Re: what's wrong with this decrypt code?

2004-12-06 Thread hany bee
Please ignore it. My input offset calculation is not correct. _ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ __

Re: Is it legal to distribute the client certificates from Netscape with a comme

2004-12-06 Thread Heikki Toivonen
Eric Wertz wrote: As far as the (re)distribution question has goes, what you "probably" cannot do without permission is to redistribute the actual *package* of certificates that Netscape has put together for the purpose of embedding in their browser. Since the overwhelming majority (if not 100%

RE: data dependence with md5/64-bit RSA?

2004-12-06 Thread Jesse Hammons
ThanksFinal question at the end of this message: > > You are majorly confused. It is the *encryption* that is failing, not > the > MD5. So why are you looking at the length of the input to the MD5 > function?! Thanks for the help. Yes, I was confused. I thought (or I should say, I w

RE: data dependence with md5/64-bit RSA?

2004-12-06 Thread David Schwartz
> I am trying to sign the first 8 bytes of an MD5 digest using a 64-bit RSA > key. My understanding is that RSA encryption requires the input data to > match the key length, and this condition is satisfied in this use case. No, it's not satisfied. > echo -n "

what's wrong with this decrypt code?

2004-12-06 Thread hany bee
I wrote the following test code to encrypt and decrypt using AES. But somehow, the EVP_DecryptUdpate() is behaving in a way I don't quite understand. The first time it is invoked, the return number of bytes decrypted (parameter "out1" in the API) is always 0. That means, I get one chunk less of

data dependence with md5/64-bit RSA?

2004-12-06 Thread Jesse Hammons
Hello, I am trying to sign the first 8 bytes of an MD5 digest using a 64-bit RSA key. My understanding is that RSA encryption requires the input data to match the key length, and this condition is satisfied in this use case. Are their other restrictions? I understand what I am doing is not goin

Re: Is it legal to distribute the client certificates from Netscape with a comme

2004-12-06 Thread Eric Wertz
> I want to do a commercial client application capable > to handle https (that is the only purpose to include > openssl) and I was wondering if it is legal to > distribute the file that contains the certificates > that were bundled with Netscape. I am not a lawyer. Not only am I also not a lawyer,

how to do AES ECB with PKCS5 padding

2004-12-06 Thread hany bee
I'm trying to set the default encryption settings so that it is compatible with the default cipher settings. Java, the default AES uses ECB mode and PKCS5 padding. How can I initialize the cipher context to be exactly the same? Could someone provide a little code snippet please? The openssl API

64-bit vs. 32-bit speed for SHA-1

2004-12-06 Thread Eric Rescorla
Does anyone have solid numbers on the perfomance of OpenSSL's SHA-1 on 32-bit vs. 64-bit platforms? Thanks, -Ekr __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Error 127 - gcc: Command not found

2004-12-06 Thread Servie Platon
Hi Mr. Ringaby, Thank you for the reply. --- Ringaby Anders <[EMAIL PROTECTED]> wrote: > Hello Servie. > > Have you checked that the directory, where gcc is > located, > is in your PATH environment variable? > > You can check by doing either of this: > > echo $PATH > or: > type gcc > > In or

Re: Is it legal to distribute the client certificates from Netscape with a commercial app

2004-12-06 Thread Ken Goldman
> I want to do a commercial client application capable > to handle https (that is the only purpose to include > openssl) and I was wondering if it is legal to > distribute the file that contains the certificates > that were bundled with Netscape. I am not a lawyer. > Actyally, can a company X gen

callback function specified in SSL_CTX_set_verify

2004-12-06 Thread Kristoffel DE GEEST
Newbie questions about callback function specified in SSL_CTX_set_verify. 1) With the function SSL_CTX_set_verify we can specifies a callback function to be used. If this callback function is called with 'preverify_ok=1', does it mean that the certification chain succeed completely? Thus does it

"certificate is invalid or corrupted"

2004-12-06 Thread Michael Goettsche
Hi list, I'm having problems with my openssl certificate used with apache2. I've followed the tutorial on apache.org to create a certificate and sign it afterwards. This step-by-step guide can be found here: http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html.en#realcert The first problem occurs w

Re: Is Borland C++ Builder 6.0 supported?

2004-12-06 Thread Thomas J. Hruska
At 09:23 AM 12/5/2004 +0800, Paul S Adams (Personal) writeth: >I have just looked at the source you are using. Ok - I got that wrong >in one area, but correct in another. > >First, I think that - just as _stricmp is aliased stricmp (by a command >line define), _strnicmp needs to be aliased to st

Re: Error 127 - gcc: Command not found

2004-12-06 Thread Ringaby Anders
Hello Servie. Have you checked that the directory, where gcc is located, is in your PATH environment variable? You can check by doing either of this: echo $PATH or: type gcc In order to add the directory where gcc is located, before running make, do this: PATH=$PATH: export PATH Then run ma