Re: SSL_read() hang after read http 100 continue headers

2002-11-07 Thread res0m4ko
Title: SSL_read() hang after read http 100 continue headers Lin Ma   Make sure you add the extra end of line characters to the request header to signal the end of the request.   SSL_write(ssl, "GET / HTTP/1.1\n\n", sizeof("GET / HTTP/1.1\n\n")); SSL_write(ssl,"\n\n",sizeof("\n\n"));   Marcus

DevTECH Industries To Start Multi-billion $ Class Action Against Software Development Firms

2002-11-07 Thread Bruce Cartland
Anyone know anything about this? I've tried the web site but there's nothing there. It's all somewhat unbelievable. Not that not acknowledging use of OpenSource isn't bad karma. But is this a hoax? If not, why doesn't OpenSSL have something on the we

Not able to complie on Windows

2002-11-07 Thread Ashish Garg
I am trying to build OpenSSL 0.9.6.g on Windows 2K. I am using Cygwin for build. When I do: > make it gives me error: make[2]: Entering directory `/c/tmp/openssl-0.9.6g/crypto/objects' /usr/bin/perl objects.pl objects.txt obj_mac.num obj_mac.h objects.txt:92:Undefined identifier SMIME make[2]:

Any summary of differences of API between 0.9.6 and 0.9.7

2002-11-07 Thread Hugo Jacques
Hi all, I am in the process of choosing between OpenSSL 0.9.7 and 0.9.6 for an application I want to deploy soon. Since 0.9.7 is still in beta, I am a bit affraid to go right away in production with it. I would like to know if there exist any document that summarizes the differences between the

openssl problems

2002-11-07 Thread fxian_2003
Hi,openssl-users I met a trouble. Today I encrypted a txt file with openssl package (windows version) in win2k, but I couldn't decrypt it with openssl lib(linux version) in linux(RH7.2). The APIs I used are : EVP_cipherinit(); EVP_cipherupdate(); EVP_cipherfinal(). Look forward to your

Re: how long should it take to generate a RSA private key? doing som ething wrong?

2002-11-07 Thread David Schwartz
On Thu, 7 Nov 2002 17:17:17 -0600, Mitchel, Jennifer (Jem) wrote: >Hi all, > >I got my openssl 0.9.6g installed today. i am brand new to this so i am a >bit concerned about the timeframe here. > >I entered the command > >genrsa -des3 -out server.key 1024 > >and i got the PRNG not seeded problem.

Re: PKCS#10?

2002-11-07 Thread Karl-Michael Werzowa
Basically, you have to create a CA at first. This means to have a private key to sign certificates. The private key needs to be kept under very strict security. (create by; openssl genrsa ...) The first cert you create is a self-signed root certificate. This includes the public key (openssl req -

Re: Memset not clearing sensitive data

2002-11-07 Thread Geoff Thorpe
Hey there, On Thursday 07 Nov 2002 6:13 pm, Eric Rescorla wrote: > I'm not one of the developers, but I have it pretty hard to get excited > about this sort of thing. Well I'm tempted to agree with you - a lot of the whole key-scanning attack hoopla has been wildly overstated, and from both ways

how long should it take to generate a RSA private key? doing something wrong?

2002-11-07 Thread Mitchel, Jennifer (Jem)
Hi all, I got my openssl 0.9.6g installed today. i am brand new to this so i am a bit concerned about the timeframe here. I entered the command genrsa -des3 -out server.key 1024 and i got the PRNG not seeded problem. So I installed /dev/random Then I entered the command ge

Re: SSL_read() hang after read http 100 continue headers

2002-11-07 Thread Tim Regovich
Lin Ma, Please reference : http://www.w3.org/Protocols/rfc2616/rfc2616-sec8.html#sec8.2.3 I beleive that the other end of the connection is waiting for a message body to be passed. Regards, Tim --- Lin Ma <[EMAIL PROTECTED]> wrote: > > > Thanks. The problem is SSL_Read hangs there without >

Re: Memset not clearing sensitive data

2002-11-07 Thread Eric Rescorla
Xperex Tim <[EMAIL PROTECTED]> writes: > An article by Michael Howard > >(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure10102002.asp) > points out that when memset used to clear sensitive information like keys out of >RAM, the memset > (or equivalent code) ca

Memset not clearing sensitive data

2002-11-07 Thread Xperex Tim
An article by Michael Howard (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure10102002.asp) points out that when memset used to clear sensitive information like keys out of RAM, the memset (or equivalent code) can be optimized away by the compiler. He proposes t

Having an SSL server validate with two CAs...

2002-11-07 Thread Richard Levitte - VMS Whacker
While holding a lecture on PKI today, I was presented with a rather interesting question that I couldn't answer: A company wants to set up a web server that is secured through SSL, and would like it to have maximum availability to the public out there while keeping maximum trust within the company

Re: Problems compiling openssl on solaris 2.6

2002-11-07 Thread Jean Pierre Cognasse
Hello, Verify if you have the command "ar" on your system. if yes, verify you have the rigth path in your PATH variable the make need it to create the library libcrypto.a Jipé [EMAIL PROTECTED] a écrit : > Hello > > I can not compile openssl-0.9.6g on Sun Solais 2.6. I use GCC 3.2 and make 3.

Re: How can I get the public key from a key file?

2002-11-07 Thread Jean Pierre Cognasse
why do you use "openssl genrsa " which only generates private key. Try to use "openssl rsa ..." : It generates RSA key pair (private & public) Jipé [EMAIL PROTECTED] a écrit : > Hello! > > I generate a private key using: > openssl genrsa -out xxx.key 1024 > It contains the private key, but

RE: PKCS#10?

2002-11-07 Thread Bob Kupperstein
Oblio, You're right; it is difficult getting started with OpenSSL. Make sure you've read the man pages at http://www.openssl.org/docs/apps/openssl.html (go through the individual commands). Look at the "config" page to get a idea what the config file looks like. To get a better idea, look for t

Re: PKCS#10?

2002-11-07 Thread Oblio
Ok, I know it's very basic, it's just that there's no easy starting point for someone who's never done this. First, understand that I'm attempting all this under WinNT, and I couldn't even get the thing to compile. Fortunately, the folks at shininglightpro.com posted a win32 port, so at least

Re: OpenSSL on WIN2K

2002-11-07 Thread David Schwartz
On Thu, 07 Nov 2002 02:26:33, Thomas J. Hruska wrote: >What if the OpenSSL DLLs are not included in the product distribution (this >is a key area of the Win32 OpenSSL Installation Project)? Sure the "hooks" >exist in the application, but such applications will not run without >compiled DLLs. To

Re: PKCS#10?

2002-11-07 Thread Karl-Michael Werzowa
this is very basic. pkcs#10 is the standard request format. under normal circumstances, the client ( person who requests a certificate) sends a pkcs#10 to the ca and the ca signs this request. in openssl this is done with openssl ca -in thePKCS#10.pem -out theCert.pem, using different options

RE: problem installing openssl-0.9.6g

2002-11-07 Thread Mitchel, Jennifer (Jem)
Hi all, I figured out the answer to my problem below... so in case anyone else sees the same thing .config was not using the right perl installation. I had a perl5 in my /bin and creating a hard link perl fixed the problem & .config then used the correct version of perl for variables $

Re: PKCS#10?

2002-11-07 Thread Oblio
Does anyone know what to do with a PKCS#10 cert request? Oblio __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

SSL_read() hang after read http 100 continue headers

2002-11-07 Thread Lin Ma
Title: SSL_read() hang after read http 100 continue headers Thanks. The problem is SSL_Read hangs there without giving any error. The sequence should be: HTTP/1.1 100 Continue Server: Microsoft-IIS/5.0 Date: Thu, . HTTP/1.1 200 OK .. But after the Date header and empty line, S

Re: Problems compiling openssl on solaris 2.6

2002-11-07 Thread mhaverka
Make sure that /usr/ccs/bin is in your path. Michael Haverkamp IT System Engineer (Sr.) Honeywell Federal Manufacturing & Technologies 816-997-3788

How can I get the public key from a key file?

2002-11-07 Thread petik
Hello! I generate a private key using: openssl genrsa -out xxx.key 1024 It contains the private key, but I can get the public key this way: openssl rsa -in xxx.key -pubout -out yyy.pub I can get the private key in a C program using PEM_read_PrivateKey(..), but I can't find PEM_read_PublicKey(.

Re: how do i make SSL_connect time out ?

2002-11-07 Thread Tim Regovich
Try setting an alert if the socket is not timing out to your liking. Better yet, switch to using non blocking asynch sockets and manage socket timeouts sepperately, on your own schedule. Hope this helps, Tim --- Guillaume Peersman <[EMAIL PROTECTED]> wrote: > Hi, > > I am trying to find a way to

RE: Problems compiling openssl under irix64 (6.5)

2002-11-07 Thread Zhao Lisa-alz002
Agreeting, How can I be removed from this mailling list? Thanks, Lisa -Original Message- From: [EMAIL PROTECTED] [mailto:John.Airey@;rnib.org.uk] Sent: Thursday, November 07, 2002 7:55 AM To: [EMAIL PROTECTED] Subject: RE: Problems compiling openssl under irix64 (6.5) Hi Joe. Can you l

PKCS#11 and the Schlumberger smartcard

2002-11-07 Thread Bruce Cartland
I am using PKCS#11 libraries supplied by vendors (although I'm starting to look at openCryptoki) to generate oncard keypairs and sign data for authentication (non cert based).   However, when I then run the resulting signature through OpenSSL 0.9.6 RSA_public_decrypt() with padding type of R

Problems compiling openssl on solaris 2.6

2002-11-07 Thread Daniel . D . Olsson
Hello I can not compile openssl-0.9.6g on Sun Solais 2.6. I use GCC 3.2 and make 3.80 One error message comes out then I do the make command. ./config --prefix=/opt/openssh No Errors Configured for solaris-sparcv9-gcc. then make command + rm -f libcrypto.so.0 + rm -f libcrypto.so + rm -f li