Re: EVP_BytesToKey() and PKCS#5 v2.0

2004-07-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 7 Jul 2004 20:21:34 -0700, Ben Weintraub <[EMAIL PROTECTED]> said: orinjus> Hello, orinjus> I am using EVP_BytesToKey() in order to generate a key from a password orinjus> and a random salt, and reading through the documentation for the orinjus> function at

EVP_BytesToKey() and PKCS#5 v2.0

2004-07-07 Thread Ben Weintraub
Hello, I am using EVP_BytesToKey() in order to generate a key from a password and a random salt, and reading through the documentation for the function at http://www.openssl.org/docs/crypto/EVP_BytesToKey.html , I noticed it says: Newer applications should use more standard algorithms such as PKC

Re: Use of Engine

2004-07-07 Thread Geoff Thorpe
On July 7, 2004 06:39 pm, Joe smith wrote: > I am new to openssl and am still exploring its use. Can someone tell me > what is the use of the various Engines in openssl. Well that depends on who you listen to, there are some who would tell you that the sole use of those engines is to grow your li

private key pem format file to memory buffer

2004-07-07 Thread Andrew Andreev
I'm trying to use private key from memory buffer to be able to load it to ctx using SSL_CTX_use_RSAPrivateKey_ASN1. I have no problems no problems do it for certificate itself using buf =certificate; x = d2i_X509(NULL,&buf,sizeof certificate; if(x != NULL) { if (1 != SSL_CTX_use_certifica

Use of Engine

2004-07-07 Thread Joe smith
Hi, I am new to openssl and am still exploring its use. Can someone tell me what is the use of the various Engines in openssl. And what happens if I disable the engine?   Joe Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers!

Re: Adding Custom OIDs

2004-07-07 Thread Federico Sacerdoti
The multiple CN fields is perfect, thanks. Example: /C=US/ ST=California/ L=San Diego/ O=San Diego Supercomputer Center/ OU=Quartz/ CN=compute-0-0/ CN=RocksMembership:NAS Appliance/ CN=RocksPrivateAddress:198.202.74.254 -Federico On Jul 7, 2004, at 9:38 AM, Dr. Stephen Henson wrote: What I mean is

Simple RSA question

2004-07-07 Thread Joe smith
Hi, I am new to OpenSSL and I want to use RSA for a simple project. I just want to know what is the difference between RSA_public_encrypt function and RSA_eay_public_encrypt function in rsa_eay.c   Thanks,   Joe Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers!

Re: Adding Custom OIDs

2004-07-07 Thread Dr. Stephen Henson
On Wed, Jul 07, 2004, Federico Sacerdoti wrote: > Thank you for your reply. > > The 64-char limit imposed by the RFC makes sense now, thank you. As for my > goal, it is simply to encode extra data in the DN. I do not care exactly how > this is done, as long as my string is present somehow. > > W

Re: Adding Custom OIDs

2004-07-07 Thread Federico Sacerdoti
Thank you for your reply. The 64-char limit imposed by the RFC makes sense now, thank you. As for my goal, it is simply to encode extra data in the DN. I do not care exactly how this is done, as long as my string is present somehow. When you say "You can legally have multiple CN fields", I interp

Re: AIX shared library builds - 0.9.7c (fwd)

2004-07-07 Thread Troy Monaghen
On Tue, 2004-07-06 at 05:30, [EMAIL PROTECTED] wrote: > Hi: I'm trying to build OpenSSL on AIX 4.3 with shared libraries. the > compiler version is 4.3.2.0. > > The do_aix-shared target in the Makefile.ssl uses the cc command to > link the shared libraries, defined by the macro $(SHAREDCMD). Bu

EAP/TLS change cipher spec probleme

2004-07-07 Thread Fabien Moulin
hello, I'am developping a client/server application, which need to do EAP/TLS. To do this, I use OpenSSL library (0.9.6c). All EAP/TLS messages exchanged are OK until the Server 's Change_cipher_spec message. I really don't know what could be the problem. In fact the client send his Change ciphe

Re: OpenSSL support on Itanium/x86 with SuSE Enterprise 8 linux

2004-07-07 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 7 Jul 2004 19:02:50 +0530, "Virag S. Patel" <[EMAIL PROTECTED]> said: viragkumar_patel> Can you tell me whether OpenSSL product is supported viragkumar_patel> with SUSE Enterprise 8 Linux on Itanium/x86? OpenSSL 0.9.7 and on, as distributed by the OpenSSL t

Re: emulating "good old" des commands behaviour using "openssl des"

2004-07-07 Thread Jochen Hayek
I am so sorry, but my problem is not yet completely solved. Alright, using "-des-cfb" or "-des-ofb" I don't get the "bad decrypt" error message, but still: $ des -D -k 'our_key' < in_file > out_file.generated_using_des_utility $ openssl enc -des-cfb -pass 'pass:our_key' -d -nosalt < in_f

OpenSSL support on Itanium/x86 with SuSE Enterprise 8 linux

2004-07-07 Thread Virag S. Patel
Hi Can you tell me whether OpenSSL product is supported with SUSE Enterprise 8 Linux on Itanium/x86? Your help is very much need. Thanks in advance. Awaiting your quick response. Regards, Virag __ OpenSSL Project

Re: emulating "good old" des commands behaviour using "openssl des"

2004-07-07 Thread Jochen Hayek
> "SH" == "Dr Stephen Henson" writes: > On Wed, Jul 07, 2004, Jochen Hayek wrote: [snip details] SH> Including the key on the command line can be problematical on SH> some systems if someone can run ps. You are definitely right, but we don't really understand, why Bloomberg encr

Re: duplicating EVP_PKEY's ? Dr. HENSON

2004-07-07 Thread Ramon Amat Jimenez
>Hmm, that's a strange one. I can't see what that would crash there. Can you >run it under a debugger with a stack trace? I have followed your advice and guess what ? I was passing a null pointer. You are right that the code for _EVP_PKEY_dup() should work. Many thanks Ramon Sie können mit [EMA