Re: OpenSSL + ECC

2003-10-08 Thread Nils Larsch
Jeroen wrote:
Hello,

Does OpenSSL still have Sun's non-free ECC cryptography?

My Debian/Sid box has:
ii  openssl0.9.7c-1   Secure Socket Layer (SSL) binary and related
OpenSSL 0.9.7c does *not* contain the ec stuff for curves over GF(2^m)
from sun (0.9.7 only contains some basic ec arithmetic for curves over
GF(p) written by Bodo Moeller, for more advanced features you must use
0.9.8-dev).
Nils

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]


how to build openssl to enable non-blocking I/O?

2003-10-08 Thread linux guy
any build option is provided to enable non-blocking I/O?
thx
-- 
__
http://www.linuxmail.org/
Now with e-mail forwarding for only US$5.95/yr

Powered by Outblaze
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]


Any library available for functions used by 'ipsec' utility.

2003-10-08 Thread Dattesh Lotlikar



Hello Users,
    Is there 
any library functions available for sub-commands of 'ipsec' utility viz ipsec 
verify,etc?? 
Regards,
dattesh



*
Disclaimer

This message (including any attachments) contains 
confidential information intended for a specific 
individual and purpose, and is protected by law. 
If you are not the intended recipient, you should 
delete this message and are hereby notified that 
any disclosure, copying, or distribution of this
message, or the taking of any action based on it, 
is strictly prohibited.

*
Visit us at http://www.mahindrabt.com




X509_free vs. EVP_PKEY_free ?

2003-10-08 Thread Dann Daggett
Greetings All,

I have a ques about X509_free() vs. EVP_PKEY_free().
In my init code (err logic removed) I get the key using:

x509 = PEM_read_X509(fp, NULL, NULL, NULL);
SrvPubKey = X509_get_pubkey(x509);
X509_free(x509);

And later in my exit code I use:
EVP_PKEY_free(SrvPubKey);
which seg faults.

Did my X509_free() in the init free the data already? I assumed that
get_pubkey() returned a new pointer, hence the existence and/or
requirement of the EVP_PKEY_free() func right?

Am I using this incorrectly?

Thanks,
Dann

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]


Solved: X509_free vs. EVP_PKEY_free ?

2003-10-08 Thread Dann Daggett
> -Original Message-
> Greetings All,
> 
> I have a ques about X509_free() vs. EVP_PKEY_free().
> In my init code (err logic removed) I get the key using:
> 
>   x509 = PEM_read_X509(fp, NULL, NULL, NULL);
>   SrvPubKey = X509_get_pubkey(x509);
>   X509_free(x509);
> 
> And later in my exit code I use:
>   EVP_PKEY_free(SrvPubKey);
> which seg faults.
> 
> Did my X509_free() in the init free the data already? I assumed that
> get_pubkey() returned a new pointer, hence the existence and/or
> requirement of the EVP_PKEY_free() func right?
> 
> Am I using this incorrectly?
> 
> Thanks,
> Dann

Oops, I found the problem.
I was calling EVP_PKEY_free(SrvPubKey) elsewhere in the code as well!
So sorry to have wasted anyone's time.

Best,
Dann

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]


Re: Solved: X509_free vs. EVP_PKEY_free ?

2003-10-08 Thread Dr. Stephen Henson
On Wed, Oct 08, 2003, Dann Daggett wrote:

> > -Original Message-
> > Greetings All,
> > 
> > I have a ques about X509_free() vs. EVP_PKEY_free().
> > In my init code (err logic removed) I get the key using:
> > 
> > x509 = PEM_read_X509(fp, NULL, NULL, NULL);
> > SrvPubKey = X509_get_pubkey(x509);
> > X509_free(x509);
> > 
> > And later in my exit code I use:
> > EVP_PKEY_free(SrvPubKey);
> > which seg faults.
> > 
> > Did my X509_free() in the init free the data already? I assumed that
> > get_pubkey() returned a new pointer, hence the existence and/or
> > requirement of the EVP_PKEY_free() func right?
> > 
> > Am I using this incorrectly?
> > 
> > Thanks,
> > Dann
> 
> Oops, I found the problem.
> I was calling EVP_PKEY_free(SrvPubKey) elsewhere in the code as well!
> So sorry to have wasted anyone's time.
> 

Just for info...

In the far distant past of SSLeay X509_get_pubkey() used to return an internal
pointer to an EVP_PKEY which was freed when the certificate was. 

Now the first call to X509_get_pubkey() converts the certificate public key to
an internal EVP_PKEY structure which is cached in the X509 structure and
returns it. The reference count is set to 2 so it is freed only after the X509
and the EVP_PKEY is freed. Later calls just up the reference count and return
the cached pointer so the conversion overhead is avoided.

Steve.
--
Dr Stephen N. Henson.
Core developer of the   OpenSSL project: http://www.openssl.org/
Freelance consultant see: http://www.drh-consultancy.demon.co.uk/
Email: [EMAIL PROTECTED], PGP key: via homepage.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]