Re: Compile error on Win32 using i2d_ASN1_SET_OF_X509_EXTENSION call

2005-02-10 Thread Oily Pakora
Dr Henson, The function pointer cast did the trick. All I did was add "(int (*)())" in front of the i2d_X509_EXTENSION. I owe you a beer next time you are in San Francisco - let me know if you are coming to the RSA conference next week... Oily --- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wro

Re: Compile error on Win32 using i2d_ASN1_SET_OF_X509_EXTENSION call

2005-02-10 Thread Dr. Stephen Henson
On Thu, Feb 10, 2005, Oily Pakora wrote: > Friends, > > When compiling a program on Win32, the following line of code generates an > error message: > > *plLen = i2d_ASN1_SET_OF_X509_EXTENSION(exts, NULL, i2d_X509_EXTENSION, > V_ASN1_SEQUENCE, V_ASN1_UNIVERSAL, IS_SEQUENCE)

Compile error on Win32 using i2d_ASN1_SET_OF_X509_EXTENSION call

2005-02-10 Thread Oily Pakora
Friends, When compiling a program on Win32, the following line of code generates an error message: *plLen = i2d_ASN1_SET_OF_X509_EXTENSION(exts, NULL, i2d_X509_EXTENSION, V_ASN1_SEQUENCE, V_ASN1_UNIVERSAL, IS_SEQUENCE); The error I get is: error C2664: 'i2d_ASN1_SET' :

Re: overhead

2005-02-10 Thread Charles Cranston
Should not be that bad, since all the gore happens at the beginning of the connection, so when the data is actually flowing it's just a standard symmetric encryption which is usually one-to-one - however there is some overhead as the session key is periodically recomputed. You could do an experimen

overhead

2005-02-10 Thread Vu Pham
Hi all, I am looking for average overhead of SSL over plain tcp. Can I have some kind of numbers like for one SSL connection ( from connect to transfer and then disconnect ) for N KB of raw data, how much overhead I have ? The reason I ask is I am applying OpenSSL to my phone apps, and the phone

SSL_ERROR_SYSCALL

2005-02-10 Thread CHIN, LEY-HUA (Ginger), ALABS
Hi,   After my SSL session was established, the very first SSL_read attempt failed.  It returned 0 byte and SSL_get_error return SSL_ERROR_SYSCALL and ERR_get_error return 0.   Based on OpenSSL man page, this means an EOF was observed, but WHY and how do I fix this?   I have the identical a

Re: SCTP support in OpenSSL

2005-02-10 Thread Medi Montaseri
I'm a bit curiousshould'nt we strive to push security down the IP stack... I'm currently going thru my first SSL apps and frankly, it is too mechanical... specially if you want SSL and multi-threading Maybe you can provide some pros and cons of security over a transport levelor if this

Re: Rijndael decryption

2005-02-10 Thread Dr. Stephen Henson
On Thu, Feb 10, 2005, Manuel Sánchez Cuenca wrote: > Hello all, I have written the following code in java using the IAIK library: > === > byte[] byte_key = ; > SecretKey aes_key = new SecretKey(byte_key, > "Rijndael/ECB/PKCS5Pa

Rijndael decryption

2005-02-10 Thread Manuel Sánchez Cuenca
Hello all, I have written the following code in java using the IAIK library: === byte[] byte_key = ; SecretKey aes_key = new SecretKey(byte_key, "Rijndael/ECB/PKCS5Padding"); Cipher rijndael = Cipher.getInstance("Rijndael/E

Re: Problem with signing methods

2005-02-10 Thread Dr. Stephen Henson
On Thu, Feb 10, 2005, Santiago Zapata Hernandez wrote: > Hi everybody. I need to sign some data, but I'm obtaining different > sign values when I try it with RSA_private_encrypt() and with > RSA_sign(). Don't post in HTML. If you are passing the same digest value to both functions then thaty's e

Problem with signing methods

2005-02-10 Thread Santiago Zapata Hernandez
Hi everybody. I need to sign some data, but I'm obtaining different sign values when I try it with RSA_private_encrypt() and with RSA_sign().       For example, I have the next buffer as input data to sign:       BYTE buffer[] = {0x2, 0xc7, 0xe4, 0x30, 0xb4, 0x41, 0xe2, 0x30, 0x40, 0xca, 0x90, 0x34

SCTP support in OpenSSL

2005-02-10 Thread Tolga Asveren
Is there a plan to have SCTP support in OpenSSL, considering that SCTP now is making ts way into major operating systems? Thanks, Tolga __ OpenSSL Project http://www.openssl.org User Support

Re: Unsupported attribute subjectAltName = dirName:section

2005-02-10 Thread Dr. Stephen Henson
On Thu, Feb 10, 2005, Oliver Leischner wrote: > Hello everybody, > i try to create an certificate request with some additional attributes. One > of those attributes is subjectAltName with a dirName. But the request > generation failed with the following error: > > Error Loading request extension

RE: Rijndael algorithm

2005-02-10 Thread Oscar Rodríguez
You can use Google and find things like this: http://groups.google.es/groups?hl=es&lr=&selm=c4juq8%24nfn%241%40FreeBSD.csi e.NCTU.edu.tw&rnum=6 Puedes usar Google y encontrar cosas como esta: http://groups.google.es/groups?hl=es&lr=&selm=c4juq8%24nfn%241%40FreeBSD.csi e.NCTU.edu.tw&rnum=6 -

Unsupported attribute subjectAltName = dirName:section

2005-02-10 Thread Oliver Leischner
Hello everybody, i try to create an certificate request with some additional attributes. One of those attributes is subjectAltName with a dirName. But the request generation failed with the following error: Error Loading request extension section v3_req 11382:error:22075075:X509 V3 routines:v2i_GE

verify cert file without ca as file

2005-02-10 Thread Chris Rørbæk
Hi users I'm trying to find a way of making a verify of a x509 certificate file without having our CA as file. NO-STDIO is not building on my version of openssl  0.9.6k (I know that this is old!). Could anyone tell me how to make this happen? Run openssl verify with only one file (x509 certifi

Re: Rijndael algorithm

2005-02-10 Thread Dunceor .
I suggest you read the documentation for openssl and learn which functions that exist and which ones you need to call. Here is a great beginners book: http://www.amazon.com/exec/obidos/tg/detail/-/059600270X/qid=1108034419/sr=8-1/ref=sr_8_xs_ap_i1_xgl14/002-8185538-7753620?v=glance&s=books&n=50784

Re: Rijndael algorithm

2005-02-10 Thread Manuel Sánchez Cuenca
Eduardo Pérez escribió: On 2005-02-10 08:39:24 UTC, Manuel Sánchez Cuenca wrote: can anybody tell me if the rijndael algorithm is supported in openssl? and in this case can anybody send me some examples? Yes, rijndael (aka aes) is supported. Just type: openssl ciphers -v and you'll see all

Re: Rijndael algorithm

2005-02-10 Thread Eduardo Pérez
On 2005-02-10 08:39:24 UTC, Manuel Sánchez Cuenca wrote: > can anybody tell me if the rijndael algorithm is supported in openssl? > and in this case can anybody send me some examples? Yes, rijndael (aka aes) is supported. Just type: openssl ciphers -v and you'll see all ciphers You can also know

Re: rijndael algorithm

2005-02-10 Thread Dunceor .
After Rijndael algortihm was accepted as the new standard it was officially named AES - Advanced Encryption Standard (i think it is) and you can use it in OpenSSL. Check this list for ciphers that you can use: http://www.openssl.org/docs/apps/ciphers.html Enjoy. On Thu, 10 Feb 2005 11:39:22 +010

rijndael algorithm

2005-02-10 Thread Manuel Sánchez Cuenca
Hello all, can anybody tell me if the rijndael algorithm is supported by openssl? and in this case can anybody send me some examples? Thanks in advance. -- === Manuel Sanchez Cuenca Dept. Ingenieria de la Informacion y las Comunicaciones Univers

Re: Problem with SSL_accept

2005-02-10 Thread Nauman Akbar
Thank you all of you. It would not have been possible without the help from this list. Special thanx to Dr. Henson, whose comments were really helpful. Just for record. Extra DH session keys have to be initialized to handle ADH (or may be DH as well) ciphers. This is very poorly mentioned in the d

Rijndael algorithm

2005-02-10 Thread Manuel Sánchez Cuenca
Hello all, can anybody tell me if the rijndael algorithm is supported in openssl? and in this case can anybody send me some examples? Thanks in advance. -- === Manuel Sanchez Cuenca Dept. Ingenieria de la Informacion y las Comunicaciones Univers