automatic seed size

2006-04-03 Thread Adam Mlodzinski
Hi there, I'm using OpenSSL 0.9.7g, and am trying to document the sources of entropy used automatically by the PRNG. O'Reilly's Network Security with OpenSSL lists the following sources (page 100 & 102), but I'm not sure if the egd sources are checked automatically: /dev/random /dev/urandom /var/

PreShared Keys with TLS

2006-04-03 Thread Jay Potter
Hi, I want to use the PreSharedKeys in TLS using AES-256 as specified in RFC 4279. I would like to utilize this within a browser such as FireFox. Anyone have any experience in this area to give me some guidance what needs to be set up? Both my client and my server already know what AES ke

RE: Newbie questions : 2 issues relating to interaction between Linux, Windows 2000 and Cisco.

2006-04-03 Thread Davidson, Brett (Managed Services)
Thanks Kyle. I had not been aware of the "registration authority" option. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Hamilton Sent: Monday, 3 April 2006 2:21 p.m. To: openssl-users@openssl.org Subject: Re: Newbie questions : 2 issues relating to

RE: SSL Certificate and encrypting files

2006-04-03 Thread David Schwartz
> Actually I am using Client Authentication to identify and login to a > website. But now I want to add the possibility to encrypt files > with another > users' public key. The reason to encrypt a file with a users' public key would be so that only that user could decrypt it. If that's r

Re: How to prompt user for password

2006-04-03 Thread Kyle Hamilton
You can't do this in the current implementation of TLS -- a "password" that is checked per-session is an application-layer issue, not a protocol-layer issue. It's handled on webservers by either having them require Basic authentication even after a successful SSL/TLS handshake (possibly including

openssl0.9.7e crash

2006-04-03 Thread Krishna M Singh
Hi All I am getting a crash at the following location in the OpenSSL at SSL_CTX_Free -> SSL_cert_free This problem doesn't occurs on the first instance and code is running over a vxWorks box for hours and than it crashes. Any idea whether any problem related to this fixed in version after 0.9.7e

DSA_sign for etsi integrity check

2006-04-03 Thread manolo123 (sent by Nabble.com)
hi, i am trying to create digital signature for etsi. The max length of signature that i can use is 20 bytes. Using DSA_sign returns signature length of 48 bytes (dsa size). How can i create digital signature with size of up to 20 characters Thanks -- View this message in context: http://www

Re: Building OpenSSL on Windows

2006-04-03 Thread Dr. Stephen Henson
On Mon, Apr 03, 2006, Hellstern, Thomas (LfSt) wrote: > Hi, > > I tried to build OpenSSL-fips-1.0 on Windows XP. > > So I followed the install.w32-instructions: > Since you are using the FIPS distribution I'm assuming you want the FIPS validated module and a version of OpenSSL linked against i

RFC 3546 - Maximum Fragment Length Negotiation

2006-04-03 Thread POUJOL Stephane
Title: RFC 3546 - Maximum Fragment Length Negotiation Hello, Is it planned to integrate the Maximum Fragment Length Negotiation in the next release of openssl? Regards stephane

Re: [BUG] Installation problem on cygwin

2006-04-03 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 03 Apr 2006 10:22:26 +0200, Yann Coscoy <[EMAIL PROTECTED]> said: Yann.Coscoy> Technical Description: Yann.Coscoy> The script 'Configure' (line 1253) uses 'chop' function Yann.Coscoy> to suppress end-of-line characters. Unfortunalety under Yann.Coscoy> cygwi

Re: RSA padding problem

2006-04-03 Thread Marek Marcola
Hello, Change line: > returnvalue=RSA_private_decrypt(8,pubenc,recovered,mykey,RSA_PKCS1_OAEP_PADDING); > to someting like that: returnvalue=RSA_private_decrypt(RSA_size(mykey),pubenc,recovered,mykey,RSA_PKCS1_OAEP_PADDING); Best regards, -- Marek Marcola <[EMAIL PROTECTED]>

[BUG] Installation problem on cygwin

2006-04-03 Thread Yann Coscoy
Distribution: openssl-0.9.8a.tar.gz System: Cygwin Short description: When command "./config" is executed, the protocols mdc2 and rc5 are not excluded in produced Makefile as it should be. The command "make build_crypto build_engines" which follows fails. Technical Description: The script 'Co

Building OpenSSL on Windows

2006-04-03 Thread Hellstern, Thomas \(LfSt\)
Title: Building OpenSSL on Windows Hi, I tried to build OpenSSL-fips-1.0 on Windows XP. So I followed the install.w32-instructions: - perl Configure VC-WIN32 - ms\do_ms - nmake -f ms\nt.mak (to build a static library) --> here I got after the copy of the headers the following error:

Re: SSL Certificate and encrypting files

2006-04-03 Thread Bernhard Froehlich
Susanne Kaufmann wrote: Hello, While experimenting with my apache webserver and Openssl, there came up some questions. At first, what i am doing actually: Actually I am using Client Authentication to identify and login to a website. But now I want to add the possibility to encrypt files with

SSL Certificate and encrypting files

2006-04-03 Thread Susanne Kaufmann
Hello, While experimenting with my apache webserver and Openssl, there came up some questions. At first, what i am doing actually: Actually I am using Client Authentication to identify and login to a website. But now I want to add the possibility to encrypt files with another users' public k