RE: SSL_read/SSL_write from kernel

2006-06-28 Thread Gayathri Sundar
Thanks Marek..yeah, its more to do with processing block ciphers from kernel rather than SSL as such, my question to be exactly precise is for me to find out how to feed exact multiples of block cipher length from sk_buff, when they are internally fragmented in physical/virtual memory within an sk_

Re: Hi..

2006-06-28 Thread Girish Venkatachalam
First you create a certificate request using the openssl req command. I guess that is what you have done now. The default output format for that is pem. The next step is to get the certificate request signed by a certificate authority. This is accomplished using the openssl x509 command. This wi

Hi..

2006-06-28 Thread Bhat, Jayalakshmi Manjunath
Hi all, I have a created a certificate certficate.cer, to which I have provided the Parameters Common name,Organization,Organizational Unit,City,State,Country. Now please can any one tell me how to use openssl to sign this certificate. I need to install certificate which will be P

RE: OpenSSL and multiple threads

2006-06-28 Thread David Schwartz
> David Schwartz wrote: > > A patch to use 'poll' instead of 'select' where it's > > available would be a > > very good idea. Using 'select' to check readiness of a single descriptor > > that you just opened is about the worst-case scenario for > > 'select' (because > > it has to scan through all

Re: Creating an Application according to the OpenSSL FIPS Security Policy

2006-06-28 Thread Dr. Stephen Henson
On Wed, Jun 28, 2006, Dr. Stephen Henson wrote: > > It may be possible to adapt the new distribution to VC++ but I doubt it at > this stage. > Update: I don't want to raise any false hopes so let me just very guardedly say that things aren't looking as bad as they were a couple of hours ago.

Re: Creating an Application according to the OpenSSL FIPS Security Policy

2006-06-28 Thread Kyle Hamilton
On 6/28/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Wed, Jun 28, 2006, Hagai Yaffe wrote: > Is it possible that there will not be an OpenSSL FIPS validated version > for Windows? > The MingW+MSYS build works fine on Windows so in that sense there will be a "version for Windows". Howeve

[EMAIL PROTECTED]: error installing openssl-0.9.8b]

2006-06-28 Thread Lutz Jaenicke
Forwarded to the openssl-users list for discussion and support. - Forwarded message from Oriana Dalla Valle <[EMAIL PROTECTED]> - X-Original-To: [EMAIL PROTECTED] X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] X-Greylist: delayed 722 seconds by postgrey-1.24 at master.op

RE: SSL_read/SSL_write from kernel

2006-06-28 Thread Marek Marcola
Hello, > Thanks, but let me rephrase my question. > > There seems to be a requirement for us to process SSL app data from > kernel, > wherein I would like to read the sk_buff and pass it to a crypto > acclerator > (hardware/software), but we face a problem wherein for block ciphers, > we need > t

Re: OpenSSL and multiple threads

2006-06-28 Thread Marek Marcola
Hello, > >> I hope the OpenSSL maintainers heard this cry (even if it is a small > >> cry) and will at some point decide to use a better method than select. > > This got patched in CVS yesterday for Linux. I think that this may be ported to hpux too. HPUX 11.00, 11.11, 11.23 IA/PA has compatible p

Re: OpenSSL and multiple threads

2006-06-28 Thread Darryl Miles
Leon wrote: I hope the OpenSSL maintainers heard this cry (even if it is a small cry) and will at some point decide to use a better method than select. This got patched in CVS yesterday for Linux. David Schwartz wrote: A patch to use 'poll' instead of 'select' where it's available w

Re: Creating an Application according to the OpenSSL FIPS Security Policy

2006-06-28 Thread Dr. Stephen Henson
On Wed, Jun 28, 2006, Hagai Yaffe wrote: > Is it possible that there will not be an OpenSSL FIPS validated version > for Windows? > The MingW+MSYS build works fine on Windows so in that sense there will be a "version for Windows". However applications would have to be developed using MingW. T

RE: SSL_read/SSL_write from kernel

2006-06-28 Thread Gayathri Sundar
Title: intoto Stationery Thanks, but let me rephrase my question.   There seems to be a requirement for us to process SSL app data from kernel, wherein I would like to read the sk_buff and pass it to a crypto acclerator (hardware/software), but we face a problem wherein for block ciphers, we

RE: SSL_read/SSL_write from kernel

2006-06-28 Thread Vishnubhatla, Vijaya Bhaskar
Title: intoto Stationery Hi, U need to write a separate kernel module using open-ssl library. I don't think it is possible. Instead of that, u send your data to user space and there u use the SSL_read and SSL_write functions. Thanks, Bhaskar From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: Creating an Application according to the OpenSSL FIPS Security Policy

2006-06-28 Thread Hagai Yaffe
Is it possible that there will not be an OpenSSL FIPS validated version for Windows? Hagai On 6/27/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > The reorganization of the security boundary is causing conflicts > betwen MingW and VC++ resulting in crashes in bizarre places. It is > quite

SSL_read/SSL_write from kernel

2006-06-28 Thread Gayathri Sundar
Title: intoto Stationery Hi.,   Does openssl as such provide support for packet processing from kernel..i.e what do I have to do to invoke SSL_read/write from kernel..has anyone attempted this before.   Thanks --Gayathri    

SSL_read/SSL_write from kernel

2006-06-28 Thread Gayathri Sundar
Hi., Does openssl as such provide support for packet processing from kernel..i.e what do I have to do to invoke SSL_read/write from kernel..has anyone attempted this before. Thanks --Gayathri __ OpenSSL Project