Can't Use Hashlib in Python

2010-03-11 Thread brown wrap
I have several programs that I am trying to compile and they compile due to openssl As an example in trying to compile gobject-introspection-0.6.8, after the configure, the make fails: File "/home/final-sources-lfs-6.6/blfs/gobject-introspection-0.6.8/giscanner/cachestore.py", line 23, in

Problems with SSL_shutdown() and non blocking socket

2010-03-11 Thread Victor Stinner
Hi, I'm trying to fix a bug in Python which is specific to OpenSSL 0.9.8m. The problem is in a FTP test using a blocking socket (client) and a non blocking socket (server). There are different tests, some tests use a timeout of 2 seconds on the client socket. Pseudo-code of Python shutdown low

Re: i2d_X509_REQ_INFO doesn't convert req_info structure properly

2010-03-11 Thread Peter Gubis
On 11. 3. 2010 17:54, Dr. Stephen Henson wrote: > On Thu, Mar 11, 2010, Peter Gubis wrote: > > >> int datasig_len; >> unsigned char *tobesigned; >> datasig_len = i2d_X509_REQ_INFO( req->req_info, NULL ); >> tobesigned = (unsigned char *) malloc( datasig_len ); >> if( !tobesigned ) {

Shorten the timeout for openssl s_client?

2010-03-11 Thread Todd Thatcher
All, Using the command "openssl s_client -connect gmail.google.com:443" openssl gets the certificate information and stays connected until I enter QUIT, or the timeout is hit -- about 2 minutes later. I want to script certificate expiration date checks for out servers. Is there a command-l

RE: Size of DH Params

2010-03-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dirk Menstermann > Sent: Wednesday, 10 March, 2010 10:57 > when I generate DH parameters with: > > int bits = 1024; > DH *params = DH_generate_parameters (bits, DH_GENERATOR_5, > NULL, NULL); > > Can I then later read the value of the bits pa

RE: Crash in BIO_set_fp(): Windows esp SL VC9?

2010-03-11 Thread Dave Thompson
-dev added, I think this is actually a bug > From: owner-openssl-us...@openssl.org On Behalf Of Michael Boman > Sent: Monday, 01 March, 2010 11:40 > I am using OpenSSL 0.9.8l from http://www.slproweb.com/products/Win32OpenSSL.html > I link to these libraries for

RE: problem converting PKCS8 keystore private key to PEM

2010-03-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of eoinmoon > Sent: Wednesday, 10 March, 2010 11:00 > my attempts have failed to convert an private > key[generated in java keystore and exported via java code] to > a PEM format > which I need for my application. > > These are the steps I have d

RE: sha-256 support in openssl 0.9.8g

2010-03-11 Thread Hasan Rezaul-CHR010
Hi All, Any answers to my question(s) below ? Basically I have to make sure [ IPSec link establishment, Certificates verification, general TLS/SSL, HTTPS, SSH, SFTP], etc all can support use of the SHA-2 (specifically sha-256) algorithms ! On my system I have openssl 0.9.8g, and I have opens

Re: BIO_do_connect() strange return

2010-03-11 Thread Dr. Stephen Henson
On Thu, Mar 11, 2010, Bin Lu wrote: > It is running on Linux with openSSL 0.9.8d. > Ah that's pretty old. I'd suggest trying 0.9.8m. That includes proper non-blocking I/O support for OCSP with the new function OCSP_sendreq_nbio(). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer.

Re: linking FIPS 1.2

2010-03-11 Thread Dr. Stephen Henson
On Thu, Mar 11, 2010, Adam Grossman wrote: > hello, > > i just built fips 1.2, and then built a FIPs capable OpenSSL 0.9.8l as a > shared lib. I then took my application, added in FIPS_mode_set(1), and > it passed. But then i realized i did not switch over in my make file to > use "CC=fipsld"

linking FIPS 1.2

2010-03-11 Thread Adam Grossman
hello, i just built fips 1.2, and then built a FIPs capable OpenSSL 0.9.8l as a shared lib. I then took my application, added in FIPS_mode_set(1), and it passed. But then i realized i did not switch over in my make file to use "CC=fipsld" It still used "CC=gcc -fPIC". Is the reason why it work

RE: BIO_do_connect() strange return

2010-03-11 Thread Bin Lu
It is running on Linux with openSSL 0.9.8d. Regards, -binlu -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Wednesday, March 10, 2010 8:13 PM To: openssl-users@openssl.org Subject: Re: BIO_do_connect(

RE: CPU usage and FPGA support

2010-03-11 Thread Cheng, Weidong
>From my mind, when you use an FPGA encryption hardware, CPU needs to dump one >block data into the FPAG and read the result out. This is the time CPU spends >for the encryption of one block data when the FPGA hardware is used. You need >to compare this time with the time you spend by doing the

Re: CPU usage and FPGA support

2010-03-11 Thread John R Pierce
Mark H. Wood wrote: Notice a few things: o The OP asked about reducing CPU load, but the answers all talk about making encryption faster. These are not the same thing. Offloading encryption might *reduce* throughput of the encrypted streams, and yet free up CPU time to do other things

Re: i2d_X509_REQ_INFO doesn't convert req_info structure properly

2010-03-11 Thread Dr. Stephen Henson
On Thu, Mar 11, 2010, Peter Gubis wrote: > > int datasig_len; > unsigned char *tobesigned; > datasig_len = i2d_X509_REQ_INFO( req->req_info, NULL ); > tobesigned = (unsigned char *) malloc( datasig_len ); > if( !tobesigned ) { > printf("Unable to alloc mem buffer\n"); > return -

i2d_X509_REQ_INFO doesn't convert req_info structure properly

2010-03-11 Thread Peter Gubis
Hi all, I'm trying to create X509 certificate request signed inside smart card using PKCS11 interface. To perform this task I have to perform following steps: 1, create certificate request (X509_new) 2, load public key (X509_REQ_set_pubkey) 3, set up subject name and extensions as required 4, exp

Re: CPU usage and FPGA support

2010-03-11 Thread Mark H. Wood
Notice a few things: o The OP asked about reducing CPU load, but the answers all talk about making encryption faster. These are not the same thing. Offloading encryption might *reduce* throughput of the encrypted streams, and yet free up CPU time to do other things. Encrypted commun

Re: problem converting PKCS8 keystore private key to PEM

2010-03-11 Thread eoinmoon
And that's all he wrote Thanks for that Stephen, it worked... times like this you kind of go "duh!"... but still learning I suppose [Its my only excuse]. Excellent forum, loads of info and quick responses... not all are like that, appreciate it Regards Eoin Dr. Stephen Henson wrote: >

Re: CPU usage and FPGA support

2010-03-11 Thread .
We are sorry for the duplicate message. Thank you all for the good answers. First of all we have to take a decision of either to use dropbear(embedded ssh2 protocol,using libtomcrypt libaries) or OpenSSH(using OpenSSL libaries). We have looked at the two libaries and it looks like libtomcrypt migh

CPU usage and FPGA support

2010-03-11 Thread .
Hello everybody. We are two students doing a project about accelerating encryption on an embedded system. This system is build upon a ARM processor (180MHz) and an FPGA. We have built and implemented OpenSSH into the system (running Linux), and tested the AES encryption in software. The task is no