Encryption used in OpenSSL

What is encryption is used in the OpenSSL? If it is 128-bit is there a way to disable strong encryption for Exporting? Would lower encryptions work with other programs like OpenSSH? Ben __ OpenSSL Project

Added generationQualifier and pseudonym to objects.txt but now subject name contains numeric OIDs!

Dear Lutz Jaenicke and OpenSSL Users: I could not wait for 0.9.7 to come out so I decided to add the X509 OIDs for generationQualifier and pseudonym to crypto/objects/objects.txt. Now, I can create a certificate request containing these distinguished name attributes BUT when I do openssl req -tex

X509 Extension

Hi, I use different type of RSA keys to build a X509 Cert, so I would like to add an extension to the certificate to establish what kinda of key peer is using. How could I do that? Thanks in advance -- Davide D'Amico <[EMAIL PROTECTED]> /(

Re: Major problems with OpenSSL and Apache 1.3.x

check ldconfig On Mon, Jun 24, 2002 at 01:10:08PM -0700, Hendrick Chan wrote: > Michael, > > You missed the libexec that mentioned in the example of httpd.conf: > > LoadModule foo_module libexec/mod_foo.so > > Michael Piskol wrote: > > > Hello, > > > > I'm currently working on installing Open

Re: Major problems with OpenSSL and Apache 1.3.x

Michael, You missed the libexec that mentioned in the example of httpd.conf: LoadModule foo_module libexec/mod_foo.so Michael Piskol wrote: > Hello, > > I'm currently working on installing OpenSSL 0.9.6 under my Apache 1.3.x > webserver. Unfortunately, major problems occurred during testing th

Re: Difference between certificates

[...] > The old key file looked like this: > -BEGIN RSA PRIVATE KEY- > MIICXgIBAAKBgQC554Ro+VH. > -END RSA PRIVATE KEY- this private key is NOT encrypted > > The new one looks like this: > -BEGIN RSA PRIVATE KEY- > Proc-Type: 4,ENCRYPTED > DEK-Info: DES-EDE3-CBC,65C2C

RE: How long does it take...

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Martin Sjögren Sent: Monday, June 24, 2002 2:10 AM To: [EMAIL PROTECTED] Subject: How long does it take... ... to crack 3DES? Does 3DES in the SSL standard use two keys or three? Does anybody have any up

RSA encryption

I got a question regarding RSA encryption: how do I encrypt/decrypt some text (or byte array, you understand what I mean) that is larger than RSA_key_size() ? Thanks in advance! _ Federico Sauter [EMAIL PROTEC

Major problems with OpenSSL and Apache 1.3.x

Hello, I'm currently working on installing OpenSSL 0.9.6 under my Apache 1.3.x webserver. Unfortunately, major problems occurred during testing the new configuration. In detail, the Apache constantly conplains that he cannot find the SSL-Module although I have got the following two lines in my ht

TR : Unable to estabish a SSL session

Title: TR : Unable to estabish a SSL session Sorry if you have already receive this mail <<< Hi, I try to replace an IBM edge server reverse proxy, by an APACHE 2.0.36 / Mod_proxy / Mod_ssl / openssl  0.9.6d. The Reverse proxy deal the SSL part with client, and work wit

Creating an RSA* from external key

Title: Message I am trying to use the openSSL RSA_public_encrypt() function using an RSA key which is externally loaded from 2 unsigned byte streams (e,n). What is the best way to fill in an RSA struct with values in this form so that I can begin making calls to the crypo functions? I could

Parse this! :-)

I have a problem with the attached PKCS#12 key (generated and used with other tools). The PKCS12_parse return value is not 0, but the EVP_PKEY* remains NULL. The PKCS12 password is ''12071971'', in case you want to try (yes, it's a birth date:-)) Any hint? Thanks in advance parsethis.p12 De

Re: MDC2 inconsistancy

On Thu, Jun 20, 2002 at 05:07:20PM +0200, Flemming Frandsen wrote: > The openssl that failed (yours too maybe??) was from a Redhat 7.3: > [ff@partyticket ff]$ rpm -qf `which openssl` > openssl-0.9.6b-8 > > ... so maybe this is really a RatHead bug in stead? > > I've downloaded and compiled the 0

Re: RSA_sign

> > The input to RSA_sign() must be smaller than BN_num_bytes(rsa->n) minus > > PKCS#1 padding bytes and some bytes for the asn1 digest encoding. > > where is it written ? The RSA signature generation is specified in the PKCS#1 draft ( http://www.rsasecurity.com/rsalabs/pkcs/pkcs-1/index.html )

Re: Compression Doubt in Specifications

Hi, On 24 Jun 2002, Shalendra Chhabra wrote: > HI > I fail to understand the following: > > In SSL 3.0, the Plaintext blocks are blocks of 2^14 > But when they are compressed it is written: > > Compression must be lossless and may not increase the content > length by more than 1024 bytes. > I ju

Question about OpenSSL Reinstall

I want to reinstall OpenSSL on a Sparc v9 machine running Solaris 8. I've deleted the original installation but when I try to run config I get the following message: Configuring for solaris-sparcv9-cc target already defined - solaris-sparcv9-cc This is with ./config --prefix=usr

Difference between certificates

I recently began developing a plugin that uses openssl and while doing that I developed a set of certificates that I could use(I used the steps detailed at http://www.pseudonym.org/ssl/wwwj-index.html) These certificates have since expired, so I have to generate some more. I have followed the step

Re: RSA_sign

> > The input to RSA_sign() must be smaller than BN_num_bytes(rsa->n) minus > PKCS#1 padding bytes and some bytes for the asn1 digest encoding. where is it written ? > > [...] > > so I don't understand what is going on with the value 100...and more I > > don't know how to sign my real buffer (

Compression Doubt in Specifications

HI I fail to understand the following: In SSL 3.0, the Plaintext blocks are blocks of 2^14 But when they are compressed it is written: Compression must be lossless and may not increase the content length by more than 1024 bytes. I just wanted to know how can compression increase length? Is it

Re: problems load private key URGENT!!!

Here's the code I use:  EVP_PKEY* GetPrivateKey(char *fileName, char *pass) { FILE *f; PKCS12 *p12; X509_NAME *name; X509 *certificato; EVP_PKEY *privata; // = new EVP_PKEY(); int len = strlen(pass); if ((f = fopen(fileName, "r")) == NULL)  throw HandledError("File Spec

Re: RSA_sign

> Hi all, > > thanks for your help on DH stuff :-) > Now I have a pb with RSA_sign(). > > I have a buffer and I want to sign it with my private key. > > So I generate a key: > > openssl genrsa -out key.pem 1024 > > then I have the following code: > > " > rsa = RSA_new(); > get_my_priv_RSA(&rsa);

Re: Generating certificates

On Mon, Jun 24, 2002 at 09:13:44AM +0200, Martin Sjögren wrote: > On Thu, Jun 20, 2002 at 11:51:42AM -0500, Pisano, Ed wrote: > > Martin, > > I solved this by creating openssl.cnf files that contain the information > > that is gathered interactively by CA.pl. I then modified the openssl.exe > > c

ASN and SSL/TLS

Can someone tell me that can be specify the SSL/TLS completely in a language like ASN Thanks Shalendra - Upset? Confused? Lost? Try Google.!!!Google is GOD!!! | / \ |Shalendra Chhabra // \\