Question about buffers

2008-12-15 Thread Scott Gifford
Hello, I'm trying to reduce the per-client memory usage on my OpenSSL-enabled server. I'm having a hard time figuring out what the different buffers are used for, though. I can see in ssl3.h that SSL3 sessions will have a read and write buffer (rbuf and wbuf), and also a read and write record (r

Re: Creating a PKCS7 file

2008-12-15 Thread Victor Duchovni
On Mon, Dec 15, 2008 at 12:40:39PM -0500, Victor Duchovni wrote: > On Mon, Dec 15, 2008 at 11:37:04AM -0600, Mike J wrote: > > > It looks like the smime utility is what I'm looking for, however I'm running > > into issues with it. > > I'm working with binary files here, some that could potentiall

Re: Creating a PKCS7 file

2008-12-15 Thread Victor Duchovni
On Mon, Dec 15, 2008 at 11:37:04AM -0600, Mike J wrote: > It looks like the smime utility is what I'm looking for, however I'm running > into issues with it. > I'm working with binary files here, some that could potentially be 50MB. > > I create the signed file with: > openssl smime -sign -in fil

Re: Creating a PKCS7 file

2008-12-15 Thread Mike J
It looks like the smime utility is what I'm looking for, however I'm running into issues with it. I'm working with binary files here, some that could potentially be 50MB. I create the signed file with: openssl smime -sign -in file.bin -binary -signer cert.crt -inkey ./private.pem -out file.bin.sig

Re: Creating a PKCS7 file

2008-12-15 Thread Dr. Stephen Henson
On Mon, Dec 15, 2008, Victor Duchovni wrote: > On Mon, Dec 15, 2008 at 09:02:34AM -0600, Mike J wrote: > > > I have a binary file that needs to be digitally signed in a PKCS7 format. > > > > I've looked at some of the openssl documentation and I see commands that can > > be used to look at PKCS7

Re: Creating a PKCS7 file

2008-12-15 Thread Victor Duchovni
On Mon, Dec 15, 2008 at 09:02:34AM -0600, Mike J wrote: > I have a binary file that needs to be digitally signed in a PKCS7 format. > > I've looked at some of the openssl documentation and I see commands that can > be used to look at PKCS7 formated files > but not ways of creating them. > > Does

Creating a PKCS7 file

2008-12-15 Thread Mike J
I have a binary file that needs to be digitally signed in a PKCS7 format. I've looked at some of the openssl documentation and I see commands that can be used to look at PKCS7 formated files but not ways of creating them. Does openssl have a program that will do this for me? I want to hand openss

Re: VC debug support

2008-12-15 Thread Ger Hobbelt
Long distance guesswork, but (a) place a 'declspec(__dllimport)' before the SMIME_*() prototype in there and recompile (this is assuming you've built .DLL files for libea32/ssl), and/or (b) check the exports of the DLLs using the dependency walker, and lastly (c) MSVC2008 /may/ have trouble find

Re: [squid-users] TR: [Bulk] Re: [squid-users] Certificate Validation problem due to Sha 256 message digest

2008-12-15 Thread Kyle Hamilton
I can't speak for SHA256 in OpenSSL, so I can't help a huge amount on that score. But I can tell you, regarding the root and client key sizes... Many software apps won't handle roots with keys greater than 4096 bits (older ones choke on anything above 2048). There is at least one class of device

RE: [squid-users] TR: [Bulk] Re: [squid-users] Certificate Validation problem due to Sha 256 message digest

2008-12-15 Thread Raphael
Hi Henrik, Thanks for helping. I'm checking for calling OpenSSL_add_all_algorithms() in the sources. Concerning the ciphers, I don't know either, but all the certificates were issued using Openssl (and OpenCA 1.0.2) I chose to issue a CA certificate with 8192 bits length, may it become a proble

Re: common name charset question

2008-12-15 Thread Matteo Cazzador
> On Fri, Dec 12, 2008 at 2:02 PM, Victor Duchovni > wrote: >> On Fri, Dec 12, 2008 at 10:46:20PM +0100, Matteo Cazzador wrote: >> >>> >Correctly implemented certificate parsers will display UTF8 encodings >>> to >>> >the user in a way that the user can understand. The code-points are >>> >logica

VC debug support

2008-12-15 Thread Antonio Parrotta
Hi Guys, I'm trying to step into openssl modules using visual studio 2008. In particular I would investigate on ASN1 parse mechanism regarding SMIME type. I have followed the instruction reported in INSTALL.W32 at section tweaks. They were generated in out32.dbg both *.pdb and *.lib, this make me

Directorystring default values

2008-12-15 Thread Matteo Cazzador
what is the command to see openssl defaults value, i not set DirectoryString and i want to see the actual value (default ) is it possible? -- Ing. Matteo Cazzador NetLite snc di Cazzador Gagliardi Email: mat...@netlite.it Web: http://www.netlite.it Personal Web Page: http://www.progettostema.it

Aceptada: OWASP Hartford: February 2009 (Open Web Application Security Project)

2008-12-15 Thread Jaraba Nieto, Fernando
BEGIN:VCALENDAR METHOD:REPLY PRODID:Microsoft CDO for Microsoft Exchange VERSION:2.0 BEGIN:VTIMEZONE TZID:(GMT+01.00) Sarajevo/Warsaw/Zagreb X-MICROSOFT-CDO-TZID:2 BEGIN:STANDARD DTSTART:16010101T03 TZOFFSETFROM:+0200 TZOFFSETTO:+0100 RRULE:FREQ=YEARLY;WKST=MO;INTERVAL=1;BYMONTH=10;BYDAY=-1SU E