Reducing SSL3 Buffer Requirements

2005-09-13 Thread Martin Del Vecchio
I'm using OpenSSL 0.9.8. In ssl/ssl3.h, SSL3_RT_MAX_PLAIN_LENGTH is defined as 16384, and SSL3_RT_MAX_PACKET_SIZE is defined as that value plus some overhead. In ssl/s3_both.c, the function ssl3_setup_buffers() allocates a read buffer and a write buffer based on this value. The two buffers tot

Disabling IDEA, MDC2, and RC5 in a Windows compile

2005-09-13 Thread Berard, Gary L
Title: Disabling IDEA, MDC2, and RC5 in a Windows compile Greetings, Can someone please tell me how to disable IDEA, MDC2,and RC5 in a Windows compile?  Where should the options to disable these be set and what are they? Thanks, Gary

"unable to get certificate CRL" from SSL_Connect()

2005-09-13 Thread david kine
Looking for the cause of this error in my secure client application, coming from the SSL_connect() function: - ERROR 3: unable to get certificate CRL SSL_connect error 1, error:0001:lib(0):func(0):reason(1) SSL error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate

TLS problem...

2005-09-13 Thread Jiann-Ming Su
I'm trying to get TLS working for OpenLDAP. I'm using Debian. My CA server has openssl 0.9.7e, and my ldap server is 0.9.7g. When I test with s_server and s_client, I notice on the client output: Server certificate subject=/C=US/ST=MyState/O=CHBE/OU=Bogus/CN=ldap.chbe.bogus issuer=/C=US/S

RE: [EMAIL PROTECTED]: openssl for .NET]

2005-09-13 Thread Antonio Maciel
Reiner, See http://www.codeproject.com/managedcpp/sslclasses.asp Regards, Antonio Maciel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lutz Jaenicke Sent: Tuesday, September 13, 2005 12:40 PM To: openssl-users@openssl.org Subj

[EMAIL PROTECTED]: openssl for .NET]

2005-09-13 Thread Lutz Jaenicke
Forwarded to the respective mailing list. - Forwarded message from Reiner Höhnke <[EMAIL PROTECTED]> - X-Original-To: [EMAIL PROTECTED] X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Subject: openssl for .NET Date: Mon, 12 Sep 2005 15:42:00 +0200 X-MS-Has-Attach: X-MimeO

Re: Verifying a signed message...pkcs7 question.

2005-09-13 Thread Marco Roeland
On Tuesday September 13th 2005 Victor T. Chevalier wrote: > When I use the function: > > PKCS7_verify(pkcs7, chain, store, pkcs7BIO, outBIO); It has an extra 'flags' argument. > I get ^M in my output file (using unix). Is there a reason for this? > If so is there perhaps a flag to disable it?

Verifying a signed message...pkcs7 question.

2005-09-13 Thread Chevalier, Victor T.
When I use the function: PKCS7_verify(pkcs7, chain, store, pkcs7BIO, outBIO); I get ^M in my output file (using unix). Is there a reason for this? If so is there perhaps a flag to disable it? Thanks, Victor __ OpenSSL Project

question on ways to read encrypted stream

2005-09-13 Thread Alok
Hi,   i have say, a file which has a tcpdump of a SSL session   I am able to set the corresponding pass and SSL file names accurately.   The problem starts when I need to use the session Id as present in the stream   Does anyone know how I can force SSL_read to use a session Id, which in tur

S/MIME with zlib-compression (RFC 3274)

2005-09-13 Thread Mats Nilsson
Hi I'm looking for an implementation of S/MIME with CMS compression support (RFC 3274). I understand that OpenSSL implements S/MIME v2.0 and compression formally is an extension to S/MIME v3.1. That said, do you consider it technically feasible to try to hack it into the OpenSSL as it looks today

SSL_get_peer_certificate()

2005-09-13 Thread Milan Tomic
Title: Message   I'm retriving server SSL cert using SSL_get_peer_certificate. How can I compare this cert with one I have stored in file (DER)?   Thank you in advance, Milan

Re: Attribute certificates

2005-09-13 Thread Vadim Godunko
[EMAIL PROTECTED] wrote: > Hello in the pervasive laboratory of Universidad Carlos III de Madrid > we are actually developping a C++ set of classes that performs > opening decodign, coding, verifying and issuing of attribute > certificates. May it could be helpfull?. We are supporting actually

Re: OpenSSL use into java applet

2005-09-13 Thread Angel Martinez Gonzalez
Hello:   Well, I can use JNI and web applet when I signed this applet. I don´t have problem with JNI and web applet. The problem is when I use openssl functions in my native code. If I don´t use openssl it work fine.   I read some articles about the incompatibility JNI and web-loaded applets

Re: Support of X509 Attribute Certificates

2005-09-13 Thread Vadim Godunko
Kiefer, Sascha wrote: > Which programming language do you use and waht operating system? > Primary programming language is Ada. Primary operating system is Linux. I known, OpenSSL writted on C, I am ready to use C for implement low level functionality and when provide binding for Ada language. (T

Re: OpenSSL use into java applet

2005-09-13 Thread Bhupendra K Joshi
Hi Angel,   JNI and web-loaded Applets are incompatible, even if you sign them or jump through incredible hoops. You must use a Signed Applet to install an second signed one on the client's local hard disk, and then use that second Applet to do your JNI work. Even then loadLibrary is unreliable.  

RE: Support of X509 Attribute Certificates

2005-09-13 Thread Kiefer, Sascha
Which programming language do you use and waht operating system? > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Vadim Godunko > Sent: Dienstag, 13. September 2005 11:59 > To: openssl-users@openssl.org > Subject: Re: Support of X509 Attribute Certif

Re: Attribute certificates

2005-09-13 Thread dds
Hello in the pervasive laboratory of Universidad Carlos III de Madrid we are actually developping a C++ set of classes that performs opening decodign, coding, verifying and issuing of attribute certificates. May it could be helpfull?. We are supporting actually RFC3281 attributes and extensio

Re: Support of X509 Attribute Certificates

2005-09-13 Thread Vadim Godunko
Kiefer, Sascha wrote: > Do you have a sample certificate so i get the idea? > No, I have not sample certificate. I need an API for BER and DER encoding/decoding of attribute certificates, verify attribute certificates, retrieve attributes, defined by RFC-3281 which will be used by access and audi

Re: OpenSSL use into java applet

2005-09-13 Thread Angel Martinez Gonzalez
Hello: I use various jar files because I use a jar with the code of my program, and others jar files from libraries that my code use. My html code is: The file "parteI.jar" is my code, and the others are from OpenCard. I have signed this jar files to allow the execution and not have security

Re: OpenSSL use into java applet

2005-09-13 Thread Dominique Lohez
Angel Martinez Gonzalez wrote: Hello: Sorry for my english. I have a native methods written in C that use openssl functions. This native methods are invoke into java applet throught JNI, but it don´t work. I think that my applet don´t find some .dll or .lib from OpenSSL, but I don´t know how d

OpenSSL use into java applet

2005-09-13 Thread Angel Martinez Gonzalez
Hello: Sorry for my english. I have a native methods written in C that use openssl functions. This native methods are invoke into java applet throught JNI, but it don´t work. I think that my applet don´t find some .dll or .lib from OpenSSL, but I don´t know how do it. I use Microsoft Visual Stud