RE: transformation from WinInet

2005-04-21 Thread Steven Reddie
:-O It may have been helpful if you didn't already have a copy. I'm guessing that Mike didn't have intimate knowledge of the content of your bookshelf. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Sent: Friday, 22 April 2005 2:24 AM To: openssl-us

Smime and aes decryption corruption

2005-04-21 Thread Alex Heatley
Running OpenSSL 0.9.7g 11 Apr 2005 on a HP server using HPUX 11.00 compiled with gcc, I'm seeing a problem with decrypting smime messages that have been encrypted with aes128. The problem is that at around the 4111 byte mark the message has a whole pile of nulls inserted and the rest of the mess

Re: Diffie-Hellman key generation

2005-04-21 Thread Bob Bradley
On 4/21/05 6:17 AM, "Christian Beaulieu" <[EMAIL PROTECTED]> wrote: > I¹ve need getting a strange out of my application when generating > Diffie-Hellman keys. I am using OAKLEY primes for key generation and the > strange thing is that sometimes my key length ends up one byte short of the > expecte

Re: WRONG FINAL BLOCK LENGTH

2005-04-21 Thread Douglas Laing
Thank you. I had got my 0 and 1 values for enc swopped around so I was decrypting when trying to encrypt and vice versa. do_crypt works as advertised when invoked correctly. Thanks again - Douglas Laing Nils Larsch wrote: Douglas Laing wrote: I copied the do_crypt routine (General encryption, de

RE: transformation from WinInet

2005-04-21 Thread Rick
I've already done that. Not that helpful. Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael D'Errico Sent: Thursday, April 21, 2005 9:21 AM To: openssl-users@openssl.org Subject: Re: transformation from WinInet > I'm preparing to transfo

Re: transformation from WinInet

2005-04-21 Thread Michael D'Errico
I’m preparing to transform an app from using WinInet to OpenSSL… does anyone have any recommendations, sources, resources, caveats, etc., that I can use to accomplish this endeavor? Buy a copy of "Network Security with OpenSSL" by O'Reilly & Associates. Mike __

transformation from WinInet

2005-04-21 Thread Rick
Hi.    I’m preparing to transform an app from using WinInet to OpenSSL… does anyone have any recommendations, sources, resources, caveats, etc., that I can use to accomplish this endeavor?   Your candid constructive replies are welcome.   Rick

sk_X509_CRL_delete

2005-04-21 Thread Calista
Hi, I load the CRLs in the beginning of my application. Then I check the crls with X509_CRL_verify and if it fails, then I do a sk_X509_CRL_delete(crl_stack, i) for e.g. for(i=0; i < num_crls; i++) { crl = sk_X509_CRL_value(crl_stack, i); . X509_verify_CRL(); if (above check fails) {

openssl s_client -connect not working

2005-04-21 Thread Steve Greenfield
# openssl s_client -connect sliver.maca.vtv.edu:995 CONNECTED(0003) I am running redhat Linux version 2.6.9-5.0.3.ELsmp ([EMAIL PROTECTED]) (gcc version 3.4.3 20041212 (Red Hat 3.4.3-9.EL4)). When I connect it just hangs. I am trying to setup UW Imap and use pop3s but cannot get it to work.

Re: cygwin

2005-04-21 Thread hao chen
Hi, After adding the bc package, the error related to bc is gone. Thanks for that help. Now I got another errors when I run 'make test' in cygwin: cat ./p ./p.clear differ: char 2, line 1 make[1]: *** [test_enc] Error 1 make[1]: Leaving directory `/cygdrive/d/downloads/open-source/open-ssl/openss

Re: cygwin

2005-04-21 Thread hao chen
The GNU numeric processing language (bc) and reverse polish calculator (dc) --- vijay basav <[EMAIL PROTECTED]> wrote: > bc is calculator generally available in linux. u > need to to install this(select bc option when > installing cygwin). > vijay > > > > > hao chen <[EMAIL PROTECTED]> wrot

RE: Certificate Handling APIs

2005-04-21 Thread Ho, Victor
Hi, I'd like to find out whether openssl provides the same certificate handling APIs as RSA does, such as the followings: X509_STORE_CTX_get_ex_data() SSLCERT_STORE_CTX_get_current_-cert() SSLCERT_to_binary() Would be great to know if openssl provides similar functionalities with different

Diffie-Hellman key generation

2005-04-21 Thread Christian Beaulieu
I’ve need getting a strange out of my application when generating Diffie-Hellman keys. I am using OAKLEY primes for key generation and the strange thing is that sometimes my key length ends up one byte short of the expected length. I am just wondering if this is expected behaviour or not.

Re: cygwin

2005-04-21 Thread vijay basav
bc is calculator generally available in linux. u need to to install this(select bc option when installing cygwin). vijay     hao chen <[EMAIL PROTECTED]> wrote: When I use cygwin to run the test of openssl, I gotthe following error:running bcbc: not foundcat: tmp.bctest: No such file or directoryb

how to check CRL ?

2005-04-21 Thread david
hello! That is my first post on the mailing list so I hope my subject is good...   I simulate the communication between a SSL/TLS server and a SSL/TLS client, using X509v3 certificats:   On the server: $ openssl s_server -accept 4433 -no_ssl2 -no_dhe \> -cert certs/server.crt -key private/server.

Re: "select" for timeout work with SSL?

2005-04-21 Thread Anders Ringaby
Just for the record, poll() is also an alternative when implementing a timeout for sockets. / Anders On Wed, 20 Apr 2005, Dr. Stephen Henson wrote: > On Wed, Apr 20, 2005, Schneider John wrote: > > > > > I found this snippet for implementing a timeout for sockets, although > > the example had

Re: JNI Problems urgent.

2005-04-21 Thread sravan
hi, BF_set_key is marked as defined in libcrypto.so or libeay32.dll(for windows) check if this openssl library is in your library path. sravan Pól Ó Riain wrote: Hey, yes it does exist. Is there anything wrong with the code ? If BF_set_key function is statically linked, you ca

Re: JNI Problems urgent.

2005-04-21 Thread Pól Ó Riain
Hey, yes it does exist. Is there anything wrong with the code ? > If BF_set_key function is statically linked, you can confirm > those symbols in shared object, like: > > $ nm libnativebf.so > U BF_cfb64_encrypt > U BF_set_key <- must exist. > 09a0 T Java_nat

Re: Multi process Server and openssl

2005-04-21 Thread Pablo J Royo
If you have control over the father process source code, I think it is easier to accept( ) the incomming connection in the father process, then do a fork( ) and let the child to stablish the SSL channel using the inherited accepted socket returned by accept( ). This way, you don´t need to share mem