Re: Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

2010-01-22 Thread Dr. Stephen Henson
On Fri, Jan 22, 2010, Michael Stone wrote: > Dear openssl-users@ and, in particular, Dr. Henson, > > First, apologies that I didn't realize I was writing to you in my > previous response to Fred. I'll check my To: lines more carefully in the > future. > > Second, thanks for your earlier assista

Re: Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

2010-01-22 Thread Michael Stone
2. I have compiled today's snapshot # curl .../openssl-0.9.8-stable-SNAP-20100122.tar.gz | tar xzf # cd openssl-* ./config --prefix=~/ssl make -j4 make install 3. To produce the attached log, excerpts of which are quoted below, I ran ./openssl s_

Re: aes key wrap ciphertext with custom test vector: test fails

2010-01-22 Thread carlyoung
>On Fri 22/01/10 1:54 PM , protagora27 protagora27 protagor...@gmail.com sent: >I want to test aes_wrap.c under sourceopenssl/crypto/aes. Is this because AES needs 16 byte IV ?? __ OpenSSL Project

MGF1 not exported in 1.0.0

2010-01-22 Thread Kenneth Goldman
Between 0.9.8 and 1.0.0, the function rsa_oaep.c:MGF1() was changed to static. This breaks backward compatibility. IMHO, the static keyword should be removed. (Copying the users mailing list. My hope is that I can gather some community support for the importance of backward compatibility.) --

Re: Generated RSA Data Bigger than Key

2010-01-22 Thread Patrick Patterson
Hi Douglas: My first thought on this is that you're seeing padding, which may make the final data larger. On January 22, 2010 08:54:58 am Douglas Gemignani wrote: > Hello, > > I'm using PKCS#7 for generating an enveloped certificated, but after > openssl generating a random TDES key and encrypts

Re: openssl 0.9.8m-beta1 with modssl patch does not disable renegotiation

2010-01-22 Thread Victor Duchovni
On Fri, Jan 22, 2010 at 04:39:43AM +0100, Dr. Stephen Henson wrote: > On Thu, Jan 21, 2010, fredk2 wrote: > > > > > do I understand this correctly: > > 0.9.8m sends a no_renegotiation alert and apache needs a mod_ssl patch that, > > by default, upon this alert closes the connection? > > > > No

aes key wrap ciphertext for custom test vector

2010-01-22 Thread Luca Pellanda
I have downloaded openssl-0.9.8l and I have builded openssl with 1) ./config --prefix=/home/luca/zz/tmpopenssl/ --openssldir=/home/luca/zz/tmpopenssl/openssldir shared 2) make 3) make test 4)make install It's all ok. I want to test aes_wrap.c under sourceopenssl/crypto/aes. My goal is to gen

Re: Generated RSA Data Bigger than Key

2010-01-22 Thread Dr. Stephen Henson
On Fri, Jan 22, 2010, Douglas Gemignani wrote: > Hello, > > I'm using PKCS#7 for generating an enveloped certificated, but after > openssl generating a random TDES key and encrypts it with my pub exp, > sometimes the resulting data is bigger than my module / prv exp. > > Something is wrong, this

aes key wrap ciphertext with custom test vector: test fails

2010-01-22 Thread protagora27 protagora27
I have downloaded openssl-0.9.8l and I have builded openssl with 1) ./config --prefix=/home/luca/zz/tmpopenssl/ --openssldir=/home/luca/zz/tmpopenssl/openssldir shared 2) make 3) make test 4)make install It's all ok. I want to test aes_wrap.c under sourceopenssl/crypto/aes. My goal is to gen

Generated RSA Data Bigger than Key

2010-01-22 Thread Douglas Gemignani
Hello, I'm using PKCS#7 for generating an enveloped certificated, but after openssl generating a random TDES key and encrypts it with my pub exp, sometimes the resulting data is bigger than my module / prv exp. Something is wrong, this should never happen... There is my snippet p7 = PKCS7_new()

Re: recommended rsa api

2010-01-22 Thread Alexey Luchko
Hi! Thankx for your advices. Finally, I got it working with RSA_public_encrypt() and RSA_private_decrypt(). -- Alexey sms stands for save my soul __ OpenSSL Project http://www.openssl.org User

Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-01-22 Thread Dr. Stephen Henson
On Thu, Jan 21, 2010, Ujwal Chinthala wrote: > Hi, > > Thanks for the all the help. > > I see the same error when I am trying to create a x509 certificate using the > DSA parameters g, p, q and public key y. > These parameters are generated by the GetPublicKey API in C#. All the above > param

RE: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-01-22 Thread Ujwal Chinthala
Hi, Thanks for the all the help. I see the same error when I am trying to create a x509 certificate using the DSA parameters g, p, q and public key y. These parameters are generated by the GetPublicKey API in C#. All the above parameters are BYTE arrays. Find the DSA parameters attached.