Re: ECDSA signature conversion ?

2006-10-17 Thread Nils Larsch
Michael Stephan wrote: Hallo, I try to verify an ECDSA signature, which is by definition given as the concatenation of 2 octet-streams (BIGNUM r and BIGNUM s), the base64 encoded version is: "449afHAqHfJZmkET0a0hYVpaj+n1bbe4eTmHRAQsA+Zsl/px3AWzb5fWGjRzWWtz" (This is part of an xmldsig-ecdsa d

Creating custom ASN1 data structure

2006-10-17 Thread Hon Hwang
Hi all, I am attempting to understand how to create ASN.1 data structure in OpenSSL. First off, a simple ASN.1 structure that I want to create as the starting point. VersionInfo := SEQUENCE { major INTEGER, minor INTEGER } >From looking through the posts in this mailing list, I see that a n

ECDSA signature conversion ?

2006-10-17 Thread Michael Stephan
Hallo, I try to verify an ECDSA signature, which is by definition given as the concatenation of 2 octet-streams (BIGNUM r and BIGNUM s), the base64 encoded version is: "449afHAqHfJZmkET0a0hYVpaj+n1bbe4eTmHRAQsA+Zsl/px3AWzb5fWGjRzWWtz" (This is part of an xmldsig-ecdsa document, exatly the

RE: ssl - Active directory

2006-10-17 Thread Geert Van Muylem
Hi again,     And if I use the –pause parameter, the problem is solved….   Reason?   Regards, Geert   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geert Van Muylem Sent: dinsdag 17 oktober 2006 20:17 To: openssl-users@openssl.org Subject: ssl - Active di

Re: sslv3 alert handshake failure

2006-10-17 Thread Marek Marcola
Hello, > > And when I tried with > openssl s_server -cipher ECCdraft -cert ecc.crt -key ecc.key -www > the errors I get: > Loading 'screen' into random state - done > Using default temp DH parameters > Using default temp ECDH parameters > ACCEPT > 1132:error:14094410:SSL routines:SSL3_READ_BYTES:s

ssl - Active directory

2006-10-17 Thread Geert Van Muylem
Hi All,   I’m trying to connect to an active directory (W2K server) using ssl (with client authentication) The primary goal is doing that by using python-ldap (on a SuSE 10.1 environment) I get here however a strange situation that it “sometimes” works…. After some hints from the pytho

Re: Solaris installation: Text relocation remains...

2006-10-17 Thread Marc Girod
Marc Girod <[EMAIL PROTECTED]> writes: > Anyway, thanks, I'll try to see whether setting such a standard PATH could > help identifying the cause of the problem. Indeed, it does. With your path, I can build. I'll try to see what exactly affects. Thanks again Laurent. _

Re: Solaris installation: Text relocation remains...

2006-10-17 Thread Marc Girod
Thanks Laurent, Laurent Blume <[EMAIL PROTECTED]> writes: > FWIW, I can tell you that the following commands do work for me, Solaris > 8 to 10, SPARC & x86, Studio 9 to 11, OpenSSL 0.9.7 and 0.9.8. This (for now) is 0.9.8 on Solaris 8 (SunOS 5.8 sparc), even if config says: Configuring for solar

Re: Solaris installation: Text relocation remains...

2006-10-17 Thread Laurent Blume
Marc Girod a écrit : > I try to build and install on various platforms, > (Solaris sparcv9, HP-UX, AIX), to a non-standard path, > for use with subversion. > A first attempt showed me that svn expected shared libraries, > so that I try to produce them, first on Solaris. > My build fails at link tim

Solaris installation: Text relocation remains...

2006-10-17 Thread Marc Girod
Hello, [ 3rd attempt to post. Hopefully won't come in multiple copies. ] I try to build and install on various platforms, (Solaris sparcv9, HP-UX, AIX), to a non-standard path, for use with subversion. A first attempt showed me that svn expected shared libraries, so that I try to produce them, fi

Re: large data read error

2006-10-17 Thread Marek Marcola
Hello > I have some doubts over the ssl buffer. Let I put my questions below > > 1. What happens when the server keeps on writing and no data has been > read from the client?, Is there any possibility of buffer overflow?. > Please explain this senarion briefly. This depends on protocol that carie

RE: Compiler error ASN1

2006-10-17 Thread Daniel Diaz Sanchez
I'm sorry, I have noticed some errors. I will check them. -- Daniel Diaz Sanchez Telecommunication Engineer Researcher / Teaching Assistant Dep. Ing. Telemática Universidad Carlos III de Madrid Av. Universidad, 30 28911 Leganés (Madrid/Spain) Tel: (+34) 91-624-8817, Fax: -8749 Web: www.it.uc3m.

Re: RSA_padding_check_PKCS1_type_1

2006-10-17 Thread Marek Marcola
Hello, > > One workaround of this problem is to disable EDH ciphers, for example: > > > > $ openssl s_client -connect bshop.esprit.com:443 -cipher 'ALL:!EDH' > > I tried this, but got exact the same error messages! Then I looked up the > cipher > specs on http://www.openssl.org/docs/apps/ciphers.

Re: large data read error

2006-10-17 Thread Sendil kumar
Hi Marek,   I have some doubts over the ssl buffer. Let I put my questions below   1. What happens when the server keeps on writing and no data has been read from the client?, Is there any possibility of buffer overflow?. Please explain this senarion briefly.   2. Assume that during the ssl handsha

Re: large data read error

2006-10-17 Thread Sendil kumar
Hi,   Thanks for your reply and really it helped to fix our bug. Still I have some questions over ssl buffer. Let I put my questions below   1. What happens when the server keeps on writing and no data has been read from the client?, Is   there any possibility of buffer overflow(16K)?. Please

RE: Compiler error ASN1

2006-10-17 Thread Daniel Diaz Sanchez
Thanks for your reply, I'm in an implicit TAGS environment: AttributeCertificateDefinitions {joint-iso-itu-t ds(5) module(1) attributeCertificateDefinitions(32) 5} DEFINITIONS IMPLICIT TAGS ::= BEGIN What I really want to implement is this extension, but I obtain an error in the first asn1 str

Re: sslv3 alert handshake failure

2006-10-17 Thread IT Professional
Oh, And when I tried with openssl s_server -cipher ECCdraft -cert ecc.crt -key ecc.key -www the errors I get: Loading 'screen' into random state - doneUsing default temp DH parametersUsing default temp ECDH parametersACCEPT1132:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake

Re: RSA_padding_check_PKCS1_type_1

2006-10-17 Thread Jan F. Schnellbaecher
Hello Marek, thanks for the hint. > One workaround of this problem is to disable EDH ciphers, for example: > > $ openssl s_client -connect bshop.esprit.com:443 -cipher 'ALL:!EDH' I tried this, but got exact the same error messages! Then I looked up the cipher specs on http://www.openssl.org/docs

Re: Compiler error ASN1

2006-10-17 Thread Peter Sylvester
Daniel Diaz Sanchez wrote: Hello to everybody, I have a problem when implementing a simple structure using OpenSSL Asn1. This is the problem: When I try to implement this data structure: A ::= SEQUENCE { b CHOICE { b1 INTE

Re: sslv3 alert handshake failure

2006-10-17 Thread IT Professional
Hi Marek,   Thanks for your advice. I've done a check and these are the ciphers installed: AECDH-AES256-SHA AECDH-AES128-SHA AECDH-DES-CBC3-SHA AECDH-RC4-SHA AECDH-NULL-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-DES-CBC3-SHA ECDHE-RSA-RC4-SHA ECDHE-RSA-NULL-SHA ECDH-RSA-A

Compiler error ASN1

2006-10-17 Thread Daniel Diaz Sanchez
Hello to everybody, I have a problem when implementing a simple structure using OpenSSL Asn1. This is the problem: When I try to implement this data structure: A ::= SEQUENCE { b CHOICE {

Re: RSA_padding_check_PKCS1_type_1

2006-10-17 Thread Marek Marcola
Hello, > it seems that there are some incompatibilities out there. For some hosts > establishing a SSL connection fails, when using openssl, but it succeeds when > using a browser. This in one example: > > F:\openssl>openssl.exe s_client -connect bshop.esprit.com:443 > Loading 'screen' into random