Re: Decrypting with key and initialization vector don't decrypt the first 8 bytes?

2010-04-04 Thread Mounir IDRASSI
Hi, When you encrypted data with a password using openssl command line, the first 16 bytes of the output are actually a header of the form 'Salted__' where the last 8 bytes represent the salt used to derive the key and the IV. So, from here you have to choices : - decrypt the encrypted f

Decrypting with key and initialization vector don't decrypt the first 8 bytes?

2010-04-04 Thread Alfredo Belmonti
Hello everybody and thank you all for reading. I'm doing some experiments with blowfish and triple DES ciphers. I'm encrypting some text files; using a password to generate the key and the IV; while using the "-p" option to let openssl show me the salt, the key and the IV onscreen. As far as I've

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread Saju Paul
On linux and solaris SO_RCVTIMEO and SO_SNDTIMEO needs the timeout to be set in a timeval struct and not a DWORD. Saju -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Adam Grossman Sent: Sunday, April 04, 2010 4:40 PM To: opens

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
i have done networking programming for a while, and i have never run across that before. thank you so much, you have just saved me a lot of development time! -=- adam grossman On Sun, 2010-04-04 at 22:34 +0200, PMHager wrote: > Adam Grossman wrote: > > thanks for the info, but this is on linux.

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread PMHager
Adam Grossman wrote: > thanks for the info, but this is on linux. The socket interface is almost the same on linux: #include int hSocket; int dwTimeout=1000; // milliseconds setsockopt(hSocket,SOL_SOCKET,SO_RCVTIMEO,(void*)&dwTimeout,sizeof dwTimeout); setsockopt(hSocket,SOL_SOCKET,SO_SNDTI

How to passively obtain the server certificate from a TLS connection

2010-04-04 Thread Ciprian Dorin, Craciun
Hello all! (I'm a new member of this mailing list, so if the answer to my question is already somewhere in the archives please point me there.) (I've done some searching and couldn't find anything useful.) In the context of the Perspectives project ( http://www.cs.cmu.edu/~perspec

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
Peter-Michael, thanks for the info, but this is on linux. -=- adam grossman On Sun, 2010-04-04 at 19:40 +0200, PMHager wrote: > Adam Grossman wrote: > > is there a way i can set a timeout for an SSL_accept, either if the > > handshake does not complete within X seconds (prefered), or even if it

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread PMHager
Adam Grossman wrote: > is there a way i can set a timeout for an SSL_accept, either if the > handshake does not complete within X seconds (prefered), or even if it > is waiting on a blocking socket and no data comes in for X seconds. I > know i can use alarms, but i was wondering (hoping), there w

Re: setting an SSL_accept(...) timeout

2010-04-04 Thread Dr. Stephen Henson
On Sun, Apr 04, 2010, Adam Grossman wrote: > hello, > > is there a way i can set a timeout for an SSL_accept, either if the > handshake does not complete within X seconds (prefered), or even if it > is waiting on a blocking socket and no data comes in for X seconds. I > know i can use alarms, bu

setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
hello, is there a way i can set a timeout for an SSL_accept, either if the handshake does not complete within X seconds (prefered), or even if it is waiting on a blocking socket and no data comes in for X seconds. I know i can use alarms, but i was wondering (hoping), there was a mechanism alread

Re: handshake failure / SSL3_GET_CLIENT_HELLO:no shared cipher s3_srvr

2010-04-04 Thread Götz Reinicke - IT Koordinator
Am 01.04.10 23:09, schrieb Victor Duchovni: > On Thu, Apr 01, 2010 at 10:48:56PM +0200, G??tz Reinicke - IT Koordinator > wrote: > >> Hi, >> >> how do I check this? >> >> On both servers I do have installed the same client and server software >> and performing a secured connection from both syste

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
You should read the detail of the readme files for this and maybe previous ports at rt.openssl.org. Firstly, for this port to work, you need to install the IBM AS/400 GNU utilities - it doesn't look like you have. I'm not sure of their current status, but at the time these were unsupported ut

Re: OpenSSL on IBMi

2010-04-04 Thread Pankaj Aggarwal
I used the patch on openssl 0.9.8e. on firing ./Configure OS400-icc I am getting the following error: qsh: 001-0014 Command /home/qsecofr/openssl/QAPTL/GMAKE not found. GMAKE: *** [links] Error 1 $ I have set the PATH environment variable as follows : /qibm/ProdData/DeveloperTools/qsh/bin/:/usr/

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
http://rt.openssl.org/Ticket/Display.html?id=1565&user=guest&pass=guest Only for 0.9.8e, though. G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Pankaj Aggarwal Sent: 04 April 2010 10:05 To: openssl-users@openssl.org Sub

OpenSSL on IBMi

2010-04-04 Thread Pankaj Aggarwal
Could somebody point me to the latest patch available (with instructions) for compiling openssl on IBMi (OS/400). Pankaj __ OpenSSL Project http://www.openssl.org User Support Mailing List