Convert C++ to C# OpenSSL app

2006-01-20 Thread OpenSSLGRT
I just got Mr. Sanchez OpenSSL port to PDA (http://karajan.it.uc3m.es/~pervasive/wce_lite_compat/) – and it works great! I have a simple SSL Client in C++. Now I want to convert that to C#. I assume(???) that I would use the two DLLs but libeay32.dll and ssleay32.dll that I now have on the

source code error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i fips build ?

2006-01-20 Thread Tinnerello, Richard
Title: source code error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i fips build ? Hello, There seems to be a source code syntax error in fips/aes/asm/fips-ax86-elf.s in 0.9.7i that causes the build to fail on our Solaris 10 Opteron system: gcc -c   -o asm/fips-ax86-elf.o asm/fips-ax86-elf.s

Re: Engine issue with LUNA CA3 HSM

2006-01-20 Thread Dr. Stephen Henson
On Fri, Jan 20, 2006, David C. Partridge wrote: > If you need to performs RSA private keyops, then ask the device to > sign/decrypt for you. > That's what the commands he's been trying should do and which have been failing... Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homep

RE: compile error in randfile.c on Solaris 10 Opteron

2006-01-20 Thread Tinnerello, Richard
Thanks, you are right! Our system admin corrected something in the gcc setup and it fixed this error. Richard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Hamilton Sent: Thursday, January 19, 2006 8:46 PM To: openssl-users@openssl.org Subject: Re:

RE: Engine issue with LUNA CA3 HSM

2006-01-20 Thread David C. Partridge
Why would you want the private key to leave the token in clear anyway? If you need to performs RSA private keyops, then ask the device to sign/decrypt for you. The CA3 FWIW will not even let you wrap a private key off under another key as this HSM is intended for use as a CA's HSM. If you need t

Re: Engine issue with LUNA CA3 HSM

2006-01-20 Thread Dr. Stephen Henson
On Fri, Jan 20, 2006, [EMAIL PROTECTED] wrote: > > Each time I try to load a key from the token, an error occurs whatever > the version of OpenSSL : > > /usr/local/ssl/bin/openssl req -engine LunaCA3 -keyform engine -text > -key "RSA 1024-bit Private Key:1" -out cr.pem > Using configuration fr

Engine issue with LUNA CA3 HSM

2006-01-20 Thread [EMAIL PROTECTED]
Hi, I'm trying to sign a CSR with a private key stored on a Luna CA3 token. I use for this 2 versions of OpenSSL : - The first one is provided by SafeNet : openssl-lunaca3-0.9.6-5.i386.rpm - The second one is constructed from OpenSSL 0.9.7b with the patch openssl-lunaca3-patch-0.9.7.tar Th

Re: Question on SSL/TLS protocol and self-signed certificate

2006-01-20 Thread Lusiana Lusiana
On 1/20/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > > The s_client utility is a test utility which will continue with a connection > after a certificate chain verification failure. A normal client would exit > under those circumstances. Hi Steve, Thank you very much for the prompt reply. T

Query on IE's SSL Renegotiation

2006-01-20 Thread Gayathri Sundar
Hi there., Have some queries on the way IE is handling SSL Renegotiation. 1. Whenever IE receives a "Client Cert" req from the Server, say when it is talking for the 1st time (IE gonna connect to this ssl server for the very 1st time), it immediately closes the TCP connection abrubtly by sending

Re: what exactly is the difference between ssl and ssh (secure shell)?

2006-01-20 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 19 Jan 2006 11:03:09 -0800, "Chong Peng" <[EMAIL PROTECTED]> said: ChongPeng> if you google "ssl and ssh", you will find a few pages ChongPeng> regarding this issue, such as: ChongPeng> ChongPeng> http://www.snailbook.com/faq/ssl.auto.html ChongPeng> http:/

Re: what exactly is the difference between ssl and ssh (secure shell)?

2006-01-20 Thread Bernhard Froehlich
Chong Peng wrote: if you google "ssl and ssh", you will find a few pages regarding this issue, such as: http://www.snailbook.com/faq/ssl.auto.html http://www.rpatrick.com/tech/ssh-ssl/ but all in all, what ssl accomplishes can be done by ssh and what ssh accomplishes can be done by ssl. it se