CA certificate read
<br>selfsigned.c:56: serial set to trans id
<br>selfsigned.c:112: setting signing context failed
<br>selfsigned.c:142: self signed certificate ......
<br>scep.c:530: self signed certificate created
<br>scep.c:538: senderNonce set
<br>encode.c:40: encode of client message
<br>encode.c:62: using CA cert for recipient
<br>encode.c:66: using self signed cert for signature
<br>encode.c:98: writing a message of type PKCSReq, status (not set)
<br>encode.c:128: converting X509 request
<br>encode.c:163: payload to encrypt: 471 bytes
<br>Segmentation Fault.
<br><br>It appears to be that the port of OpenSCEP isn't quite ported well to OpenSsl 0.9.8. Wonder if anyone has a copy which works ?
<br><br>Regards.
<br>tag:old.nabble.com,2006:post-12866690Another bug in x509_to_ldap2007-09-24T13:11:28Z2007-09-24T13:11:28ZHeyman, MichaelThe x509_to_ldap function would truncate a "normal" name when building
<br>it from ASN.1. A patch that fixes the behavior is below
<br><br>-Michael Heyman
<br><br><br>--- scepldap.c.old Mon Sep 24 15:03:07 2007
<br>+++ scepldap.c Mon Sep 24 15:01:05 2007
<br>@@ -86,19 +86,16 @@
<br> for (i = X509_NAME_entry_count(name) - 1; i >= 0; i--) {
<br> us =
<br>X509_NAME_ENTRY_get_object(X509_NAME_get_entry(name, i));
<br> as = X509_NAME_ENTRY_get_data(X509_NAME_get_entry(name,
<br>i));
<br> sn = OBJ_nid2sn(OBJ_obj2nid(us));
<br> nl = strlen(sn) + as->length + 1;
<br>- if (dl == 0) { nl += 2; }
<br>- dn = (char *)realloc(dn, dl + nl + 2);
<br>- snprintf(dn + dl, nl + 2, "%s%s=%*.*s",
<br>- (dl == 0) ? "" : ",", us->sn, as->length,
<br>as->length,
<br>+ if (dl) { ++nl; }
<br>+ dn = (char *)realloc(dn, dl + nl + 1);
<br>+ snprintf(dn + dl, nl + 1, "%s%s=%*.*s",
<br>+ (dl) ? "," : "", sn, as->length, as->length,
<br> as->data);
<br>- if (dl == 0)
<br>- dl = nl;
<br>- else
<br>- dl += nl + 1;
<br>+ dl += nl;
<br> }
<br>
<br> /* common return (for debugging)
<br>*/
<br> reply:
<br> if (debug)
<br><br><br>tag:old.nabble.com,2006:post-12866222Bug in scepd2007-09-24T12:44:03Z2007-09-24T12:44:03ZHeyman, MichaelThe scepd program was regularly core dumping when no unstructuredName
<br>existed in a request. The bug appears to be due to an uninitialized
<br>variable in scepldap.c:x509_to_ldap(). (patch below).
<br><br>-Michael Heyman
<br><br><br>--- scepldap.c.old Mon Sep 24 14:33:41 2007
<br>+++ scepldap.c Mon Sep 24 14:32:58 2007
<br>@@ -27,11 +27,11 @@
<br> * and concatenated to give a distinguished name
<br> */
<br> char *x509_to_ldap(scep_t *scep, X509_NAME *name) {
<br> char *dn = NULL;
<br> int ncomponents, dl = 0, nl, i, dnl;
<br>- X509_NAME_ENTRY *ne;
<br>+ X509_NAME_ENTRY *ne = 0;
<br> char oname[1024];
<br> const char *sn;
<br> ASN1_OBJECT *us;
<br> ASN1_STRING *as;
<br><br><br>tag:old.nabble.com,2006:post-12799490Bug in sigattr.c2007-09-20T08:51:04Z2007-09-20T08:51:04ZHeyman, MichaelUsing the openscep 0.4.2 port on FreeBSD, scepd cored regularly when
<br>called via the pkiclient.exe perl script. I tracked the problem down to
<br>a debug print line in lib/sigattr.c - the printf was expecting a missing
<br>parameter (I also found "go" instead of "got" in the same printf).
<br><br>-Michael Heyman
<br><br><br><br>--- sigattr.c.old Thu Sep 20 10:09:19 2007
<br>+++ sigattr.c Thu Sep 20 10:09:30 2007
<br>@@ -96,12 +96,12 @@
<br> /* get the attribute as an ASN1_OCTET_STRING
<br>*/
<br> asn1 = sigattr_asn1_octet(scep, attrname);
<br> if (asn1 == NULL)
<br> return NULL;
<br> if (debug)
<br>- BIO_printf(bio_err, "%s:%d: go an asn1 string for %s\n",
<br>- __FILE__, __LINE__);
<br>+ BIO_printf(bio_err, "%s:%d: got an asn1 string for
<br>%s\n",
<br>+ __FILE__, __LINE__, attrname);
<br>
<br> /* unpack the ASN1_STRING into a C-String (0-terminated)
<br>*/
<br> *len = ASN1_STRING_length(asn1);
<br> data = (unsigned char *)malloc(*len);
<br> memcpy(data, ASN1_STRING_data(asn1), *len);
<br><br>tag:old.nabble.com,2006:post-11683659Re: configure error: no BER library found2007-07-19T01:26:00Z2007-07-19T01:26:00Zgbryant1I just want to say I luv U man!!! been looking for this for hours. Shoot I joined the forum just to say thank you!!
<br><quote author="webmad"><br>Try installing libldap2-dev first.
<br>Bye,
<br>-Pietro.
<br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Hegedüs Ervin wrote:</div>
<div class="quote-message shrinkable-quote">sorry,
<br><br>> checking for ber_init in -llber... no
<br>> configure: error: no BER library found
<br><br>this error is permanent,
<br><br>> checking libber on system (Debian Sarge):
<br>> # dpkg -l "libber0-dev"
<br>> [...]
<br>> ii libber0-dev 0.4.1 Development files for the BER library
<br><br>i checks liblber.a, that is also exists:
<br><br># ls -l /usr/lib/liblber.a
<br>-rw-r--r-- 1 root root 62112 May 18 2005 /usr/lib/liblber.a
<br><br>question is same: what may be the problem?
<br><br><br><br>thanks:
<br><br>a.
<br></div>
</div></blockquote>
</quote><br><img class='smiley' src='http://old.nabble.com/images/smiley/bear_hug.gif' /><img class='smiley' src='http://old.nabble.com/images/smiley/bear_hug.gif' /><img class='smiley' src='http://old.nabble.com/images/smiley/bear_hug.gif' />tag:old.nabble.com,2006:post-11360135Re: configure error: no BER library found2007-06-29T07:25:27Z2007-06-29T07:25:27ZwebmadTry installing libldap2-dev first.
<br>Bye,
<br>-Pietro.
<br><br><blockquote class="quote light-black dark-border-color"><div class="quote light-border-color">
<div class="quote-author" style="font-weight: bold;">Hegedüs Ervin wrote:</div>
<div class="quote-message shrinkable-quote">sorry,
<br><br>> checking for ber_init in -llber... no
<br>> configure: error: no BER library found
<br><br>this error is permanent,
<br><br>> checking libber on system (Debian Sarge):
<br>> # dpkg -l "libber0-dev"
<br>> [...]
<br>> ii libber0-dev 0.4.1 Development files for the BER library
<br><br>i checks liblber.a, that is also exists:
<br><br># ls -l /usr/lib/liblber.a
<br>-rw-r--r-- 1 root root 62112 May 18 2005 /usr/lib/liblber.a
<br><br>question is same: what may be the problem?
<br><br><br><br>thanks:
<br><br>a.
<br></div>
</div></blockquote>
tag:old.nabble.com,2006:post-2973079Re: configure error: no BER library found2006-02-16T07:44:15Z2006-02-16T07:44:15ZHegedüs Ervinsorry,
<br><br>> checking for ber_init in -llber... no
<br>> configure: error: no BER library found
<br><br>this error is permanent,
<br><br>> checking libber on system (Debian Sarge):
<br>> # dpkg -l "libber0-dev"
<br>> [...]
<br>> ii libber0-dev 0.4.1 Development files for the BER library
<br><br>i checks liblber.a, that is also exists:
<br><br># ls -l /usr/lib/liblber.a
<br>-rw-r--r-- 1 root root 62112 May 18 2005 /usr/lib/liblber.a
<br><br>question is same: what may be the problem?
<br><br><br><br>thanks:
<br><br>a.
<br><br>tag:old.nabble.com,2006:post-2973036configure error: no BER library found2006-02-16T07:26:28Z2006-02-16T07:26:28ZHegedüs ErvinHello,
<br><br>I try to compile openscep, but gets this message:
<br><br>checking for ber_init in -llber... no
<br>configure: error: no BER library found
<br><br>checking libber on system (Debian Sarge):
<br># dpkg -l "libber0-dev"
<br>[...]
<br>ii libber0-dev 0.4.1 Development files for the BER library
<br><br>and libber.a exists:
<br><br># ls -l /usr/lib/libber.a
<br>-rw-r--r-- 1 root root 17342 Feb 29 2004 /usr/lib/libber.a
<br><br><br><br>what may be the problem?
<br><br><br>thanks:
<br><br>a.
<br><br><br>tag:old.nabble.com,2006:post-774734Can I store the Challenge Password on a per SubjectName in OpenLDAP server?2005-09-02T17:43:22Z2005-09-02T17:43:22ZKrishna Ganugapati<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2722" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>Hello, I'm new to SCEP and I have quick question on the Open SCEP
server.<BR><BR>Does the Open SCEP server store the Challenge Password on a per
SubjectName <BR>basis - I'd like to setup apriori passwords for automatic
enrollment, and <BR>I'm thinking of using an out-of-band mechanism to set
up those passwords.<BR><BR>Do you know if Open SCEP does this?<BR><BR>Thanks so
much<BR><BR>Krishna Ganugapati<BR>Maraki Corporation</DIV></BODY></HTML>
tag:old.nabble.com,2006:post-611407patched version of openscep2005-08-12T01:21:28Z2005-08-12T01:21:28ZTomas Gustavsson-2<br>Hi all, I have published a patched version of openscep at
<br><a href="http://www.primekey.se/~tomas/" target="_top" rel="nofollow">http://www.primekey.se/~tomas/</a>.
<br><br>The version is patched with the patch for openssl 0.9.7, found by googling, and
<br>a small patch from me for a crash when using verbose logging.
<br><br>These patches makes openscep usable on modern platforms, since openssl 0.9.6
<br>hardly is available any more.
<br>I guess a 0.4.3 will never be officially released?
<br><br>Cheers,
<br>Tomas
<br><br>