SSLv3: Receiving 29 additional bytes after application data

2003-03-18 Thread christoph.alme
Hi all, I am working on a C++ app to send a single HTTPS request (HTTP 1.1), wait for/receive the response and to close the connection afterwards. All application data, e.g. the response, is received correctly/completely. But after having read the whole data, a select() on the socket tells me t

Re: Use of new option " -crl_check " in openssl 0.9.7?

2003-03-18 Thread Arne Jørgensen
"Dr. Stephen Henson" <[EMAIL PROTECTED]> writes: > Try this: > > openssl x509 -in cli_cert_vega.pem -issuer -noout > openssl crl -in ca_cert/vega_cacert2.pem -issuer -noout > > they should produce the same string. If not then the CRL isn't for that > certificate. If they do match then please send

Re: "PRNG_NOT_SEEDED", Even after calling RAND_add() in client

2003-03-18 Thread Brian Hatch
> Thanks for your response. > Here is how i use RAND_seed in my client : > > while (RAND_status() == 0) { > int rnd = rand(); > RAND_seed(&rnd, sizeof(rnd)); > } Ungh. Now you're seeding your random number generator with... a random number generator. And I bet you never called sr

Re: "PRNG_NOT_SEEDED", Even after calling RAND_add() in client

2003-03-18 Thread rajagopalan ramanujam
hi brian, Thanks for your response. Here is how i use RAND_seed in my client : while (RAND_status() == 0) { int rnd = rand(); RAND_seed(&rnd, sizeof(rnd)); } Now Serverhello and certificate is accepted but when the client tries to generate a RSA key, the control does not seem to be

Re: how to read an RSA key in .asc format...

2003-03-18 Thread Robert Locke
> I already have a module which works > fine when I encrypt with a test public key using openssl's C API. Sorry, I meant: "when I encrypt with a test public key generated using OpenSSL". __ OpenSSL Project

Re: how to read an RSA key in .asc format...

2003-03-18 Thread Robert Locke
> The PGP public key format isn't supported by the OpenSSL command line tools. Well that would explain it! =) The problem is that our client uses PGP (and its handy M$ Outlook plug-ins) for their encryption needs. And I was hoping to use openssl to encrypt data using their PGP-generated public k

Re: how to read an RSA key in .asc format...

2003-03-18 Thread Dr. Stephen Henson
On Wed, Mar 19, 2003, Robert Locke wrote: > Greetings... > > > I have an RSA public key file exported from PGP v8.0 (ie, foo.asc). How > > can I get openssl to read this file? Do I need to convert it to PEM > > format? How do I do that? > > I feel like I'm getting close to figuring this out,

Re: how to read an RSA key in .asc format...

2003-03-18 Thread Robert Locke
Greetings... > I have an RSA public key file exported from PGP v8.0 (ie, foo.asc). How > can I get openssl to read this file? Do I need to convert it to PEM > format? How do I do that? I feel like I'm getting close to figuring this out, but alas, no cigar. Here's what I did: * I generated a 1

Re: Use of new option " -crl_check " in openssl 0.9.7?

2003-03-18 Thread Dr. Stephen Henson
On Tue, Mar 18, 2003, Naomaru Itoi wrote: > **Hello, > > Thanks for this piece of information ... I am trying to do a similar thing > using "openssl verify", but failing. > > This is what I tried: > - Generate client cert from iPlanet CA. > - Retrieve CA root cert from the CA. > - Verify the c

Re: Use of new option " -crl_check " in openssl 0.9.7?

2003-03-18 Thread Naomaru Itoi
**Hello, Thanks for this piece of information ... I am trying to do a similar thing using "openssl verify", but failing. This is what I tried: - Generate client cert from iPlanet CA. - Retrieve CA root cert from the CA. - Verify the client cert: "openssl verify -CAfile ca_cert/vega_cacert.pem cl

ZLIB compression performance improvement

2003-03-18 Thread Andrew Marlow
Dear openSSLers, Attached is a performance enhancement to the ZLIB compression facility of openSSL. It uses the deflate API rather than the compress API to avoid repeated mallocs. I would be very interested to hear how people get on with this. It has been tested on Solaris 8 and MS-Windows 2000.

how to read an RSA key in .asc format...

2003-03-18 Thread Robert Locke
Hi,   This is probably really simple, but I'm struggling to figure this out.   I have an RSA public key file exported from PGP v8.0 (ie, foo.asc).  How can I get openssl to read this file?  Do I need to convert it to PEM format?  How do I do that?   Confusedly yours...   (Sorry if this is a r

Re: X509_verify question

2003-03-18 Thread Remo Inverardi
> I generate an RSA-key, assign it to an EVP_PKEY structure, sign the > cert with it, than use X509_get_pubkey() to get the public key, and > verify the signature with the pubkey, X509_verify(cert, pubkey), but > it always results "-1", ASN.1 (and, therefore, X.509) signatures identify the message

[no subject]

2003-03-18 Thread Christoph Hansen
- Christoph Hansen TurboMed EDV GmbH Schützenwall 59 24114 Kiel Tel.: 0431 65949751 Fax.: 0431 6597997 email: [EMAIL PROTECTED] Web: www.turbomed.de ___