enigne support

Hi, Is it possible to use the openssl engine if the hardware supports only primitive bignumber operations (multiplication and modular exponentiaition)? Your help is greatly appreciated. Thanks, -Anil Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort.

Diffie Hellman Parameter Generation Question

Hi List, I have a question which is partly OpenSSL specific and partly a more general Diffie-Hellman (parameter generation) question The background for my problem is that I'm writing an engine and am trying to implement the: int (*generate_params)(DH *dh, int prime_len, int generator, BN_GEN

RES: Different versions of OpenSSL

I'll try some of this options. Thanks a lot. Cleidson Correia -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nome de Richard Levitte - VMS Whacker Enviada em: terca-feira, 20 de setembro de 2005 16:14 Para: openssl-users@openssl.org; [EMAIL PROTECTED] Assunto: Re: Di

Re: Different versions of OpenSSL

In message <[EMAIL PROTECTED]> on Tue, 20 Sep 2005 13:49:12 -0300, "Cleidson" <[EMAIL PROTECTED]> said: cleidson> I use Linux 2.6.5, OpenSSL 0.9.7 and OpenVPN 2.0. cleidson> Now I want to use OpenVPN with OpenSSL 0.9.8, but keeping cleidson> other aplications using OpenSSL 0.9.7. cleidson> Someon

Re: Query abt s->cert->pkeys : encountering No shared cipher error

On Tue, Sep 20, 2005, Vinay Jha wrote: > Hello, > Thanks for the quick response. > > I'm using certificate chain (root-intermediate and cert). There is no > option of using certchain in the s_client or server. There is an option to do that. If you include the intermediate and root certificates i

RE: Query abt s->cert->pkeys : encountering No shared cipher error

Hello, Thanks for the quick response. I'm using certificate chain (root-intermediate and cert). There is no option of using certchain in the s_client or server. I did use ssltest (shipped with openssl) and modified the line if (!SSL_CTX_use_certificate_file(s_ctx,server_cert,SSL_FILETYPE_P

Different versions of OpenSSL

Hi, I use Linux 2.6.5, OpenSSL 0.9.7 and OpenVPN 2.0. Now I want to use OpenVPN with OpenSSL 0.9.8, but keeping other aplications using OpenSSL 0.9.7. Someone known whow to do that? Thanks in advance. Cleidson Correia __ OpenSSL

Re: rsa_publiic_encrypt problem

Hi Steve, I've just solved the problem, as you correctly guessed, I was using strlen(buffer) as the length of the string to decrypt. The fact that it was sometimes working would be the case where the random element would not result in an embedded null being produced. I suppose this problem i

Re: Query abt s->cert->pkeys : encountering No shared cipher error

On Tue, Sep 20, 2005, Vinay Jha wrote: > Hi all, > I'm having a problem where ssl_handshake returns with the alert "No > shared cipher". After debugging a little more I have following > questions: Well before delving into the internals you should consider a few issues... Can you connect to the s

Query abt s->cert->pkeys : encountering No shared cipher error

Title: Query abt s->cert->pkeys : encountering No shared cipher error Hi all, I'm having a problem where ssl_handshake returns with the alert "No shared cipher". After debugging a little more I have following questions: 1. What is s->certs and s->certs->pkeys? What is their role and who/wha

SSL public-key-encryption question

Hi everyone, I have a question about pulic-key-encryption algorithm. I'm doing a Radius client with PEAP protocol but when I receive the server's cetificate, I have to get its public key, generate a 46 random PreMasterSecret and then.. I don't know. RFC information isn't clearly explained. I

Re: ASN.1 problems when implementing CMP protocol

On Tue, Sep 20, 2005, [EMAIL PROTECTED] wrote: > > At a guess I'd say you are using an EXPLICIT tag when you > > need an IMPLICIT > > one. The top (working) example could be an IMPLICIT [6] > > SEQUENCE OF and the > > non working second one an EXPLICIT [6] SEQUENCE OF. However > > its not possi

RE: ASN.1 problems when implementing CMP protocol

> At a guess I'd say you are using an EXPLICIT tag when you > need an IMPLICIT > one. The top (working) example could be an IMPLICIT [6] > SEQUENCE OF and the > non working second one an EXPLICIT [6] SEQUENCE OF. However > its not possible > to say for sure. > > BTW if you want SubjectPublicKey

Re: ASN.1 problems when implementing CMP protocol

On Tue, Sep 20, 2005, [EMAIL PROTECTED] wrote: > Hello, > > I'm implementing CMP protocol (2510bis-08) and I have some questions of ASN.1 > > I have been using the ASN1 lib in OpenSSL and I love it, thanks! > The macros help a lot! I don't have so much experience with ASN1. > Thank you, for re

ASN.1 problems when implementing CMP protocol

Hello, I'm implementing CMP protocol (2510bis-08) and I have some questions of ASN.1 I have been using the ASN1 lib in OpenSSL and I love it, thanks! The macros help a lot! I don't have so much experience with ASN1. But my problem is following: Somehow I can't create correct ASN1 structure of C