Re: SSL handshake problem.

2007-10-09 Thread Sukanta Panigrahi
I have a basic question here: Is it mandatory to have the server configured with ciphers/certificates for SSL handshake? Thanks / Sukant Alex Lam wrote: Hi Alessandro, You will need to set up a handful of cipher & certificate related settings before server and client will join. I suggest y

Re: SSL handshake problem.

2007-10-09 Thread Alex Lam
Hi Alessandro, You will need to set up a handful of cipher & certificate related settings before server and client will join. I suggest you take a look at the apps/s_server.c and apps/s_client.c regards, alex On 10/9/07, Alessandro Baggi <[EMAIL PROTECTED]> wrote: > > I'm trying to make a client

Various questions

2007-10-09 Thread Frans de Boer
I have various questions: 1) The example openssl.cnf (9.8x) still contains the deprecated ns** directives. Why, and why not using the RFC3280 (and later) directives. 2) I seem to fail to understand how I can provide the path to the root certificate for verification of an end entity certificate. I

Re: SSL handshake problem.

2007-10-09 Thread Frans de Boer
Unless someone recognizes the text, it might be helpful if you tell a little more about the server and client side. frans. On Wed, 2007-10-10 at 00:09 +0200, Alessandro Baggi wrote: > I'm trying to make a client/server application with ssl connection but > the handshake doesn't work. > > Readin

SSL handshake problem.

2007-10-09 Thread Alessandro Baggi
I'm trying to make a client/server application with ssl connection but the handshake doesn't work. Reading the manual page I've tried to do this to make ssl connection: Server layer: SSL_CTX *ssl = NULL; SSL *new = NULL; socketdescriptor = socketcreation(); bind(...); listen(...); accept(...);

Unusual RSA Private Key Format? (JSAFE)

2007-10-09 Thread Pierce Ward
Hi guys, I'm currently writing a little test application using RSA's JSAFE libraries (java version of BSAFE), and I'm generating my keys using openssl, however I cannot get a signature to verify successfully. An example program (with hard coded bytes for the private key) using an rsa algorithm wor

David Flatley is away from his desk.

2007-10-09 Thread David Flatley
I will be out of the office starting 10/09/2007 and will not return until 10/15/2007. I will respond to your message when I return. __ OpenSSL Project http://www.openssl.org User Support Mailing

Re: DTLS non-compliant list (based on snapshot 20070801)

2007-10-09 Thread Alex Lam
Hi Andy, 4347, section 4.2.6 "However, in order to remove sensitivity to fragmentation, the Finished MAC MUST be computed as if each handshake message had been send as a single fragment." My interpretation is that you re-assemble all fragments and fix the handshake header as if it is a single fra

Error while installation: wrong ELF machine type: EM_386

2007-10-09 Thread Mandar Wanpal
Hi, I am getting following error while installing openssl-0.9.8e.tar on Solaris 9. Is this source not meant for this OS. Where can I find proper code then? Please assist. Error: ld: fatal: file dhparam.o: wrong ELF machine type: EM_386 ld: fatal: File processing errors. No out