Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread Victor Duchovni
On Thu, Jan 24, 2008 at 05:10:00PM -0800, David Schwartz wrote: > > > Thanks, but as I said, I cannot simply provide my own linkable versions > > of fopen, fread, etc. These functions are reserved by the system for > > other uses. > > > > Is there no way to cleanly override IO in OpenSSL? > > > >

RE: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread David Schwartz
> Thanks, but as I said, I cannot simply provide my own linkable versions > of fopen, fread, etc. These functions are reserved by the system for > other uses. > > Is there no way to cleanly override IO in OpenSSL? > > Thanks. Just never ask OpenSSL to operate on a file. If you want to read a key

Re: d2i_X509 segmentation violation

2008-01-24 Thread Md Lazreg
Hi, I was able to fix the issue by adding the following flags to my openssl configure step: no-asm no-shared -fPIC -DPIC I do not know why this fixes the SEGSEGV but it does. On Jan 23, 2008 12:37 AM, Md Lazreg <[EMAIL PROTECTED]> wrote: > Hi, > > I have the following code: > > > ---

Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread Kyle Hamilton
Look at the BIO section of the library manpages. It provides the I/O abstraction that openssl uses throughout. -Kyle H Sent from my iPhone On Jan 24, 2008, at 13:58, OpenSSL <[EMAIL PROTECTED]> wrote: >> Sure you can. At least you can if ... Thanks, but I'm looking for a clean solution,

Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread OpenSSL
>> Sure you can. At least you can if ... Thanks, but I'm looking for a clean solution, and foremost that means a portable solution. What you suggest is not portable. Needless to say, there are numerous platforms which don't provide usable implementations of fopen, and in fact there are oft

Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread Michael S. Zick
On Thu January 24 2008 14:42, OpenSSL wrote: > Thanks, but as I said, I cannot simply provide my own linkable versions > of fopen, fread, etc. These functions are reserved by the system for > other uses. > Sure you can. At least you can if the loader of your tool-chain you are using supports p

Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread OpenSSL
Thanks, but as I said, I cannot simply provide my own linkable versions of fopen, fread, etc. These functions are reserved by the system for other uses. Is there no way to cleanly override IO in OpenSSL? Thanks. On Thu January 24 2008 13:03, OpenSSL wrote: How might I make OpenSSL use m

RE: RSA_verify problem

2008-01-24 Thread Chris Brown
I have modified this and am passing the Base64 decoding length to Bn_bin2bn but I still get "data too large for modulus" errors. The modulus is 128 bytes, the exponent 3 bytes and the signature value 128 bytes. The message digest is 20 bytes. Is there anything else I can check? Thanks Chris _

Re: How to use OpenSSL on system without conventional file system?

2008-01-24 Thread Michael S. Zick
On Thu January 24 2008 13:03, OpenSSL wrote: > How might I make OpenSSL use my own 'file system' instead of fopen, > fread, etc.? > The usual way to do that is to write a small bit of wrapper code that resolves the fopen, fread, etc calls - and re-issues them as whatever your system requires. Th

How to use OpenSSL on system without conventional file system?

2008-01-24 Thread OpenSSL
How might I make OpenSSL use my own 'file system' instead of fopen, fread, etc.? I need to make OpenSSL work on a system without implementations of fopen, fread, etc. However, I have access to functionality that is essentially the same as fopen, fread, etc. I see BIO_FLAGS_UPLINK but am not f

Re: building 32-bit openssl library on 64-bit RedHat Linux

2008-01-24 Thread G.W. Haywood
Hi there, On Thu, 24 Jan 2008, Geetanjali Sovani wrote: > I am trying to build openssl 32-bit libraries on a 64-bit RedHat Linux > x86_64 > However, the default configuration always builds it as 64-bit libraries. > I saw that there is a configuration parameter that can be used to build > 32-bit

RE: Index.txt size limit

2008-01-24 Thread Gregory Malsack
Already have the "unique_subject = no " set, and every cn is unique. Any other thoughts? Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bernhard Froehlich Sent: Thursday, January 24, 2008 3:35 AM To: openssl-users@openssl.org Subject: Re: Index.txt

building 32-bit openssl library on 64-bit RedHat Linux

2008-01-24 Thread Geetanjali Sovani
Hi, I am trying to build openssl 32-bit libraries on a 64-bit RedHat Linux x86_64 However, the default configuration always builds it as 64-bit libraries. I saw that there is a configuration parameter that can be used to build 32-bit libraries on 64-bit Solaris. Is there some similar option avail

Re: FW: https + onpenSSL + firefox: 8101 error

2008-01-24 Thread alain
I solved the problem. I wasn't problem of the CA. It was problem generating key for the website. I did: %JAVA_HOME%\bin\keytool -genkey -alias tomcat And It seems firefox needs a RSA key. I generated it with this command: %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA Thanks -

Re: RSA_verify problem

2008-01-24 Thread Marek . Marcola
Hello > I am Base64 decoding the signatureValue, modulus and exponent but if I check > the exponent length it is zero after decoding. The modulus length seems to > vary after decoding maybe because there is a null in the buffer. I think > that my Base64 decoding code is working ok because I use i

Re: Index.txt size limit

2008-01-24 Thread Bernhard Froehlich
Gregory Malsack schrieb: Hello Everyone, I have an index.txt file that has 40 lines in it. When I try to add more items to the data base I get the error: error creating name index:(2,5,38) If I tail the index.txt file down to only a few lines, run the openssl ca command again all

OpenSSL Kernel port

2008-01-24 Thread Bhatnagar Achindra
Hi, Is there any already ported SSL and Crypto library for Linux kernel 2.4 and 2.6? Any pointers or references will be much appreciated. -- Regards, Bhatnagar Achindra __ OpenSSL Project http://ww