Create openssl key from key elements

2009-05-06 Thread Amanda Von Flue
Hello! If I have an generated key and write openssl rsa -pubout -in private_key.pem -out public_key.pem I will get the contents of the key listing modulus, publicExponent, privateExponent, prime1&2 and Exponent1&2. I wonder how I do the reverse operation, that is from the 7 parameters create the

Re: Question about GOST engine in Openssl 1.0

2009-05-06 Thread Andrey Koltsov
Thanks, static compilation works fine. And one remark. This file "engines/ccgost/readme.gost" has an example configuration for GOST engine [gost_section] engine_id = gost dynamic_path = /usr/lib/ssl/engines/libgost.so default_algorithms = ALL crypt_params = id-Gost28147-89-Crypt

would anyone be interested in the output from a

2009-05-06 Thread David McCall
failed OpenSSH compile using the new beta2 version of openssl? I had to punt back to version *k David C. McCall/UNIX-Linux/SysAdmin SSU - NASA/EPO http://epo.sonoma.edu/group.php 707-540-1692 "These words travel almost 50,000miles to reach you, sorry for the delay" ___

Re: DTLS: "openssl s_client" broken in 1.0.0-beta2 due to lack of ECDHE support

2009-05-06 Thread Kyle Hamilton
DTLS has always been one of the "red-headed stepchildren" of OpenSSL. It has never received the love that the rest of the codebase has, and it needs a real maintainer. I agree, s_client and s_server are "reference apps". On the -users list, we even recommend that people use them when they're tryi

Re: Does AES_cbc_encrypt remove PKCS5 padding

2009-05-06 Thread AngelWarrior
But I am experimenting with the code which is actually removing the padding by calling AES_cbc_encrypt(unsigned char*)input, (unsigned char*)(output), (const unsigned long)(length), &ks, (unsigned char*)ivec, AES_DECRYPT). What is EVP layer? On Wed, May 6, 2009 at 3:45 PM,

Re: Does AES_cbc_encrypt remove PKCS5 padding

2009-05-06 Thread Dr. Stephen Henson
On Wed, May 06, 2009, AngelWarrior wrote: > Hi, > > Does AES_cbc_encrypt add or remove the padding, if I provide an un-padded > data in the multiples of 16 bytes? I wrote a piece code where I am manually > adding the padding but when I decrypt using AES_cbc_encrypt the padding is > automatically

Does AES_cbc_encrypt remove PKCS5 padding

2009-05-06 Thread AngelWarrior
Hi, Does AES_cbc_encrypt add or remove the padding, if I provide an un-padded data in the multiples of 16 bytes? I wrote a piece code where I am manually adding the padding but when I decrypt using AES_cbc_encrypt the padding is automatically removed. -- _/\_ With Regards SB Angel Warrior

Re: where i can see the code of BN_mod_exp?

2009-05-06 Thread Antonio Ragagnin
thanks a lot!! 2009/5/6, Michael S. Zick : > On Wed May 6 2009, Michael S. Zick wrote: >> On Wed May 6 2009, Antonio Ragagnin wrote: >> > Hi, >> > I know the BN_mod_exp is optimized to compute the exponential and >> > modular combinations (it's what i have read!) >> > i'm interested to see the al

DTLS: "openssl s_client" broken in 1.0.0-beta2 due to lack of ECDHE support

2009-05-06 Thread Daniel Mentz
I built a vanilla openssl-1.0.0-beta2 and tried to run ./openssl s_client -dtls1 against ./openssl s_server -dtls1 To my disappointment it did not work properly. The client reported 3084506760:error:14106044:SSL routines:DTLS1_SEND_CLIENT_KEY_EXCHANGE:internal error:d1_clnt.c:976: The outp

Re: where i can see the code of BN_mod_exp?

2009-05-06 Thread Michael S. Zick
On Wed May 6 2009, Michael S. Zick wrote: > On Wed May 6 2009, Antonio Ragagnin wrote: > > Hi, > > I know the BN_mod_exp is optimized to compute the exponential and > > modular combinations (it's what i have read!) > > i'm interested to see the algorytm instead it: > > becouse i have to calculate

Re: where i can see the code of BN_mod_exp?

2009-05-06 Thread Michael S. Zick
On Wed May 6 2009, Antonio Ragagnin wrote: > Hi, > I know the BN_mod_exp is optimized to compute the exponential and > modular combinations (it's what i have read!) > i'm interested to see the algorytm instead it: > becouse i have to calculate a^b^c^d..%mod (or some thing like this), > at the time

where i can see the code of BN_mod_exp?

2009-05-06 Thread Antonio Ragagnin
Hi, I know the BN_mod_exp is optimized to compute the exponential and modular combinations (it's what i have read!) i'm interested to see the algorytm instead it: becouse i have to calculate a^b^c^d..%mod (or some thing like this), at the time i iterate BN_exp to calculate one single exponent end

Re: Loading a public RSA key from a DER file

2009-05-06 Thread Sébastien Hinderer
Hi Mounir, > Your file pk.der contains a public key encoded as a SubjectPublicKeyInfo > and NOT as a PKCS#1 encoding. So, you should use the function > d2i_RSA_PUBKEY instead of d2i_RSAPublicKey in order to read the public > key. Ah I thought I tried this one but apparently I did not. It works in

Re: Loading a public RSA key from a DER file

2009-05-06 Thread Mounir IDRASSI
Hi, Your file pk.der contains a public key encoded as a SubjectPublicKeyInfo and NOT as a PKCS#1 encoding. So, you should use the function d2i_RSA_PUBKEY instead of d2i_RSAPublicKey in order to read the public key. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr > Dear all, > > I am working

Make test fails while building 64bit openssl 9.8f

2009-05-06 Thread rajanchittil
Hi, I tried to build the 64 bit of openssl 9.8f. Make was successfully but when i done make test , it fails . Here is the failure message $sh testss make a certificate request using 'req' rsa Generating a 512 bit RSA private key . . writing new private key to

Re: error while executing make command

2009-05-06 Thread Ger Hobbelt
On Wed, May 6, 2009 at 11:38 AM, Neerav Singh wrote: > Hey Guys > > Somebody help please > > > > Who can I turn off ANSI mode? Neerav, this issue is veering off OpenSSL and into the system internals arena. With this kind of thing (access rights for dev tools like 'ar', etc. and the following #e

Loading a public RSA key from a DER file

2009-05-06 Thread Sébastien Hinderer
Dear all, I am working on a project which has to encrypt datas thanks to an RSA public key stored in DER format. I tried to write a test program using the d2i_RSAPublicKey, but the function returns NULL. However I'm pretty sure the file is correct, since I could use openssl command-line to obtain

Re: Openssl Memory leak

2009-05-06 Thread Fabian Bergmark
Okey. Now i got no more memory leaks when I put the SSL code in main. However, if i try to put the exact same code in a thread the memory leak is back. Here is the essential code I'm using; void lcserver::start() { SSL_library_init(); SSL_load_error_strings(); method = SSLv23_server_method(); ctx

Re: I want you to do my homework for me.

2009-05-06 Thread Miguel Ghobangieno
It doesn't take long to write an email. 5 min perhaps? 5 min does not equal a day. .: The fact that emails that you disagree with (almost on the level at which the genius Robert Butler is in disagreement) exist does not prove that one does not have a life; it would have to take 1/2 of a day to

Re: I want you to do my homework for me.

2009-05-06 Thread Steffen DETTMER
* David Loman wrote on Wed, May 06, 2009 at 11:21 +0200: > Mods: Any way there can be some banning happening soon? Don't feed the trolls. oki, Steffen ---[ end of message ]->8===

[OPENSSL In MAC OS]The SSL Format Issue

2009-05-06 Thread loubot
I port the supplicant with openssl 0.9.8k. It will show that "SSL3:server alert:decode error" after the supplicant send the client hello message to server. I change to port the supplicatn with openssl 0.9.8i, it can authentication success. I don't know what's happen. Could you help me resolve it?

Re: I want you to do my homework for me.

2009-05-06 Thread Lutz Jaenicke
David Loman wrote: > Mods: Any way there can be some banning happening soon? > Best way to end discussions like this one is to * step back * ignore what was written (annoying or offensive or not) * just do not write any more statements * enjoy doing something more useful Please understand that th

RE: error while executing make command

2009-05-06 Thread Neerav Singh
Hey Guys Somebody help please Who can I turn off ANSI mode? Regards Neerav From: Neerav Singh Sent: Monday, May 04, 2009 9:52 AM To: 'openssl-users@openssl.org' Subject: RE: error while executing make command Does anyone have any idea on this? Please hel

Re: I want you to do my homework for me.

2009-05-06 Thread David Loman
Mods: Any way there can be some banning happening soon? On Tue, May 5, 2009 at 11:39 PM, Miguel Ghobangieno wrote: > > Are damned bridges a reference to the punk/ska/hacker/liberal movie The > Matrix (TM), where a liberal white male, along with women, minorities, and > homosexuals (including bu

BIO_new_file() Usage Doesn't Use BIO_METHOD's ctrl Function Pointer

2009-05-06 Thread Mark P. Peterson
Hi, Is there a reason why BIO_new_file() doesn't use the BIO_METHOD ctrl function pointer using BIO_C_SET_FILENAME to open a file? Many OpenSSL functions in the system call BIO_new_file() directly to create or open a file, there's no way for an application to hook into opening a file in all cas

Re: Question about GOST engine in Openssl 1.0

2009-05-06 Thread Victor B. Wagner
On 2009.05.05 at 13:47:50 +0200, Dr. Stephen Henson wrote: > > Yes it's just a case of hacking util/mkmf.pl and/or some Makefiles. If OpenSSL > is compiled without shared library engines (enable-static-engine) in the > command line you *do* get the GOST engine under VC++. And I think that static