Re: Re: Reading server name extension

2007-03-07 Thread sergey ganik
how, in what way possible go in website www.lavteam.com __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Re: 2 is not prime?

2007-03-07 Thread Thomas J. Hruska
Thomas J. Hruska wrote: Stephan V Bechtolsheim wrote: To be sure we should use another library: $ cat gmp5.c #include #include ... To be sure one needs to go back to the mathematical definition of what is a prime. To use a program as proof is really not a proof. What you have proven is th

Re: 2 is not prime?

2007-03-07 Thread Thomas J. Hruska
Stephan V Bechtolsheim wrote: To be sure we should use another library: $ cat gmp5.c #include #include ... To be sure one needs to go back to the mathematical definition of what is a prime. To use a program as proof is really not a proof. What you have proven is that GMP is correct in deter

RE: 2 is not prime?

2007-03-07 Thread Bill Colvin
Nils Larsch wrote: > Bill Colvin wrote: > > > > openssl version > > OpenSSL 0.9.7m-fips 23 Feb 2007 > > > > openssl prime 2 > > 2 is not prime > I've committed a patch [1] for this "problem" only in > openssl >= 0.9.8 > Nils > [1] http://cvs.openssl.org/chngview?cn=14780 Unfortunately the pa

Re: Reading server name extension

2007-03-07 Thread Victor Duchovni
On Wed, Mar 07, 2007 at 10:41:16AM +0100, Jan F. Schnellbaecher wrote: > Can anybody explain how I can use the server name extension from the first > TLS handshake message (Client Hello)? Download a 0.9.9 dev snapshot and see the CHANGES file: *) Add initial support for TLS extensions, specifi

Re: openserver /usr/lib/libssl.so.0.9.7 missing

2007-03-07 Thread Marek Marcola
Hello, > I know that I may be missing something fundamental, but I'm not not sure > what. Maybe I'm missing a lot. But I sure would appreciate any > guidance that anyone could offer. > > I am trying to use a pre-compiled binary of curl on SCO Openserver > 5.0.6. When executing curl, I get the m

Re: Reading server name extension

2007-03-07 Thread ray v
Not sure what your trying to attempt but have you search the list of subjectAltName? Also you may be able to configure your web server to handle the different CN names, again, depending on what your trying to do. --- "Jan F. Schnellbaecher" <[EMAIL PROTECTED]> wrote: > Hello, > > can anybody e

openserver /usr/lib/libssl.so.0.9.7 missing

2007-03-07 Thread Dave Baddorf
I know that I may be missing something fundamental, but I'm not not sure what. Maybe I'm missing a lot. But I sure would appreciate any guidance that anyone could offer. I am trying to use a pre-compiled binary of curl on SCO Openserver 5.0.6. When executing curl, I get the message: dynamic lin

RE: How to identify the other peer in DTLS?

2007-03-07 Thread David Schwartz
> As my security experience is not very broad I think that as you properly > pointed I was confused by the security model. If this is a real-world application, you really need to stop *immediately* and get someone with much more security experience to review what you're doing. If we fix all the p

Re: 2 is not prime?

2007-03-07 Thread Nils Larsch
Bill Colvin wrote: To add to the list: openssl version OpenSSL 0.9.7m-fips 23 Feb 2007 openssl prime 2 2 is not prime I've committed a patch [1] for this "problem" only in openssl >= 0.9.8 Nils [1] http://cvs.openssl.org/chngview?cn=14780

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Gianluca Magalotti
Marek Marcola wrote: Hello, I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from www.modssl.o

Re: Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Marek Marcola
Hello, > I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 > running on a AMD Turion 64. > I've downloaded the following packages: > Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) > Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from www.modssl.org) > Open SSL 0.

Building mod_ssl and Apache 1.3.37 fail on x86_64cpuid.o relocation error]

2007-03-07 Thread Gianluca Magalotti
I'm trying to build apache 1.3.37 with ssl support on a Ubuntu 6.1 running on a AMD Turion 64. I've downloaded the following packages: Apache 1.3.37 sources (apache_1.3.37.tar.gz from httpd.apache.org) Mod SSL 2.8.28 (mod_ssl-2.8.28-1.3.37.tar.gz from www.modssl.org) Open SSL 0.9.8e (openssl-0.9.

Reading server name extension

2007-03-07 Thread Jan F. Schnellbaecher
Hello, can anybody explain how I can use the server name extension from the first TLS handshake message (Client Hello)? I would like to use it to return an appropriate certificate to avoid a CN mismatch. Which version of open ssl is required for this? Thanks Jan ___

Re: How to identify the other peer in DTLS?

2007-03-07 Thread Darryl Miles
Victor Duchovni wrote: On Wed, Mar 07, 2007 at 03:34:31AM +0100, Vladislav Marinov wrote: This is why I want to extract information about who is the hostname/IP participating in the TLS handshake and compare it to the Common Name field in the certificate. This makes no sense, the client could