Problems in generating DSA key

2008-05-07 Thread Shalmi
Hi, I generated RSA key pair successfully but facing problem while generating DSA keys. The openssl version i'm using is openssl-0.9.7m. First i executed the command openSSL> dsaparam -out dsaparam2048.pem 2048 And i got response - Loading 'screen' into random state - done Generating DSA paramet

Re: Building OpenSSL without Crypto Support

2008-05-07 Thread vaibhav bindroo
Hi, I'm trying to build OpenSSL with least support for crypto algorithms expt the cases where they are really needed for it to work . My sole purpose of all this is to reduce the memory footprint of the application that uses OpenSSL.. All I want is the procedure to do so on a WIN32 platform ?? ~

DH key generation call back not called?

2008-05-07 Thread Bruce Keats
Hi, I am implementing a server that accepts connections from clients over SSL. I am using Fedora Core 7 which comes with openssl 0.9.8b. I create an SSL CTX and I disable the SSL session cache (SSL_CTX_set_session_cache_mode), set the SSL_OP_SINGLE_DH_USE flag (SSL_CTX_set_options) and setup the

Private key storage support in ts (TSA).

2008-05-07 Thread Isaias Punktin
Hi all. Is it possible to use a private key stored in a SmartCard in a time stamp response generation using ts?. Thanks, __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Building OpenSSL without Crypto Support

2008-05-07 Thread David Schwartz
> Thanks for the quick reply from your side . I understand and respect > your opinion regarding OpenSSL usage .But I need to strip the Openssl > library to the bare minimum for my own use with the app as I wil be > using my own crypto library . So is your question really "how can I plug my own

Re: Building OpenSSL without Crypto Support

2008-05-07 Thread vaibhav bindroo
Hi , Thanks for the quick reply from your side . I understand and respect your opinion regarding OpenSSL usage .But I need to strip the Openssl library to the bare minimum for my own use with the app as I wil be using my own crypto library . I wanted to ask how can I do it , which linker flags t

RE: Building OpenSSL without Crypto Support

2008-05-07 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 05/07/2008 12:51:21 PM: > > > The application I am developing requires HTTP over SSL connection > > and hence I am using OpenSSL for SSL support . But Using OpenSSL > > with all the cryptographic libraries included increases the size of > > my app heavily . To d

RE: SSL_connect using select.

2008-05-07 Thread David Schwartz
Prabhu S wrote: >if(l_ssl_err_code == SSL_ERROR_WANT_READ || l_ssl_err_code == >SSL_ERROR_WANT_WRITE) >{ >l_fds=select(sd+1, &filedes_set,NULL,NULL, &l_connect_timeout); Why are you 'select'ing for readability even if the library returns 'SSL_ERROR

RE: Building OpenSSL without Crypto Support

2008-05-07 Thread David Schwartz
> The application I am developing requires HTTP over SSL connection > and hence I am using OpenSSL for SSL support . But Using OpenSSL > with all the cryptographic libraries included increases the size of > my app heavily . To deal with that , I want to build a OpenSSL > library with NULL encrypti

Need help to compile openssl programs in Linux

2008-05-07 Thread Kurapati Raja Sekhar
MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1322688959-1210150709=:70790" --0-1322688959-1210150709=:70790 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi All,=0AI=C2=A0have installed latest version of the Openssl in my PC.=0AI= have

SSL_connect using select.

2008-05-07 Thread Prabhu S
Hi, My client application tries to establish SSL connection as shown below: // err = SSL_connect (ssl); l_ssl_err_code=SSL_get_error(ssl, err); struct timeval l_connect_timeout; l_connect_timeout.tv_usec=0; l_connect_timeout.tv_sec=time_remaining; //time remaining is c

Building OpenSSL without Crypto Support

2008-05-07 Thread vaibhav bindroo
Hi all , The application I am developing requires HTTP over SSL connection and hence I am using OpenSSL for SSL support . But Using OpenSSL with all the cryptographic libraries included increases the size of my app heavily . To deal with that , I want to build a OpenSSL library with NULL encryptio