Re: OpenSSL C example Base64 Decode,

2009-09-04 Thread Hazel John
This works for me: void base64Decode(unsigned char* pIn, int inLen, unsigned char* pOut, int& outLen) { // create a memory buffer containing base64 encoded data BIO* bmem = BIO_new_mem_buf((void*)pIn, inLen); // push a Base64 filter so that reading from buffer decodes it

OpenSSL C example Base64 Decode,

2009-09-04 Thread Nigel Sollars
HI all, I have a working example of Encoding base64 using the BIO methods but decrypting a string is being somewhat problematic. The code in the man page for decoding does not work either as the stdin new_fp does not hand off / stop listening for input. The openssl version is 0.9.8i If any

RE: speed command in openssl.exe

2009-09-04 Thread jimmy_moh
thanks will while using the speed command is there any option to specify the number of iterations,,,? and for RSA am getting the below message.. "Doing 1310 1024 bit private rsa's : 1310 1024 bit private RSA's in 12.86 s" here the number "1310" is the iteration right..? Will Bickford wrote:

Re: Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-04 Thread Hazel John
On Thu, Sep 3, 2009 at 6:36 PM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Hazel John >> Sent: Thursday, 03 September, 2009 15:25 > >> openssl enc -aes-256-cbc -K >> 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E >> 1F -iv 00112233445566778899AABBCCDD

Re: Bug in SNAPS 20090903 and 20090904 that affects BSD Unix

2009-09-04 Thread The Doctor
On Fri, Sep 04, 2009 at 01:50:46PM +0200, Dr. Stephen Henson wrote: > On Fri, Sep 04, 2009, The Doctor wrote: > > > Right, I did not see this in 20090902 but > > did turn up in 20090903 > > > > Fixed now. I was sure "make test" passed on my system.. weird. > Do you have a BSDish platform to w

Re: post-connection assertions

2009-09-04 Thread Daniel Mentz
Dave Thompson wrote: 3. Use SSL_set_verify() and provide a callback function. This sounds promising but the callback function gets called for every certificate in the chain. How can I find out whether the certificate in question is the peer's cert and not some intermediate cert? x509storectx

standard process to validate a certificate chain ?

2009-09-04 Thread jehan procaccia
hello, in a recent thread on this list about "add extension to an existing (signed) CA certificate" I was wondering how openssl software validate a certificate chain. jehan procaccia wrote : Can someone tell me how SSL clients check/verify a 3 level hierarchie ? is it based on extension autho

Re: Bug in SNAPS 20090903 and 20090904 that affects BSD Unix

2009-09-04 Thread Dr. Stephen Henson
On Fri, Sep 04, 2009, The Doctor wrote: > Right, I did not see this in 20090902 but > did turn up in 20090903 > Fixed now. I was sure "make test" passed on my system.. weird. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.

Re: ECDSA PKV Validation Failure

2009-09-04 Thread Bodo Moeller
On Sep 4, 2009, at 12:29 AM, Will Bickford wrote: In the following sample test case I get a false-positive from OpenSSL 1.0.0 Beta 3. Note that this tests specifically for a vector larger than should be allowed (192/32 = 6 32-bit integers, but Qy requires 7). Other test cases succeed or fail a

Info regarding books / material on OpenSSL

2009-09-04 Thread prashanth s joshi
Hi all, I want to study OpenSSL code and work on it on some some the features such as decrypting the messages passed between the cient and the server. I have studied the TLS protocol. Is there any book / material that talks about how the OpenSSL code is organized. And also how the SSL_read /write

Re: openssl C server and java clients

2009-09-04 Thread Sebastián Treu
I want to crush myself. I feel sorry is this is spam for someone, but I realized that I needed an SSL * list of elements because I was always yieldeng the same ssl context. Sleep well would be a good idea, I feel sorry and I apologize myself. Solution: think of keeping a list of SSL * of each ne

Re: openssl C server and java clients

2009-09-04 Thread Sebastián Treu
The information you gave me I set it right now on the application server and client. As I mentioned before, the server is multiplexed supporting multiple clients. I wrote a C client and I have my java client as well (on experimental phase). The server acts as a "forwarder" sending data received fr

Using servername extension with tickets

2009-09-04 Thread Sreekanth Vadapalli
Hi, I am running into a couple of issues while using these two extensions together in 0.9.8j. They are working fine independently though. First issue is the order of callback invocation for these extensions. Ticket key callback is invoked ahead of the servername one. In my case, the ticket

ECDSA PKV Validation Failure

2009-09-04 Thread Will Bickford
In the following sample test case I get a false-positive from OpenSSL 1.0.0 Beta 3. Note that this tests specifically for a vector larger than should be allowed (192/32 = 6 32-bit integers, but Qy requires 7). Other test cases succeed or fail as expected - this is an edge case. [P-192] Qx = cd6d

Using servername extension with tickets

2009-09-04 Thread Sreekanth Vadapalli
Hi, I am running into a couple of issues while using these two extensions together in 0.9.8j. They are working fine independently though. First issue is the order of callback invocation for these extensions. Ticket key callback is invoked ahead of the servername one. In my case, the ticket

RE: speed command in openssl.exe

2009-09-04 Thread Will Bickford
1,310,720 times means it ran 1.25 x 1024 x 1024 times (iterations). The total time taken was 11.17 seconds. If that were an average it would have taken 5.5 months to run the speed test. --Will > -Original Message- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@o