Re: openssl performance

2008-04-03 Thread raj H
Thanks Jimmy! This command looks to help me for the performance! Only thing is I have to get it working. I keep on getting errors. Anyways, thanks! I will go through and get it running. Any inputs on session reuse? On Thu, Apr 3, 2008 at 12:39 PM, jimmy bahuleyan <[EMAIL PROTECTED]> wrote: > raj

Re: openssl performance

2008-04-03 Thread jimmy bahuleyan
raj H wrote: Thanks Marek for your comments! [snip] I am sorry these questions are really vague and not of challenge for the technical personals. But I believe these are the questions any solution developer or openssl user would have. Isn't the OpenSSL publishes any numbers? Have you tr

Re: openssl performance

2008-04-03 Thread raj H
Thanks Marek for your comments! When you say, session reuse improves the handshake performance, what factor? If normal handshake takes 1 second, how long it will take to negotiate session re-use? What about the other issues such as memory leaks and security concerns with session re-use? Does any

RE: CA generation/certificate serial number

2008-04-03 Thread David Schwartz
smime.p7m Description: S/MIME encrypted message

Re: CA generation/certificate serial number

2008-04-03 Thread Peter Sylvester
openssl is VERY tolerant concerning the encoding/decoding of an INTEGER value. Other decoders may not like such things as length 0 etc. When converting such a beast from DER to PEM or the other way, you might have a surprise. From X.690: 8.3 Encoding of an integer value 8.3.1 The encoding of

RE: FIPS compliant shared object

2008-04-03 Thread David Schwartz
> Can some one point me to instructions on how to create a shared object > that contains the fipscanister.o and passes the FIPS_mode_set() test > I can create executables using the ldfips script that pass the test but > when I attempt to create a fips compliant shared library (the FIPS User > Guid

FIPS compliant shared object

2008-04-03 Thread Kinateder, Ryan
Can some one point me to instructions on how to create a shared object that contains the fipscanister.o and passes the FIPS_mode_set() test I can create executables using the ldfips script that pass the test but when I attempt to create a fips compliant shared library (the FIPS User Guide states th

Re: openssl performance

2008-04-03 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 04/03/2008 04:18:42 AM: > Anybody any comments? > On Tue, Apr 1, 2008 at 11:56 PM, raj H <[EMAIL PROTECTED]> wrote: > Hi Experts, > > OpenSSL 9.8b. We are facing some performance issues with it. I heard that > doing session reuse or using some other

Re: Salted password generation/digest

2008-04-03 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 03/31/2008 11:44:10 PM: > I don't think Marek is correct. The command-line interface (openssl > enc) doesn't use PKCS5_PBKDF2_HMAC_SHA1(). Other parts of the > command-line utilities do (e.g. "openssl pkcs8 -topk8 -v2" for > encrypting RSA and DSA private keys)