> I believe it has worked in our code for years; however, the problem is
> now to make it work on FreeBSC-sparc64. :(
Hm, this may be a stupid remark (I seem to be good at those lately),
but do you compile your own code with gcc too?
I've ported OpenSSL to other hardware in the past; the first
On Thu, Jul 17, 2008 at 6:16 PM, Geoff Thorpe <[EMAIL PROTECTED]> wrote:
> On Wednesday 16 July 2008 14:56:26 Kenneth Goldman wrote:
>> [EMAIL PROTECTED] wrote on 07/16/2008 10:08:31 AM:
>> > 2) using static builds has a benefit: you know exactly what your
[..]
>> Is this really a drawback? Since
[EMAIL PROTECTED] wrote on 07/17/2008 12:16:18 PM:
> Has this ever been (in recent history) an issue within a given
> release branch?
> Ie. has 0.9.8(n+1) ever broken apps that were running ok against 0.9.8n?
> 0.9.8x is of course not backwards compatible with 0.9.7y, and 0.9.9 will
not
> be backw
Didier Stevens пишет:
For educational purposes, I want to use openssl to create an RSA key
with prime numbers I provide.
Is this possible with an openssl command, or do I have to adapt the source code?
You can write a little program in C using OpenSSL library.
You should know p, q and e nu
Hello,
[EMAIL PROTECTED] wrote on 07/17/2008 10:17:14 PM:
> For educational purposes, I want to use openssl to create an RSA key
> with prime numbers I provide.
>
> Is this possible with an openssl command, or do I have to adapt the
source code?
>From command line (openssl executable) this is n
Hello,
My company developed application using OpenSSL libraries to establish
SSL/TLS connections.
Our customers would like to have a reasonable way of updating user's
certificate (that is about to expire) without bringing the application
down and loosing all the existing SSL/TLS connections.
W
For educational purposes, I want to use openssl to create an RSA key
with prime numbers I provide.
Is this possible with an openssl command, or do I have to adapt the source code?
__
OpenSSL Project
Geoff Thorpe <[EMAIL PROTECTED]> writes:
[...]
> But in fact, the original question was about binary compatibility
Sure, and I've no reason to believe binary compatibility has been
broken in 0.9.8. (Though it's something I've never really cared
about.)
[...]
__
On Thursday 17 July 2008 12:26:33 Bruce Stephens wrote:
> Geoff Thorpe <[EMAIL PROTECTED]> writes:
>
> [...]
>
> > Has this ever been (in recent history) an issue within a given
> > release branch? Ie. has 0.9.8(n+1) ever broken apps that were
> > running ok against 0.9.8n? 0.9.8x is of course no
Geoff Thorpe <[EMAIL PROTECTED]> writes:
[...]
> Has this ever been (in recent history) an issue within a given
> release branch? Ie. has 0.9.8(n+1) ever broken apps that were
> running ok against 0.9.8n? 0.9.8x is of course not backwards
> compatible with 0.9.7y, and 0.9.9 will not be backward
On Wednesday 16 July 2008 14:56:26 Kenneth Goldman wrote:
> [EMAIL PROTECTED] wrote on 07/16/2008 10:08:31 AM:
> > 2) using static builds has a benefit: you know exactly what your
> > application is going to get SSL-wise: you will be sure it is installed
> > on the target system because you brought
Oops, I totally missed that.
Thanks for clearing that up, I see now in the license where it mentions that
caevat about advertisement materials.
Thank you so much for your help Chris and Ted!
On Thu, Jul 17, 2008 at 8:49 AM, Chris Clark <[EMAIL PROTECTED]>
wrote:
> Hi Alan,
>
> If you re-read bel
Hi Alan,
If you re-read below you will see it says this:
If...advertisement of the product... that lists a line item of a
feature that your software has which is dependent on use of OpenSSL,
you must follow the...
So if your advertisement does not list any encryption or other
features provided b
Hi,
I'm developing a client in for a protocol where the public servers
that use SSL typically use self-signed certificates.
In order to make the best of a bad situation, I would like to
implement "server key caching", similar to the way that SSH is
typically used (that is, on the first co
> >
> > RSA_generate_key() - in rsa_depr.c
> > RSA_generate_key_ex() in rsa_gen.c
> > rsa_builtin_keygen() in rsa_gen.c
> > BN_generate_prime_ex() in prime.c
> > BN_is_prime_fasttest_ex() in bn_prime.c
> >
> That's probably exactly what you should be doing.
I believe it has worked in our code for
Thank you very much. I have enabled crl verification in the openvpn and now
It works
Patrick Patterson-3 wrote:
>
> On July 16, 2008 09:32:41 am albertlb wrote:
>> Hello
>>
>> I am using a debian pc with openssl and openvpn. The problem is I have
>> revoked a user certificate but the user stil
[EMAIL PROTECTED] wrote on 07/16/2008 10:08:31 AM:
> 2) using static builds has a benefit: you know exactly what your
> application is going to get SSL-wise: you will be sure it is installed
> on the target system because you brought it along. The drawback is
> that you have to provide your own up
Thats kind of difficult because we are making a retail video game that uses
libcurl to talk http for one of the minor features the game has.
We've already had commercials on tv and tons of advertisements go out.
It seems like pretty tough guidelines to have all advertisement materials
say this.
On July 17, 2008 10:48:51 am Yuliya Shulman wrote:
> I'm not using OpenSSL to generate the list of primes. OpenSSl is using
> it in the following path:
>
> RSA_generate_key() - in rsa_depr.c
> RSA_generate_key_ex() in rsa_gen.c
> rsa_builtin_keygen() in rsa_gen.c
> BN_generate_prime_ex() in prime.c
On Thu, Jul 17, 2008 at 09:48:51AM -0500, Yuliya Shulman wrote:
> I'm not using OpenSSL to generate the list of primes. OpenSSl is using
> it in the following path:
>
> RSA_generate_key() - in rsa_depr.c
> RSA_generate_key_ex() in rsa_gen.c
> rsa_builtin_keygen() in rsa_gen.c
> BN_generate_prime_
I'm not using OpenSSL to generate the list of primes. OpenSSl is using
it in the following path:
RSA_generate_key() - in rsa_depr.c
RSA_generate_key_ex() in rsa_gen.c
rsa_builtin_keygen() in rsa_gen.c
BN_generate_prime_ex() in prime.c
BN_is_prime_fasttest_ex() in bn_prime.c
Algorithms of finding
On Thu, Jul 17, 2008 at 09:27:26AM -0500, Yuliya Shulman wrote:
> Yes, I understand the list of prime numbers is known; unfortunately, I
> can only implement the solutions my management agrees with. This code
> path is used for login authentication and has been used for a while, so
> I guess every
Yes, I understand the list of prime numbers is known; unfortunately, I
can only implement the solutions my management agrees with. This code
path is used for login authentication and has been used for a while, so
I guess everybody thinks it's OK to use it.
Unfortunately, I also spoke too soon. I h
Hello,
I'm currently trying to configure some pre-existing code using EVP signing
to offload work to the PKCS #11 engine on an OpenSPARC. Since I'm new to
this, I tried initializing the PKCS11 engine two different ways which can be
triggered by command line argument. By default, the program will
On Thu, 17 Jul 2008, sadronmeldir wrote:
>Is there a way to determine if the patch is installed and if the backend is
>set up? Any help would be greatly appreciated.
Solaris 10 and OpenSolaris are already shipped with the PKCS#11
engine. Run this to see that:
openssl engine -vvv
I read on a website (http://developer.mozilla.org/en/docs/NSS_FAQ) that
OpenSSL does not support the PKCS #11 chip by default. I'm aware there is a
patch for this, but I'm not sure if it's already installed. I'm currently
working on an OpenSPARC. By typing "openssl version -a" in the terminal, I
r
26 matches
Mail list logo