[BUG] openssl speed and EVP engine

2008-08-20 Thread Emanuele Cesena
Good morning, I found openssl speed does not use any EVP engine I try to set up. It works correctly, e.g., with RSA engines. I'm using OpenSSL 0.9.8g 19 Oct 2007, but the bug (?) seems to apply to other 0.9.8 versions too. Regards -- Emanuele Cesena <[EMAIL PROTECTED]> http://ecesena.dyndns.org

Re: Server handling Multiple clients....!!!!

2008-08-20 Thread Kyle Hamilton
To follow up my previous quoting of the FAQ: You create the SSL_CTX with SSL_CTX_new(), listen() on the appropriate port, then accept() the connection, which gives you a file descriptor. Spawn a thread to handle that descriptor. Use SSL_new(SSL_CTX *) to generate a new SSL structure, and then us

RE: Server handling Multiple clients....!!!!

2008-08-20 Thread Ambarish Mitra
Hello everyone, I am working with a VPN server and using openssl APIs to handle SSL on Linux machine. My server work fine with single client but it shows the segmentation fault when i test it with multiple clients. **Which OS? Which thread library? pthread/Solaris thread/Win Thread etc? If t

Re: Server handling Multiple clients....!!!!

2008-08-20 Thread Kyle Hamilton
You cannot share a single SSL connection across multiple threads (i.e., your reader and writer must be in the same thread). This is documented at http://www.openssl.org/support/faq.html#PROG1 thus: 1. Is OpenSSL thread-safe? Yes (with limitations: an SSL connection may not concurrently be used b

Server handling Multiple clients....!!!!

2008-08-20 Thread vinni rathore
Hello everyone, I am working with a VPN server and using openssl APIs to handle SSL on Linux machine. My server work fine with single client but it shows the segmentation fault when i test it with multiple clients. I have different threads in my server handling different functionalities. Read and

Re: X.509] Certificate Generation without PoP

2008-08-20 Thread Silviu VLASCEANU
Thanks, David, that's exactly what I needed. I already found some examples, but these are very clear as steps to create the cert. One more question, though: how do you convert an RSA public key from an (uint8_t *) type to the RSA type defined in OpenSSL (or to EVP_PKEY). I have been googling on th

Re: X.509] Certificate Generation without PoP

2008-08-20 Thread Silviu VLASCEANU
Kyle, 2008/8/19 Kyle Hamilton <[EMAIL PROTECTED]> > What you're saying is this: > > 1) You know who the principal is (and therefore the CN to stick into > your certificate), due to your pre-existing protocol. > 2) You know what the public key is, also due to your pre-existing protocol. > 3) You'v

Re: How to compute all attributes of RSA private key from modulus and private exponent?

2008-08-20 Thread delcour.pierre
Metalpalo wrote: Hello Ihave got one question: Does exist some way how to compute all attributes of private key from modulus and private exponent? I think as public exponent, prime1, prime2, exp1, exp2... Thanks If you want to generate a rsa key with openssl code (not in line command) :

Re: DES-only OpenSSL version: technical aspects

2008-08-20 Thread Ger Hobbelt
Fred, You're welcome. Best of luck with your Canadian government, er, friends. ;-) Ger BTW: nitpicking my own text there: it was restricted to 56 bits tops back then. Irrelevant though. On Tue, Aug 19, 2008 at 2:53 PM, Fred Picher <[EMAIL PROTECTED]> wrote: > --- On Fri, 8/15/08, Ger Hobbelt <