Re: unsealing EVP_Seal... from command-line

2006-10-12 Thread Victor B. Wagner
On 2006.10.12 at 18:44:20 -0400, William Triplett wrote: > Dear openssl-users, > > Suppose that I have the Sealed Data, Envelope, and proper Private Key > for some data encrypted with EVP_Seal* using RC4 (basically, PHP's > openssl_seal() function). Is there a way to decrypt it using the >

Re: Distributing DSA keys

2006-10-12 Thread Hon Hwang
Hi Alex, > I have a problem where I don't know how to distribute > and store DSA keys. Once the key is created I have a > DSA struct full of information. If I want to store the > content of this key on the disk or to send it to > someone I could potentially go though the whole struct > extract al

Distributing DSA keys

2006-10-12 Thread Alex
Dear openssl-users, This is probably a newbie question, just recently started using OpenSSL. I have a problem where I don't know how to distribute and store DSA keys. Once the key is created I have a DSA struct full of information. If I want to store the content of this key on the disk or to send

unsealing EVP_Seal... from command-line

2006-10-12 Thread William Triplett
Dear openssl-users, Suppose that I have the Sealed Data, Envelope, and proper Private Key for some data encrypted with EVP_Seal* using RC4 (basically, PHP's openssl_seal() function). Is there a way to decrypt it using the command-line openssl tools? I've tried this method: ### bt$ openss

RE: How to share SSL session when using CreateProcess/execv

2006-10-12 Thread Edward Chan
I think that would be a very useful feature to have! I could definitely benefit from this in my application. I look forward to when this becomes available :) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz > Sent: Thursday, October

RE: How to share SSL session when using CreateProcess/execv

2006-10-12 Thread David Schwartz
> Agreed. If any object in shared memory contained a pointer to another > object in shared memory this could cause a problem. You would have to > ensure that the shared memory was mapped to the same address in all > processes otherwise the pointers would not be valid. > > Cheers, > Mark Since h

Re: PRNG

2006-10-12 Thread Marek Marcola
Hello, > OpenSSL 0.9.8a Non-FIPs PRNG: > > I am trying to determine if the PRNG does a Continuous Random Number > Generator Test (CRNGT). I looked in crypto/rand/md_rand.c but I do not see > specifically a CRNGT? No, but you may test PRNG with FIPS140-1 tests with crypto/rand/randtest.c Best reg

PRNG

2006-10-12 Thread OpenSSL
OpenSSL 0.9.8a Non-FIPs PRNG: I am trying to determine if the PRNG does a Continuous Random Number Generator Test (CRNGT). I looked in crypto/rand/md_rand.c but I do not see specifically a CRNGT? Thank you __ OpenSSL Project

OpenSSL 0.9.7l compile issues

2006-10-12 Thread mwarren
Hi, I have an issue when running make test while compiling OpenSSL 0.9.7l on Suse Linux SLES9 s390x, 2.6 kernel 64-bit. We are using this to configure-- ./Configure linux-s390x --prefix=/web/software/openssl-0.9.7l --openssldir=/web/software/openssl-0.9.7l When running make test, we are

RE: Certificate Verification

2006-10-12 Thread Aaron Smith
Well, I figured out PART of my problem.  Somehow I got the wrong CA certificate.  Once I got the right one, I can do a successful s_client connect as long as I provide the –Cafile argument to point openssl to the correct CA file.  However, if I try to do it without the –Cafile argument, I g

RE: How to share SSL session when using CreateProcess/execv

2006-10-12 Thread Mark
Hi, > For the multithreaded version of OpenSSL, there's a pre-initialization > function that you must call to tell it what memory allocation function > to use. Writing a function like this to only return memory allocated > from shared memory for use by OpenSSL wouldn't be difficult, but it > wou

Re: Certificate Verification

2006-10-12 Thread Vincenzo Sciarra
Try to add the CA certificate to cacert.pem default openssl CA certificate   Simply:   cat MScaCERT.pem >> cacert.pem    2006/10/12, Dr. Stephen Henson <[EMAIL PROTECTED]>: On Wed, Oct 11, 2006, Aaron Smith wrote:> Ok.  This is hopefully a simple question, and one that I see > quite a b