Re: RSA_public_encrypt max message length

2004-06-03 Thread Patrick Coleman
Thanks to everyone for the help. I'll try what you suggested. -Patrick David Schwartz wrote: In that case, is there some function in openssl to chain several encrypts/decrypts together, so I can use the RSA functions to encrypt a DH key exchange? Otherwise I'm just going to have to write some sort

RE: RSA_public_encrypt max message length

2004-06-03 Thread David Schwartz
> In that case, is there some function in openssl to chain several > encrypts/decrypts together, so I can use the RSA functions to encrypt a > DH key exchange? > > Otherwise I'm just going to have to write some sort of splitting and > chaining operation, that splits the message up into chunks of u

Re: RSA_public_encrypt max message length

2004-06-03 Thread Patrick Coleman
In that case, is there some function in openssl to chain several encrypts/decrypts together, so I can use the RSA functions to encrypt a DH key exchange? Otherwise I'm just going to have to write some sort of splitting and chaining operation, that splits the message up into chunks of under RSA

Re: RSA_public_encrypt max message length

2004-06-03 Thread Patrick Coleman
Oh, I realise what you meant now. I'm using the encryption for DH, which I guess counts as key exchange :) The DH public parameters are 512 bytes, and RSA_size gives 256 for a keylength of 2048. I dont really want to go too much above this (speed - is this reasonable?). When you say that the ci

Re: RSA_public_encrypt max message length

2004-06-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 04 Jun 2004 11:17:49 +0800, Patrick Coleman <[EMAIL PROTECTED]> said: pcoleman> Bulk encryption, I think. I just want to encrypt/decrypt > pcoleman> RSA_size(key) bytes in one operation. You can't encrypt/decrypt messages larger than the key with the RSA al

Re: RSA_public_encrypt max message length

2004-06-03 Thread ET Tan
Then you should choose one of the symmetric ciphers (aes, des, ...). Asymmetric ciphers like rsa/dsa are for key exchange/signing only, and for these purposes, these ciphers operate on a digest (which is little) rather than the data itself. - Original Message - From: "Patrick Coleman" <[E

Re: RSA_public_encrypt max message length

2004-06-03 Thread Patrick Coleman
Bulk encryption, I think. I just want to encrypt/decrypt > RSA_size(key) bytes in one operation. Thanks, Patrick ET Tan wrote: What were you trying to do? Key exchange or bulk encryption? - Original Message - From: "Patrick Coleman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Frid

Re: RSA_public_encrypt max message length

2004-06-03 Thread ET Tan
What were you trying to do? Key exchange or bulk encryption? - Original Message - From: "Patrick Coleman" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, June 04, 2004 10:53 AM Subject: RSA_public_encrypt max message length > Hi, > When encrypting strings with RSA_public_enc

RSA_public_encrypt max message length

2004-06-03 Thread Patrick Coleman
Hi, When encrypting strings with RSA_public_encrypt, I cant seem to encrypt more than RSA_size(key) bytes. Is there any way to encrypt more than this number of bytes in a single call to RSA_public_encrypt (or a similar function)? Thanks, Patrick _

X509_CRL_verify() failed after X509_CRL_dup(),why?

2004-06-03 Thread BlackSnail
  Hi,   I write a program to insert revoked certificate information to CRL.After insertion I do X509_CRL_sign() and X509_CRL_verify() and everything is OK.Then I do X509_CRL_dup() to duplicate CRL structure.Things followed are weird.After duplication,I do X509_CRL_verify() again an

Re: EOFException when connecting to ldap server with jndi

2004-06-03 Thread Lawrence Bowie
You need to post to http://forum.java.sun.com/index.jsp at the Java Secure Socket Extensions section. Also, the EOFException means your connection closed unexpectedly .. I would lose tls.close(); ctx.close(); LDB mark brophy wrote: Hi all: This is my first post, so please redirect me if I'm in

remove

2004-06-03 Thread Ronald
Remove -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rodrigo Madera Sent: Saturday, May 29, 2004 2:27 PM To: [EMAIL PROTECTED] Subject: remove remove -- ___ Sign-up for Ads Free at Mail.com http

EOFException when connecting to ldap server with jndi

2004-06-03 Thread mark brophy
Hi all: This is my first post, so please redirect me if I'm in the wrong place. I've been having the same problem for weeks, and I can't seem to get around it. I'm connecting to an openldap server using tls/ssl (openssl), and I'm constantly getting an eofexception around the time of tls READ on

Re: OpenSSL can't store and generate some valid DN (fwd)

2004-06-03 Thread Dr. Stephen Henson
On Thu, Jun 03, 2004, Erwann Abalea wrote: > > Hi, > > I was looking at the RFC3739 for Qualified Certificates and the changes > with the RFC3039, and noticed (among other things) that the example > certificate changed. > What makes you think it has changed? > > The subject of this certifica

Re: Page is not displayed when https://www.servername.com

2004-06-03 Thread George Malik
Title: Message Hi Mark,     Thank you very much for your respond and the tip.   I am analyst/developer on C/C++ UNIX. I do not have too much experience in administration of Apache (3 weeks). This is a time within I am looking for a solution for the problem. Our previous administrator quit

OpenSSL can't store and generate some valid DN (fwd)

2004-06-03 Thread Erwann Abalea
Repost, it seems my contributions to openssl-* are redirected to /dev/null... -- Erwann ABALEA <[EMAIL PROTECTED]> - RSA PGP Key ID: 0x2D0EABD5 - moi je veux bien lire les FAQ, mais c'est pareil, je sait pas ou elle sont... Ne faudrait il pas faire une FAQ qui dit ou sont les FAQs ? -+- M.D.

Re: writing to BIO chain several times

2004-06-03 Thread Dr. Stephen Henson
On Thu, Jun 03, 2004, Alexandru Ciobanu wrote: > Hello openssl-users, > > I'm facing difficulties implementing a rather common behavior of a > client/server application using BIO chains. > > Basically, all I want is to send several strings through the chain > from the client to the server, e.g.

writing to BIO chain several times

2004-06-03 Thread Alexandru Ciobanu
Hello openssl-users, I'm facing difficulties implementing a rather common behavior of a client/server application using BIO chains. Basically, all I want is to send several strings through the chain from the client to the server, e.g. for authentication purposes. On both the client and server si