Re: How to pass SSL connection/object from one process to another?

2005-05-09 Thread Goetz Babin-Ebell
lewislyk wrote: Thanks for your solution. But if using shared memory, the shared memory address attached in the [Request Handler] and [Request Parser] may be different, the SSL object will not usable in both process. Oups Yes.. The solution for that would be a translator that knows the memory addre

RSA encryption/decryption programming

2005-05-09 Thread cranium2003
hello, I want to write a RSA encryption decryption program in C that encrypt data on one pc sends that encrypted data to other pc and get it decrypted on that other pc provided both pcs have Linux Platform. But i dont know how to use openssl to program in C. I know how to create publ

RE: How to pass SSL connection/object from one process to another?

2005-05-09 Thread lewislyk
Thanks for your solution. But if using shared memory, the shared memory address attached in the [Request Handler] and [Request Parser] may be different, the SSL object will not usable in both process. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Go

Re: RSA Encryption/Decryption.

2005-05-09 Thread Layla
Thank you :)Sebastian <[EMAIL PROTECTED]> wrote: Hmm,take a look at routines like RSA_new() to create RSA structures. As you coded 'sizeof apub', this will return the size of a _pointer_ - assuming a 32-bit architecture you will get round about four bytes ;-).See: http://www.openssl.org/docs/crypto

openssl smime usage to have multiple file attachments per smime encoding

2005-05-09 Thread Simon McMahon
Hi, I am new to openssl but not to PKI. I want to send encrypted & signed smime encodings but not using an email client or server. I want to send multiple file attachments per encoding but openssl appears to only want to do one message-body per encoding. 1. Can I use "openssl smime ..." to sen

Re: encryption / decryption not the same debug / release

2005-05-09 Thread Mike Gagnon
I found my problem. My initialization vector was too short. I remembered that it needed to be a multiple of 8 (I think) and that it needed to have a minimum length... Mike Mike Gagnon ([EMAIL PROTECTED]) wrote*: > > Hello Ken, > > Very nice of you to take the time out to write to me. Thanks a

Re: "decryption failed or bad record mac"

2005-05-09 Thread Dan Trainor
Tan - Ah ha, they'er quicker than I thought they would be. Below, is the method that they're using to create threads using SSL: First off, we are Pre-Threading (creating before used, never deleting) // declared globally SSL_METHOD *my_ssl_method; SSL_CTX *my_ssl_ctx; // end of globally declare /

Re: "decryption failed or bad record mac"

2005-05-09 Thread Dan Trainor
Tan - Thanks for responding. The dev team is preparing some code that illustrates how we're managing threads. However, with what I have described, how would SSL_CTX respond differently under different loads? From what I've seen, this is a somewhat popular problem. Either many people are doing

Re: PROBLEMS with PKCS7 type signedAndEnveloped

2005-05-09 Thread Tan Eng Ten
Before PKCS7_dataInit(), try adding: PKCS7_content_new(thePKCS7, NID_pkcs7_data) U might also want to explore PKCS7_set_detached() to see if this applies for you. -ET Tan Luis Alberto Pérez Paz wrote: Hi everybody, I need your help, I'm trying to make a PKCS7 signedAndEnveloped. I have read some

PROBLEMS with PKCS7 type signedAndEnveloped

2005-05-09 Thread Luis Alberto Pérez Paz
Hi everybody, I need your help, I'm trying to make a PKCS7 signedAndEnveloped. I have read some examples about it, but I dont know where's my error. there's a synthesis of my code: /*/ . ... PKCS7 *thePKCS7 = NULL; if( (thePKCS7 = PKCS7_new()) == NULL

RE: Building with VC6

2005-05-09 Thread Edward Chan
For what it's worth, I've built OpenSSL several times (using VC6), each time just following the instructions in INSTALL.W32 with NASM and it built fine. Ed > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dr. > Stephen Henson > Sent: Monday, May 0

Re: encryption / decryption not the same debug / release

2005-05-09 Thread Mike Gagnon
Hello Ken, Very nice of you to take the time out to write to me. Thanks a lot, I appreciate it very much. I read the article you pointed me to. It's a good one. I think it might be the uninitialized variable reason you mentionned. I was hoping there was some OpenSSL library initialization cal

Re: Building with VC6

2005-05-09 Thread Dr. Stephen Henson
On Mon, May 09, 2005, Milan Tomic wrote: > Hi, > > No, that doesn't help. :( My VC6 starts building OpenSSL and when > compiles 100+ files, it fails for this file (n_pkey.c). From the error > message I got I would say something is wrong in the source code of > OpenSSL (n_pkey.c file). > I use V

Re: How to pass SSL connection/object from one process to another?

2005-05-09 Thread Goetz Babin-Ebell
lewislyk wrote: Sorry, I do not have the idea what you mean? What is the OpenSSL memory handler? If I was unclear: OpenSSL doesn't call the memory handling functions (malloc, realloc, free) direct. It uses memory allocate functions (OPENSSL_malloc(), OPENSSL_realloc() and OPENSSL_free()) With CRYPT

RE: How to pass SSL connection/object from one process to another?

2005-05-09 Thread lewislyk
Sorry, I do not have the idea what you mean? What is the OpenSSL memory handler? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goetz Babin-Ebell Sent: Tuesday, May 10, 2005 3:18 AM To: openssl-users@openssl.org Subject: Re: How to pass SSL connection/obj

Re: How to pass SSL connection/object from one process to another?

2005-05-09 Thread Goetz Babin-Ebell
lewislyk wrote: I don't know, it seems can't, because the SSL object is created by SSL_new() which dynamic allocated memory for the object, If you view the file ssl.h, you will found the SSL structure definition, it is complex as it containing many object pointer, so I think it is very hard to manu

RE: SSLVerifyClient

2005-05-09 Thread Sven Löschner
Perhaps someone can help me now. I tried a couple of things last week to solve my problem, but none of them worked. Now I am running SSL in debug-mode, so here is a little bit more of the error (this is just a small extract out of the log-file, the logging goes further, but i think here is the main

Re: how does server determine http or https ?

2005-05-09 Thread Jostein Tveit
Paul Franz <[EMAIL PROTECTED]> writes: > This is defined by the port used. The default port for HTTPS is 443 and > the default for HTTP is 80. Or you can use "Upgrading to TLS Within HTTP/1.1" as defined in RFC 2817. -- Jostein Tveit <[EMAIL PROTECTED]> _

RE: Building with VC6

2005-05-09 Thread Milan Tomic
Hi, No, that doesn't help. :( My VC6 starts building OpenSSL and when compiles 100+ files, it fails for this file (n_pkey.c). From the error message I got I would say something is wrong in the source code of OpenSSL (n_pkey.c file). Best regards, Milan > -Original Message- > From: [EMAI

20050509 SNAPSHOT issue

2005-05-09 Thread The Doctor
Why did the below happen? Script started on Mon May 9 07:32:50 2005 gallifrey.nk.ca//usr/source/openssl-0.9.7-stable-SNAP-20050509$  make making all in crypto... making all in crypto/objects... making all in crypto/md2... making all in crypto/md4... making all in crypto/md5... making all in

RE: Question about Certificate Revokation lists using openssl ....

2005-05-09 Thread Matthew McHugh
Thanks. I will take a look at it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Francois noel Sent: Monday, May 09, 2005 9:34 AM To: openssl-users@openssl.org Subject: Re: Question about Certificate Revokation lists using openssl Matthew McHugh a

RE: Building with VC6

2005-05-09 Thread ahmad hassan
Hello, What u have to do is register environment variables of vc. For that locate vcvars.bat file usually located in C:\Program Files\Microsoft Visual Studio\VC98\Bin or whatever you root directory is or rerun vc++ setup to register vc environment variables. Regards, Ahmad. From: "Milan Tomic"

Re: how does server determine http or https ?

2005-05-09 Thread Paul Franz
This is defined by the port used. The default port for HTTPS is 443 and the default for HTTP is 80. Paul Franz On Mon, 2005-05-09 at 09:52, vijay basav wrote: > hi > > i am trying to design a server which is compatible with http 1.1 and > 1.0. i want to make it secure/nonsecure depending on the

how does server decide whether http or https is to be used?

2005-05-09 Thread vijay basav
hi i am trying to design a server which is compatible with http 1.1 and 1.0. i want to make it secure/nonsecure depending on the client uri. now the problem is how to decide this(by looking at the uri)? when the URI is recvd, i get the data GET http 1.1 ..? how do i decide whether http

Building with VC6

2005-05-09 Thread Milan Tomic
Title: Building with VC6 I've just got this error while building latest version of OpenSSL: n_pkey.c .\crypto\asn1\n_pkey.c(96) : error C2370: 'NETSCAPE_ENCRYPTED_PKEY_it' : redefinition; different storage class     .\crypto\asn1\n_pkey.c(93) : see declaration of 'NETSCAPE_ENCRYPTED_

how does server determine http or https ?

2005-05-09 Thread vijay basav
hi i  am trying to design a server which is compatible with http 1.1 and 1.0. i want to make it secure/nonsecure depending on the client uri.  now the problem is how to decide this(by looking at the uri)? when the URI is recvd, i get the data "GET http 1.1 ..? how do i decide whether ht

Re: Question about Certificate Revokation lists using openssl ....

2005-05-09 Thread Francois noel
Matthew McHugh a écrit : > Hello all, hello alone > > Is there a tool that I can use to manage CRL's? I am looking at > starting my own CA for my company, but we need to revoke certificates > before they expire. I think this can be done via the command line, > but I was wondering if there is

Question about Certificate Revokation lists using openssl ....

2005-05-09 Thread Matthew McHugh
Hello all,   Is there a tool that I can use to manage CRL's?  I am looking at starting my own CA for my company, but we need to revoke certificates before they expire.  I think this can be done via the command line, but I was wondering if there is an open source tool out there that can do t

Re: encryption / decryption not the same debug / release

2005-05-09 Thread Ken Goldman
> From: "Mike Gagnon" <[EMAIL PROTECTED]> > Date: Sun, 08 May 2005 21:27:31 + > > I'm zeroing in on my problem. > > Encryption / decryption WORKS in DEBUG in the Visual C++ IDE BUT NOT when run > from windows explorer. > > Also doesn't work at all in release mode. I tried turning off optimi

Linking of different PKIs

2005-05-09 Thread Olaf Gellert
Hi all, it may be a little bit off topic but I guess this could be interesting for some of you. In the last months we tested some means of linking different PKIs together (for example cross-certificates). Tests were conducted with Windows2000, WinXP and Linux and the most common mail- and WWW-clie

export from oracle wallet with CA certificates

2005-05-09 Thread Ximo Domenech
Hi, quick question, does anybody know how to export a server certificate from oracle wallet including CA certificates ? TIA, Ximo. __ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn

Re: RSA Encryption/Decryption.

2005-05-09 Thread Sebastian
Hmm, take a look at routines like RSA_new() to create RSA structures. As you coded 'sizeof apub', this will return the size of a _pointer_ - assuming a 32-bit architecture you will get round about four bytes ;-). See: http://www.openssl.org/docs/crypto/RSA_new.html The runtime error is caused b

RE: How to pass SSL connection/object from one process to another?

2005-05-09 Thread lewislyk
I don't know, it seems can't, because the SSL object is created by SSL_new() which dynamic allocated memory for the object, If you view the file ssl.h, you will found the SSL structure definition, it is complex as it containing many object pointer, so I think it is very hard to manually allocate s

RE: How to pass SSL connection/object from one process to another?

2005-05-09 Thread Dave Peter
Shared memory or message queue possibly? Dave Peter Senior Software Engineer, Unix Clients Citrix Systems (R&D) Ltd Chalfont St Peter, UK +44 (0)1753 276522 [EMAIL PROTECTED] www.citrix.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of lewislyk Sent: 0

RE: How to pass SSL connection/object from one process to another?

2005-05-09 Thread lewislyk
The Server is already doing this that could pass file descriptor from one process to another, but I wonder when the connection is SSL connection, it should pass both SSL object and the connection file descriptor, so the problem is, how to pass the SSL object to other process? -Original Message