SSL server for CRL verification

2004-12-23 Thread prakash babu
Hello all,    I run a SSL server that does CRL verification for the client certificates.  **  Load CRL and CA file //X509_LOOKUP_load_file();        for(; ;)    {

RE: openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Maruthi Bhaskar (maruthi)
Had just figured this detail from ssl.h and s3_enc.c given your previous mail. Disabled the behaviour in my code. Works! Thanks a LOT and happy holidays. -Maruthi > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dr. > Stephen Henson > Sent: Thursd

Re: openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Dr. Stephen Henson
On Thu, Dec 23, 2004, Maruthi Bhaskar (maruthi) wrote: > Pls read inline... > > > > The interop problem is with 0.9.7d (no hardware switch was > > used, but I > > > do not know at the moment wether this is relevant to the issue at > > > hand). The setup works fine with 0.9.6b with all others rema

RE: openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Maruthi Bhaskar (maruthi)
Pls read inline... > > The interop problem is with 0.9.7d (no hardware switch was > used, but I > > do not know at the moment wether this is relevant to the issue at > > hand). The setup works fine with 0.9.6b with all others remaining > > constant. However, with 0.9.7d, it seems that an empty >

Re: openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Dr. Stephen Henson
On Thu, Dec 23, 2004, Maruthi Bhaskar (maruthi) wrote: > Folks, > The setup involves a http client posting a transaction to > a webmethods server. Stunnel is being used in client mode > for ssl. I am being told that SSL for webmethods is from the IAIK stack. > I apologize in advance for the lack

Re: certificate generation under Windows - configuration problem?

2004-12-23 Thread Dr. Stephen Henson
On Thu, Dec 23, 2004, Mark Wolfskehl wrote: > I am having a problem creating a certificate file using openssl under > > Windows 2000 Professional > > The command I am using is (minus paths and .exe): > openssl req -outform PEM -new -out cert.pem -x509 > > I have tested this command on my Linux

openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Maruthi Bhaskar (maruthi)
Folks, The setup involves a http client posting a transaction to a webmethods server. Stunnel is being used in client mode for ssl. I am being told that SSL for webmethods is from the IAIK stack. I apologize in advance for the lack of specific details at the moment, but will provide them as soon

openssl 0.9.7d webmethods interop problem

2004-12-23 Thread Maruthi Bhaskar (maruthi)
Folks, The setup involves a http client posting a transaction to a webmethods server. Stunnel is being used in client mode for ssl. I am being told that SSL for webmethods is from the IAIK stack. I apologize in advance for the lack of specific details at the moment, but will provide them as soon

Re: how does openssl know the decryption is not succeeded without comparing with the original plaintext?

2004-12-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 23 Dec 2004 14:24:28 -0500, david zhang <[EMAIL PROTECTED]> said: davidzhanginottawa> Can I say that by using only the information davidzhanginottawa> provided by the encryption/decryption algorithm davidzhanginottawa> (for here the example DES algorithm), o

Re: question about openssl_open

2004-12-23 Thread Stanislav Chachkov
Hello, (I look in the source code of openssl php extension, i think is better to ask my question like that: ) What is command line equivalent to EVP_Open functions? Also, the openssl_seal doc says that: "openssl_seal() seals (encrypts) data by using RC4 with a randomly generated secret key. T

certificate generation under Windows - configuration problem?

2004-12-23 Thread Mark Wolfskehl
I am having a problem creating a certificate file using openssl under Windows 2000 Professional The command I am using is (minus paths and .exe): openssl req -outform PEM -new -out cert.pem -x509 I have tested this command on my Linux box. It works there, but on Windows I get the following error

Re: how does openssl know the decryption is not succeeded without comparing with the original plaintext?

2004-12-23 Thread Dr. Stephen Henson
On Thu, Dec 23, 2004, david zhang wrote: > Thank you very much Richard. The PKCS came in play long time after DES > was already in stage. Can I say that by using only the information > provided by the encryption/decryption algorithm (for here the example > DES algorithm), one can not tell if the d

Re: how does openssl know the decryption is not succeeded without comparing with the original plaintext?

2004-12-23 Thread david zhang
Thank you very much Richard. The PKCS came in play long time after DES was already in stage. Can I say that by using only the information provided by the encryption/decryption algorithm (for here the example DES algorithm), one can not tell if the decryption is correct without comparing with the or

Re: how does openssl know the decryption is not succeeded without comparing with the original plaintext?

2004-12-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 23 Dec 2004 13:18:13 -0500, david zhang <[EMAIL PROTECTED]> said: davidzhanginottawa> I am wondering why the decryption routine knows if davidzhanginottawa> a decryption is correct or not without comparing davidzhanginottawa> with the original plaintext file

how does openssl know the decryption is not succeeded without comparing with the original plaintext?

2004-12-23 Thread david zhang
Hi, I have a question about encryption and decryption. Suppose I have a file "hello" which contains six bytes content of "hello". Then I do "openssl enc -e -des-ede -a -salt -in hello -out hello.enc". I am asked to give a password. Then I decrypt it, by "openssl enc -d -des-ede -a -salt -in hello