On Sat, Mar 24, 2007, Marco Roeland wrote:
> On Saturday March 24th 2007 at 12:58 Harald Latzko wrote:
>
> > I compiled the 0.9.9 snapshot, resulting in a binary that has the
> > same behaviour (growing in RAM very much). Do you know how to enable
> > this experimental code and if this feature is included in the openssl
> > command line tool?
>
> No, sorry I do not know how to enable the streaming encryption support
> and it very probably will not be in the command line tool.
>
[snip]
>
> Sorry to have given you false hopes. The issue that all the data has to
> be in working memory to be encrypted is indeed starting to become a real
> annoyance in some practical circumstances. So perhaps if Stephen Henson
> should develop the feature further one day we can volunteer as testers? ;-)
'tis done.
I found a quiet period to look into it and test it a little. Check out the new
-stream option in the smime utility for OpenSSL 0.9.9.
Support in the API is quite simple too, just include the PKCS7_STREAM flag in
the calls to PKCS7_{sign,encrypt} and SMIME_write_PKCS7() see the docs for more
info or the new examples in demos/smime. Chaining isn't possible using that
method however (e.g. sign & encrypt) that would need major API changes.
Any problems let me know. Money back if not completely satisfied :-)
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
