Re: Regarding ssl3_mac

2007-03-28 Thread Gayathri Sundar
Thanks jimmy..I realised that much, the update is happening from ssl3_mac defined in s3_enc.c, some "s2n" of the length is called, followed by a digestupdate(md, 2)..in case of READ, md is an empty array..why do we copy the ssl record length into a temp var "p" and then do a s2n followed by an dige

RE: SSL_connect and SSL_accept

2007-03-28 Thread Gayathri Sundar
Yes, I agree with you, but then why would the CLIENT get an ERROR? >2) The client calls SSL_connect(). The underlying socket is in blocking >mode >3) SSL_connect() returns error. >4) The server does not notice this, and continues to wait in SSL_accept(). if SSL_connect indeed has returned with ER

Re: Regarding ssl3_mac

2007-03-28 Thread jimmy
Gayathri Sundar wrote: > Can someone give me inputs on the function ssl3_mac, especially where it > is called s->method->ssl3_enc->mac(s,&(p[wr->length]),1); > > I need to know what p[wr->length] is pointing to and why we do a digest > update of 2 bytes from that. > > The code is taken from s3_pk

RE: Key files in dat formats

2007-03-28 Thread David Schwartz
> I have a SSL server application in which the certificate file is rsa.der > and key file rsakey.dat. There is no standard key file format that uses a '.dat' extension that I know of. > What is the *.dat format? How does it differ from pem and der formats? > How do we generate one with OpenSSL?

RE: SSL_connect and SSL_accept

2007-03-28 Thread David Schwartz
> I am unable to think of a scenerio why ur case is possible unless some > serious network congestion has developed and pkts were lost..i dont see > how..but the experts might able to give u a better idea. You get a SYN, send a SYN ACK, other side sends an ACK, then the other side's Internet conn

Re: Key files in dat formats

2007-03-28 Thread Prabhu S
Hi, The certificate was purchased.I am trying to import OpenSSL certificates into the server application which runs on vxworks OS. Is there a specific way to generate a dat format key file or just renaming a pem or der key file to *.dat would help? Thanks and Regards, Prabhu On 3/29/07, Gayath

Re: Key files in dat formats

2007-03-28 Thread Gayathri Sundar
its probably a shown as a data file coz its encrypted..how did you generate the cert? U should be using a PKCS12 format for importing that stuff into the browser/server..btw are you telling it from windows's perspective? >Hi, >I have a SSL server application in which the certificate file is rsa.d

Key files in dat formats

2007-03-28 Thread Prabhu S
Hi, I have a SSL server application in which the certificate file is rsa.der and key file rsakey.dat. What is the *.dat format? How does it differ from pem and der formats? How do we generate one with OpenSSL? Thanks & Regards, Prabhu

Re: SSL_connect and SSL_accept

2007-03-28 Thread Gayathri Sundar
>I am wondering if the following scenario possible: >1) The server calls SSL_accept(). The underlying socket is in blocking mode >2) The client calls SSL_connect(). The underlying socket is in blocking >mode >3) SSL_connect() returns error. >4) The server does not notice this, and continues to wait

RE: ldapsearch on Active Directory

2007-03-28 Thread Chapman, Kyle
Id switch this to the openldap mail list, youll find more responses as this is more of an ldap ? then ssl. Ive used gssapi to search AD, and simple auth as well. Gssapi is nice. If its 2003 AD digest-md5 is also supported. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROT

ldapsearch on Active Directory

2007-03-28 Thread lemons_terry
Hi I'd like to use ldapsearch to browse a Windows 2003 Active Directory. I searched this mailing list's archive, and see details on how to do this with Kerberos. I don't have/want Kerberos, and just want to get beyond these basic problems: tivo2:~ # ldapsearch -h tivo1 SASL/GSSAPI authentica

Re: import a private key in PEM mode to a keystore

2007-03-28 Thread Julius Davies
Hi, Cesar, Perhaps "not-yet-commons-ssl-0.3.7.jar" can help. http://juliusdavies.ca/commons-ssl/download.html Try: java -cp not-yet-commons-ssl-0.3.7.jar org.apache.commons.ssl.KeyStoreBuilder 'password' 'path/to/private-key.pem' 'path/to/cert-chain.pem' This will create a java keystore file t

Regarding ssl3_mac

2007-03-28 Thread Gayathri Sundar
Can someone give me inputs on the function ssl3_mac, especially where it is called s->method->ssl3_enc->mac(s,&(p[wr->length]),1); I need to know what p[wr->length] is pointing to and why we do a digest update of 2 bytes from that. The code is taken from s3_pkt.c function ssl3_write_bytes. Thank