Re: Use of Engines

2005-04-07 Thread Tan Eng Ten
Hi Edward, I am guesing that you need to call ENGINE_ctrl() to set the right parameters. These are control commands and each engine has a set of these; to see what control commands are available for the ubsec engine: $ openssl engine ubsec - Or you could just look into the ubsec engi

Use of Engines

2005-04-07 Thread Edward Chan
Title: Use of Engines Is it required to call ENGINE_init()?  Or is this sufficient ENGINE* e = ENGINE_by_id(id); ENGINE_set_default(e, ENGINE_METHOD_ALL); I have looked in various code, and I mostly see the latter.  But in the stunnel code, I see them doing ENGINE* e = ENGINE_by_id(id

RE: RAND_seed()

2005-04-07 Thread Bibbs, Christopher
In my case, I'm trying to support various versions of Linux, AIX, Solaris, HP-UX, Windows, and something running on OS/360 when the details finally filter back to me. I had assumed up until a few days ago that all of the UNIX folks had one of the /dev/random variants or that OpenSSL would fully se

RE: openssl smime ability to create a multi-attachment message?

2005-04-07 Thread Chevalier, Victor T.
Hey Steve, When I create a mime message with mutt then pass it to openssl, the mime message created in mutt contains date, to, from, and subject...but isn't s/mime supposed to contain that? If I create a mime message with all the header information then sign that mime message with S/MIME with all

RE: RAND_seed()

2005-04-07 Thread Edward Chan
I don't know if /dev/random is available on all linux machines. But I think it is. But as for Windows, which does not have /dev/random, I believe OpenSSL seeds the PRNG on Windows automatically using a variety of clever ideas and sources of entropy. It is probably better than what you could come

Re: [Openvpn-users] Re: OpenSSL / OpenVPN / Padlock anomaly with small blocks of data.

2005-04-07 Thread Rolf Fokkens
Michal Ludvig wrote: Rolf - try adding call to padlock_reload_key() to the end of padlock_verify_context() in OpenSSL crypto/engine/hw_padlock.c file and tell us if it helped. Seems to do the trick as well. Which is strange, isn't it? It only adds another pushfl; popfl... but padlock_verify_con

Re: SSL Library Error

2005-04-07 Thread Maddalena . Pulcini
Hi (sorry for my english), I got a similar problem. openssl-0.9.7d has problems with some kind of ciphers; for example, my client offers as first cipher AES256-SHA (Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1) and when transmission starts I get:

Re: RAND_seed()

2005-04-07 Thread Egon Andersen
Layla wrote: In addition to RAND_screen(), you can use: RAND_event(...,...,...); but you must know that use of both functions is highly discouraged, in other words they should be your last resort. As you can see from the construction I used, RAND_screen() was only called, if RAND_status() return