RE: commercial OpenSSL use

2008-07-16 Thread Ted Mittelstaedt
It is fine to use OpenSSL as long as the instructions IN that license are followed, note: "...All advertising materials mentioning features ..." That is pretty broad. Basically, if your commercial application has a spec sheet or other sheet that is distributed as part of an advertisement of the

RE: Prime number generation on FreeBSD-sparc64

2008-07-16 Thread Ted Mittelstaedt
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Yuliya Shulman > Sent: Wednesday, July 16, 2008 9:29 AM > To: openssl-users@openssl.org > Subject: RE: Prime number generation on FreeBSD-sparc64 > > > Thank you so much for providing the article and th

commercial OpenSSL use

2008-07-16 Thread Alan Wolfe
Hi! I'm making a commercial application for windows which uses libcurl. This build of libcurl I'm usings links to both zlib and openssl. I know libcurl and zlib themselves are fine for us to use commercially but OpenSSL seemed a little more grey. It seems like it's ok to use OpenSSL commerciall

Determing if the OpenSSL PKCS11 Patch is installed.

2008-07-16 Thread Christopher Ivory
I read on a website (http://developer.mozilla.org/en/docs/NSS_FAQ) that OpenSSL does not support the PKCS #11 chip by default. I'm aware there is a patch for this, but I'm not sure if it's already installed. I'm currently working on an OpenSPARC. By typing "openssl version -a" in the terminal, I re

Re: Problems with revoked certificate

2008-07-16 Thread Michael Sierchio
albertlb wrote: I am using a debian pc with openssl and openvpn. The problem is I have revoked a user certificate but the user still has access to the vpn. In the crl.pem file appears the reference to this user. What could It happen? Thank you http://www.nabble.com/file/p18487517/openssl.cnf op

Crash on VISTA...

2008-07-16 Thread Geert Van Muylem
Hi, I've made a small sample based on OpenSSL which creates a new key and then makes a certificate request. Everything works fine on XP but the same code crashes on VISTA OpenSSL version: openssl-0.9.8h Build with VS 2008 (everything build with success and all tests passed.) The cr

Configuring Signing through the PKCS#11

2008-07-16 Thread Christopher Ivory
Hello, I'm currently trying to configure some pre-existing code using EVP signing to offload work to the PKCS #11 engine on an OpenSPARC T2. Since I'm new to this, I tried initializing the PKCS11 engine two different ways which can be triggered by command line argument. By default, the program wil

Re: Problems with revoked certificate

2008-07-16 Thread Patrick Patterson
On July 16, 2008 09:32:41 am albertlb wrote: > Hello > > I am using a debian pc with openssl and openvpn. The problem is I have > revoked a user certificate but the user still has access to the vpn. In the > crl.pem file appears the reference to this user. What could It happen? > > Thank you http:/

RE: Prime number generation on FreeBSD-sparc64

2008-07-16 Thread Yuliya Shulman
Thank you so much for providing the article and the flags! V8 worked, at least with the limited functionality we're using! I know there are lists of prime numbers as well as known algorithms. We don't generate primes for our own use; OpenSSL does. We're using RSA_generate_key() - a function in rsa

Re: Compiling static vs. dynamic and building a universal binary

2008-07-16 Thread Ger Hobbelt
On Tue, Jul 15, 2008 at 11:44 PM, Richard Conlan <[EMAIL PROTECTED]> wrote: > Greetings! > > So, I have a handful of relatively esoteric questions. > > Say I have binaryX that will use both libcrypto and libssl. > > 1) Is it dangerous to statically link the one and dynamically link the > other? wha

Problems with revoked certificate

2008-07-16 Thread albertlb
Hello I am using a debian pc with openssl and openvpn. The problem is I have revoked a user certificate but the user still has access to the vpn. In the crl.pem file appears the reference to this user. What could It happen? Thank you http://www.nabble.com/file/p18487517/openssl.cnf openssl.cnf

[no subject]

2008-07-16 Thread xiaojiang guo
hi ,recently i have a problem with openssl lib. i want use ECC lib,but find there is not enough information in it .for example this function add,i can not find it . can anyone help me? thanks

Segmentation fault ..

2008-07-16 Thread Ahmed AlKhayat
Dear All, Kindly support. I'm facing the following error when i try to generate a Certificate Request using this command "req -newkey rsa:1024 -keyout keys/test_key.pem -keyform PEM -out requests/test_req.pem -outform PEM": Error: Error adding attribute 6306:error:0D0BF041:a

RE: Signature validation in certificates

2008-07-16 Thread Geetha_Priya
Hi Patrik, Thanks for your detailed response. It certainly helped my understanding. I did refer RFC3280 but missed out on 5280. Will refer it and like you said manually validating certificates might be risky. Thanks and Regards Geetha -Original Message- From: [EMAIL PROTECTED] [mailto:

Re: [Possible SPAM] Re: Help on creating root certificate.

2008-07-16 Thread J Ramesh Kumar
Hi Kyle, Thanks for your help. Yes, I found the CA.pl in my open ssl distribution. Also I found some useful information in the following URL. * http://security.leisink.org/openssl* Thanks for your security concern about world.png. I understand, I'll use the /dev/random instead of using world.

Re: How to start?

2008-07-16 Thread Ger Hobbelt
On Tue, Jul 15, 2008 at 10:53 PM, William Estrada <[EMAIL PROTECTED]> wrote: > Hi group, > > I am starting a project that will require using SSL to transmit data in an > encrypted mode. I would like > to find some simple code that I could use as a model for my program. The > program will be a peer

Compiling static vs. dynamic and building a universal binary

2008-07-16 Thread Richard Conlan
Greetings! So, I have a handful of relatively esoteric questions. Say I have binaryX that will use both libcrypto and libssl. 1) Is it dangerous to statically link the one and dynamically link the other? what if the versions mismatch? 2) Does anybody know the version of OpenSSL included by defa