Openssl C Windows to PHP Linux RSA and session keys

2004-06-30 Thread Truman Lackey
Hi all, I have written a small, not very well written tutorial on how I accomplished sending encrypted data from openssl on windows in C code to openssl on php Linux. Hopefully this will same somebody some time in researching the issue. It is at http://www.grungeon.com Thanks, Truman Lackey

test -- is this thing on?

2004-06-30 Thread Darryl Erentzen
test __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

RE: SSL/TLS

2004-06-30 Thread Jochen Schaefer
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Schwartz Sent: Wednesday, June 30, 2004 5:27 PM To: [EMAIL PROTECTED] Subject: RE: SSL/TLS > If I look at the security mechanism used by a bank, citibank for example > they use version 3. Version 3 is

RE: SSL/TLS

2004-06-30 Thread David Schwartz
> If I look at the security mechanism used by a bank, citibank for example > they use version 3. Version 3 is mentioned in Details->Version > when I make a > right-click on the lock symbol. This I hope means SSLv3 and not TLS. I > checked also two other bank web pages which uses this version 3 > a

SSL/TLS

2004-06-30 Thread Jochen Schaefer
Hi everybody, I have a question regarding the main difference between SSL and TLS. I know the forum should used for questions regarding the implementation of OpenSSL but I searched quite a while and didn't find a web page explaining that stuff in a quite good and understandable way. I hope you guy

FreeBSD compiling with threads error

2004-06-30 Thread Gene Gilbert
greetings... I am a relative freebsd newbie and am tring to get openssl to compile with thread support. I am running freebsd-4-stable, and need threads to run ssl under the resin jsp web server. I got resin running, but when I turn on ssl in the server I get an error msg say that I need to compi

Re: Adding custom OIDs

2004-06-30 Thread Dr. Stephen Henson
On Wed, Jun 30, 2004, Federico Sacerdoti wrote: > Hello, > > Perhaps I do not understand the concept, but I need to create a cert > with a DN containing some custom fields: > > /C=US/ST=California/L=San Diego/O=San Diego Supercomputer > Center/OU=Quartz/CN=compute-0-0/RocksMembership=NAS > Ap

Adding custom OIDs

2004-06-30 Thread Federico Sacerdoti
Hello, Perhaps I do not understand the concept, but I need to create a cert with a DN containing some custom fields: /C=US/ST=California/L=San Diego/O=San Diego Supercomputer Center/OU=Quartz/CN=compute-0-0/RocksMembership=NAS Appliance/RocksAddress=198.202.74.254 I need one of the following a

[no subject]

2004-06-30 Thread o . brunet
I'm currently using OpenSSL 0.9.7d on windows through the ACE library. My application is multithreaded, and use two SSL_CTX one for the thread that does SSL_write() and one for the threads that do the SSL_read(). Everything goes fine for the major part, but some times I got error on the SSL_read

Re: EVP_DecryptUpdate Problem

2004-06-30 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 30 Jun 2004 17:14:07 +0200, "Gorelik, Slava" <[EMAIL PROTECTED]> said: slava.gorelik> Hi. slava.gorelik> slava.gorelik> I use openSSL (version 0.9.7d) for RC4 algorithm. slava.gorelik> slava.gorelik> I use EVP_DecryptUpdate function as explained in manual.

Standard way to verify a peer's hostname?

2004-06-30 Thread Andreas Feldner
Hi, whenever a TLS connection is brought up, the problem arises to verify, if the peer's certificate matches the host (dnsname) we wanted to connect to. It seems to me that a standard procedure for this is defined in RFC 2818. As it's not a trivial procedure (extracting and trying to match subj

RE : EVP_DecryptUpdate Problem

2004-06-30 Thread Frédéric Donnat
Hi, Ithink you should provide all the code. This is not enough to see if the parameters you used are correctly initialized. For example, I'd like to see how you handle the multiple call. Fred -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Gorelik, Slava

Re: BUF_MEM_grow() allocate memory size

2004-06-30 Thread Dr. Stephen Henson
On Mon, Jun 28, 2004, ?$B0~;3Gn1p?(B wrote: > > On Mon, 28 Jun 2004 07:21:06 +0200 (CEST) > Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> wrote: > > > In message <[EMAIL PROTECTED]> on Mon, 28 Jun 2004 13:58:35 +0900, Hiroyoshi > > Kageyama <[EMAIL PROTECTED]> said: > > > > kageyama.hiroyo

Re: Unable to load private key

2004-06-30 Thread Dr. Stephen Henson
On Tue, Jun 29, 2004, Pierre Sengès wrote: > Hello > > I'm newbie to openSSL. I'm trying to create a pkcs12 file with Win32 OpenSSL 0.97d. > I've generated a CSR with keytool. I got my cert file generated by a CA and a > private key file (generated by keytool). > The following command : > > Ope

Re: Creation of PKCS7 files

2004-06-30 Thread Dr. Stephen Henson
On Wed, Jun 30, 2004, Olaf Gellert wrote: > Hi all, > > I was trying to create a pkcs7 file containing a > certificate chain that I have (in PEM format). > > Do PKCS7 files have to be encrypted/signed or > may they just work as a container for certificates? > Yes but the signed format can have

Re: OT: problems with crypto and ASCII

2004-06-30 Thread deck80
Ok everything is working now...the problem was with the cast from char to int...in fact it recognized the char as unsigned char and made problem with a char corresponding to -1. Thanks for your help, Fausto - Original Message - From: "Charles B Cranston" <[EMAIL PROTECTED]> To: <[EMAIL PROT

Re: OT: problems with crypto and ASCII

2004-06-30 Thread George Rogers
The problem is that getc returns -1 to indicate EOF. On those C compilers where the default character type is unsigned byte, this is not a problem since characters always return values in the range of 0 to 255. On those C compilers where the default character type is signed byte, characters retu

EVP_DecryptUpdate Problem

2004-06-30 Thread Gorelik, Slava
Hi. I use openSSL (version 0.9.7d) for RC4 algorithm. I use EVP_DecryptUpdate function as explained in manual. First call is successful, but the second call for this function in next chunk of the data is return garbage in the encrypted buffer. There is a code: bool rc = false; int out

Re: OT: problems with crypto and ASCII

2004-06-30 Thread Charles B Cranston
There might not BE a definition of getc since it returns an int and the default is to return an int. I searched in /usr/include and /usr/include/sys on one of my Unix machines and it was not explicitly defined... What exactly is the problem you are running into with doing IO on 128-255 characters?

Still seeing bug in openssl 0.9.7e snapshot on 20030630

2004-06-30 Thread The Doctor
In BSD/OS 5, we get Script started on Wed Jun 30 07:16:14 2004 gallifrey.nk.ca//usr/source/openssl-0.9.7-stable-SNAP-20040630$ make making all in crypto... making all in crypto/objects... making all in crypto/md2... making all in crypto/md4... making all in crypto/md5... making all in crypto/sha

Creation of PKCS7 files

2004-06-30 Thread Olaf Gellert
Hi all, I was trying to create a pkcs7 file containing a certificate chain that I have (in PEM format). Do PKCS7 files have to be encrypted/signed or may they just work as a container for certificates? If yes, how would I create a PKCS7 file containing a given certificate chain using OpenSSL? R

Re: Unable to load private key

2004-06-30 Thread Frédéric EVRARD
> Hello > > I'm newbie to openSSL. I'm trying to create a pkcs12 file with Win32 > OpenSSL 0.97d. > I've generated a CSR with keytool. I got my cert file generated by a CA > and a private key file (generated by keytool). > The following command : > > OpenSSL> pkcs12 -export -inkey domain.key -in do

IE5 client authentication

2004-06-30 Thread Alexis Lefort
Hi all, Is it possible for a Windows client using IE5.0 to authenticate itself in order to connect to a SSL server? My server works fine with many clients, but not with this one... The great tool ssldump dumps that: 18 5 0.1324 (0.0295) C>SV3.0(273) Handshake Certificate ClientKeyExc

RE : Random number with engine

2004-06-30 Thread Frédéric Donnat
Hi, If you have a crypto-board you can use it through engine use. One way is to initialize openssl librairy with the engine and then use random number generation function. Fred -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Mateus Envoyé : mardi 29 ju