Novice - Need Help !

2006-05-24 Thread Mandar sarlashkar
Hello ! I am trying to setup Apache 2.0.58 on Mandriva Linux 2006... Linux platform is new for me... When I tried to configure Apache I got the erroe : checking for SSL/TLS toolkit includes... configure: error: OpenSSL headers not found The OpenSSL version is 0.9.7g Why I could not see

Re: Junk code after enc/dec by OpenSSL

2006-05-24 Thread Kyle Hamilton
For basic information on cryptography, I second Victor's recommendation for Schneier's Applied Cryptography. You can also find information at wikipedia.org. Here are the basic answers to your questions, but for more detailed information please consult other sources... 1) b64-encoding is a type

Re: Junk code after enc/dec by OpenSSL

2006-05-24 Thread Victor Duchovni
On Wed, May 24, 2006 at 09:20:53PM +, Xu Gang wrote: > Hi, fellows. Thanks a lot for the hint. I'm using Blowfish in cfb mode. > Will there be any "padding not removed" problem with this cipher? > > Actually I'm very new here. I wonder if anyone can also clarify to me some > basic concepts

openssl verify not finding cacert.pem

2006-05-24 Thread Jack Eubanks
Operating system: Windows XP OpenSSL version: OpenSSL 0.9.8b 04 May 2006   I have created a CA root and then created a Certificate Request which I then sign using the CA root.   When I execute the “openssl verify testcert.pem” command I get the following error:   error 20

Re: Junk code after enc/dec by OpenSSL

2006-05-24 Thread Xu Gang
Hi, fellows. Thanks a lot for the hint. I'm using Blowfish in cfb mode. Will there be any "padding not removed" problem with this cipher? Actually I'm very new here. I wonder if anyone can also clarify to me some basic concepts as well. I really appreciate the help. 1) What is b64-encoding?

Re: AES ciphers, are they supported?

2006-05-24 Thread gmu 2k6
On 5/23/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > I'm new newbie in openssl, I am trying at the begining to make some > tests on the performance using different cipher suites, but I have > problem when I'm trying to enable the AES cipher suites : > AES128-SHA > AES256-SHA > which are

RE: AES ciphers, are they supported?

2006-05-24 Thread Marek Marcola
Hello, > > First, I would like to thank you a lot for your help. > What was missing accually in my code is to check the SSLeay version. > In fact the preinstalled version of openssl in my system was > openssl-0.9.5a . when I installed the new version 0.9.8a(b) , I > followed the recommendation

RE: AES ciphers, are they supported?

2006-05-24 Thread Basel Katt
Hello,   First, I would like to thank you a lot for your help. What was missing accually in my code is to check the SSLeay version.  In fact the preinstalled version of openssl in my system was openssl-0.9.5a . when I installed the new version 0.9.8a(b) , I followed the recommendation in the I

RE: AES ciphers, are they supported?

2006-05-24 Thread Marek Marcola
Hello, > here is a part of the SSL related code from the client side containing > all parameters used: I've made some modifications to your code: // CODE BEGIN #include #include #define CA_FILE "./cacert.pem" #define CERT_FILE "./cert.pem" #define KEY_FILE "./key.pem" int main() { BIO *

RE: AES ciphers, are they supported?

2006-05-24 Thread Basel Katt
hello,   thanks again I tried your proposal to add "AES256-SHA:AES128-SHA:NULL-MD:NULL-SHA" as a cipher list but it didn't work. here is a part of the SSL related code from the client side containing all parameters used: BIO *bio; SSL * ssl; SSL_CTX * ctx; char buf[BUF_SIZE] ;   c_buf_

RE: AES ciphers, are they supported?

2006-05-24 Thread Frédéric Donnat
Oups.. sorry, i did not read the whole thread. ;( I used that with openssl 0.9.8a without any problem. Maybe this is due to some parameter settings. here is what i use: char *cipher_list = "AES256-SHA:AES128-SHA:NULL-MD:NULL-SHA"; /* note: CipherSuite separator ":" */ If you're writing your own

RE: AES ciphers, are they supported?

2006-05-24 Thread Basel Katt
Hello,   thanks for the hint.   But if you refer to my first message in this threat you will see that I tried this function previously, and it works correctly with all other ciphers except for the AES128-SHA and AES256-SHA.      Thanks again   --BaselFrédéric Donnat <[EMAIL PROTECTED]> sch

RE: AES ciphers, are they supported?

2006-05-24 Thread Frédéric Donnat
Hi the folowinfg function shoudl do it. from openssl/include/ssl.h int SSL_CTX_set_cipher_list(SSL_CTX *,const char *str); Refers to ttthe man for further explanation. regards Fred -Original Message- From: [EMAIL PROTECTED] on behalf of Basel Katt Sent: Wed 5/24/2006 11:12 AM

Re: AES ciphers, are they supported?

2006-05-24 Thread Basel Katt
hello , thanks for your help, you are right, I'm writing my own client and server   I have tested the s_server and s_client as you mentioned in your answer. I've got no errors and both agreed on the AES256-SHA ( or AES128-SHA) ciphers. in the following you can find the last part of output I