BF-CBC

2007-07-18 Thread Stefanus Hermawan
hello all, i find an information about add new chipers BF-CBC but find nothing. may be somone ever find thid? thanks. regards, ST. Hermawan

Re: [EMAIL PROTECTED]

2007-07-18 Thread Stefanus Hermawan
hello marek, i add on my library list : -lws2_32 ant thas fine thanks! best regards, ST. Hermawan On 7/17/07, Marek Marcola <[EMAIL PROTECTED]> wrote: Try to add -lwsock32 to link operation. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __

RE: Dont Hate Me

2007-07-18 Thread Pj
Well I definitely won't be voting for him, since his followers apparently have no respect. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Victor Duchovni Sent: Thursday, 19 July 2007 11:10 AM To: openssl-users@openssl.org Subject: Re: Dont Hate Me On Wed

Re: Dont Hate Me

2007-07-18 Thread Victor Duchovni
On Wed, Jul 18, 2007 at 05:21:19PM -0700, edf green wrote: > #2 That its important to share an important message regardless of > consequence if the message is right. At this point, i believe 100% that the > message is worth getting out. Narcissism must feel pretty good. :-) > and #3 You guys sh

Re: Dont Hate Me

2007-07-18 Thread edf green
Regardless of your negativity, i still love OpenSSL and i'll still code to support it, and in the end this discussion will probably have only a negative impact; so im gonna stop commenting on negative feed back because it wasn't my intent to start a political discussion. My intent was to get a me

Re: Dont Hate Me

2007-07-18 Thread Eric Brown
you're officially on my spam list. There's an appropriate forum to discuss your political views. On 7/18/07, edf green <[EMAIL PROTECTED]> wrote: But seriously.. RON PAUL 2008! www.ronpaul2008.com I go out on a limb here to spread the message, as i've never done it before, and i hope you all

Dont Hate Me

2007-07-18 Thread edf green
But seriously.. RON PAUL 2008! www.ronpaul2008.com I go out on a limb here to spread the message, as i've never done it before, and i hope you all can forgive me. It's just that i've never seen a candidate that has made me or my colleagues so passionate about government, reform, and the chance t

RE: Key Derivation and FIPS mode

2007-07-18 Thread David Schwartz
> I am hoping that someone can clear this up for me. > > The tls1_PRF() function uses both the md5 and sha1 algorithms to generate > pseudo-random data. Since this function is used for TLS key > derivation, is > the md5 algorithm allowed for key derivation while operating in FIPS mode? The MD5 i

RE: domain check vs pubkey check

2007-07-18 Thread David Schwartz
> Hi, a question about the SSL: > > In SSL, the server certificate is checked by the > client as to whether the server actually holds the > private key of it. This is done by client sending the > session key signed by server's public key. > > So, why there is a need for a check of domain name in >

Key Derivation and FIPS mode

2007-07-18 Thread Mark Schank
I am hoping that someone can clear this up for me. The tls1_PRF() function uses both the md5 and sha1 algorithms to generate pseudo-random data. Since this function is used for TLS key derivation, is the md5 algorithm allowed for key derivation while operating in FIPS mode? If it is OK, I am

Re: domain check vs pubkey check

2007-07-18 Thread Victor Duchovni
On Wed, Jul 18, 2007 at 11:38:57AM -0700, Soner Sevin? wrote: > Hi, a question about the SSL: > > In SSL, the server certificate is checked by the > client as to whether the server actually holds the > private key of it. This is done by client sending the > session key signed by server's public k

Re: FIPS

2007-07-18 Thread Thomas J. Hruska
Stan wrote: Hi guys, We used to use 0.9.8 Openssl on Linux platform. We want to use FIPS now. We did following to make FIPS mode work: - library is linked statically because FIPS cannot be implemented as shared library - we had to make little work around to link FIPS using C compiler because c+

domain check vs pubkey check

2007-07-18 Thread Sevin
Hi, a question about the SSL: In SSL, the server certificate is checked by the client as to whether the server actually holds the private key of it. This is done by client sending the session key signed by server's public key. So, why there is a need for a check of domain name in the server certi

FIPS

2007-07-18 Thread Stan
Hi guys, We used to use 0.9.8 Openssl on Linux platform. We want to use FIPS now. We did following to make FIPS mode work: - library is linked statically because FIPS cannot be implemented as shared library - we had to make little work around to link FIPS using C compiler because c++ compiler doe