Implementation of function RAND_Poll on VxWorks

2008-07-22 Thread Anuradha Gupta
Hi What shall be the implementation of function RAND_Poll on VxWorks. It is an empty function in my code just returning success. In the UNIX flavour the same sets the entropy. On VxWorks, the entropy is not set this being empty function which results into ssl_connect failure. Regards Anurad

RE: Prime number generation on FreeBSD-sparc64

2008-07-22 Thread Ted Mittelstaedt
What version of gcc? Ted > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Yuliya Shulman > Sent: Friday, July 18, 2008 6:51 AM > To: openssl-users@openssl.org > Subject: RE: Prime number generation on FreeBSD-sparc64 > > > I sent this before a few ea

Re: hello everyone

2008-07-22 Thread Alan Wolfe
just in case it helps debugging, when you said the first 8 bytes are wrong, instead of trying a pattern like "111" to send over you might try something like "12345..." so that way you can tell WHERE your data is getting messed up - ie that could show that not only is the first 8 bytes wrong, bu

Re: hello everyone

2008-07-22 Thread Kyle Hamilton
Does the client receive the data properly? Does the server receive the data properly? You may have padding going on, you may have an initialization vector being preset, you may have a whole bunch of things going on under the hood. As long as both the client and the server agree on what's going on

Re: hello everyone

2008-07-22 Thread abc_123_ok
Dear All, who can give me some advice about below problem。 Thanks Best Regards. 发件人: abc_123_ok 发送时间: 2008-07-22 17:53:34 收件人: openssl-users 抄送: 主题: hello everyone Dear All, I use openssl as a server to test SSL client of our comany. the SSL client is a part of embedded system。 I used comm

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Jan Pechanec
On Tue, 22 Jul 2008, Christopher Ivory wrote: >I see what you mean, however, when I get the processor info with the command >"uname -a" it returns: > > SunOS t5200tx 5.10 Generic_120011-14 sun4v sparc >SUNW,SPARC-Enterprise-T5220 > >I was working under the impression that this is a T2. Was I mis

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Christopher Ivory
If it helps, I ran the cryptoadm and got the following results: User-level providers: = Provider: /usr/lib/security/$ISA/pkcs11_kernel.so Mechanisms: CKM_DES_CBC CKM_DES_ECB CKM_DES3_CBC CKM_DES3_ECB CKM_AES_CBC CKM_AES_ECB CKM_RC4 Mechanisms: CKM_DSA CKM_RSA_X_509 CKM_RSA_PKC

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Christopher Ivory
I see what you mean, however, when I get the processor info with the command "uname -a" it returns: SunOS t5200tx 5.10 Generic_120011-14 sun4v sparc SUNW,SPARC-Enterprise-T5220 I was working under the impression that this is a T2. Was I misinformed? -Chris PS - Thanks for your conitnued help

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Jan Pechanec
On Tue, 22 Jul 2008, Jan Pechanec wrote: > in OpenSolaris, there is a project that mechanisms that are not >implemented in hw will stay in the soft token. of course, I meant "will stay in OpenSSL" -- Jan Pechanec ___

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Jan Pechanec
On Tue, 22 Jul 2008, Christopher Ivory wrote: >When I ran the same test with the pkcs chip initialized ("speed sha1 -engine >pkcs11") the results were: > > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes256 bytes 1024 bytes 8192 >b

OpenSSL::PKey::RSAError: Neither PUB key nor PRIV key:: header too long

2008-07-22 Thread Michael Tracey Zellmann
I am getting this error when I try to use some ruby OepnSSL libraries to obtain the private key from my private key PEM file. I have tried this on the SSL credentials I got for my web-site from GoDaddy.com - The site works fine and credentials are recognized in IE and FF. I tried generating my ow

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Christopher Ivory
I think I figured out my problem but I'd like someone to confirm for me that this seems like a reasonable conclusion. I've been wondering whether or not I had properly initiated the PKCS11 chip for OpenSSL because I wasn't seeing much improvement in processing time. I'm trying to sign using the fol

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Christopher Ivory
I'm afraid I don't quite follow. I'm compiling my code with the command lines below: gcc -Wall -ggdb -DDEBUG LoadDataFromFile.c -c LoadDataFromFile.o gcc -Wall -ggdb -DDEBUG WriteDataToFile.c -c WriteDataToFile.o gcc -Wall -ggdb -DDEBUG sign.c -c sign.o gcc -I /usr/sfw/include -L /usr/

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Jan Pechanec
On Tue, 22 Jul 2008, Christopher Ivory wrote: >Jan, > >Thanks for the information! How can I explicitly initialize the PKCS11 >engine when writing in C? I've looked at examples, but I think I'm missing a >step because when I verify or sign using OpenSSL, I'm seeing no improvement >in performance.

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Christopher Ivory
Jan, Thanks for the information! How can I explicitly initialize the PKCS11 engine when writing in C? I've looked at examples, but I think I'm missing a step because when I verify or sign using OpenSSL, I'm seeing no improvement in performance. -Chris On Tue, Jul 22, 2008 at 8:38 AM, Jan Pechane

Need help in Compiling openssl-0.9.8g

2008-07-22 Thread Haresh_Eswari
Hi, I am new to openssl. I am trying to cross compiling openssl-0.9.8g for linux mipsel. I gave the following command to configure ./Configure shared no-idea no-rc5 --prefix=path to file system linux-mipsel. When I compile by Make command. I am getting the error _dl_out_of_memory @GLIBCversio

Re: Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread Jan Pechanec
On Tue, 22 Jul 2008, sadronmeldir wrote: >I'm aware that the default installation of the Solaris 10 OS provides a >PKCS#11-based OpenSSL implementation. I'm trying to take some metrics to >figure out how much more efficient certain processes are with the PKCS >engine. How would I disable the PKCS

Disabling the PKCS #11 on Solaris 10

2008-07-22 Thread sadronmeldir
Hello all, I'm aware that the default installation of the Solaris 10 OS provides a PKCS#11-based OpenSSL implementation. I'm trying to take some metrics to figure out how much more efficient certain processes are with the PKCS engine. How would I disable the PKCS engine on an UltraSPARC T1 proces

hello everyone

2008-07-22 Thread abc_123_ok
Dear All, I use openssl as a server to test SSL client of our comany. the SSL client is a part of embedded system。 I used command as blow in Cygwin. openssl s_server -accept 443 -cert testserver.pem -CAfile spectra_ca.pem -cipher DES-CBC3-SHA Loading 'screen' into random state - done Using d