Re: How to configure DES ECB encryption without the "no padding" mode?

Hi Martin, Thanks for the speedy response. I have been attempting to use the EVP interface, but the cipher text produced is wrong (and I am fairly new to this). As a simple test, I have hard-coded an 8 byte block for the key (in hexadecimal), and also an 8 byte block (also in hex) for

Re: Server name indication

On Fri, 09 Apr 2010 16:50:48 +0200 Peter Sylvester wrote: > Sad Clouds wrote: > > Hi, is there any sort of documentation on how to use SNI with > > OpenSSL? > As far as I know, only the source in s_client and s_server.c OK thanks. I'll have a look at the source code of those and see if I can fi

Re: Strange SSL_shutdown() error return (SSL_ERROR_SYSCALL but errno == 0)

Hello again, > I have investigated this issue of -1/SSL_ERROR_SYSCALL with errno==0. > > > From the SSL_get_error(3) man page: > > SSL_ERROR_SYSCALL > Some I/O error occurred. The OpenSSL error queue may contain more > information on the error. If the error queue is empty (i.e. > ERR_

Re: Strange SSL_shutdown() error return (SSL_ERROR_SYSCALL but errno == 0)

Antoine Pitrou wrote: What I'm specifically interested in is SSL_ERROR_SYSCALL with errno==0. I have investigated this issue of -1/SSL_ERROR_SYSCALL with errno==0. From the SSL_get_error(3) man page: SSL_ERROR_SYSCALL Some I/O error occurred. The OpenSSL error queue may contain more inf

Re: openssl-0.9.8n and openssl-fips-1.2 ERR_peek_last_error failure

-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Dr. Stephen Henson wrote on 04/08/2010 08:16 PM: > On Thu, Apr 08, 2010, Gatewood (Woody) Green wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: RIPEMD160 >> >> Setup: >> >> Built openssl-fips-1.2 per the Security Policy. >> Built openssl-

Re: SSL error: parse tlsext

Dr. Stephen Henson wrote: > > > openssl s_client -connect xxx.org:443 > > > and it should say if secure renegotiation is supported in > > > the output. > > Thanks for the tip! I tried, but I am afraid I cannot tell > > whether it is the case or not, based on this output. I tried > > on googl

Re: How to configure DES ECB encryption without the "no padding" mode?

Hi Ali, Thus wrote Ali Sydney (asyd...@k-state.edu): >I am attempting to implement DES (in C++ with the OpenSSL >libraries) in ECB mode without padding. I am using the following >function for encryption: > void DES_ecb_encrypt(const_DES_cblock *input, DES_cblock *output, >

How to configure DES ECB encryption without the "no padding" mode?

All, I am attempting to implement DES (in C++ with the OpenSSL libraries) in ECB mode without padding. I am using the following function for encryption: void DES_ecb_encrypt(const_DES_cblock *input, DES_cblock *output, DES_key_schedule *ks, int enc); However, this function does not

Re: Server name indication

Sad Clouds wrote: Hi, is there any sort of documentation on how to use SNI with OpenSSL? As far as I know, only the source in s_client and s_server.c It depends on what side you are, and what do you want to test. As a client, if you want to start a session to a server, and if you somehow ha

Re: CA cert installed/imported but they are not trusted

On Apr 9, 2010, at 3:02 AM, Götz Reinicke - IT Koordinator wrote: > [r...@ldap1 ~]# openssl s_client -connect ldap1.filmakademie.de:389 > -showcerts -CAfile /etc/openldap/CA_falu/CA.pem > CONNECTED(0003) > 5066:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake > failure:s23_lib.c:188: >

Server name indication

Hi, is there any sort of documentation on how to use SNI with OpenSSL? For example, what functions to use and what steps to take. __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: CA cert installed/imported but they are not trusted

Hi, not yet. I'm still not total familier with the different "checking methods". So thanks for your suggestion. ldap master -> ldap slave [r...@ldap1 ~]# openssl s_client -connect ldap2.filmakademie.de:389 -showcerts -CAfile /etc/openldap/CA_falu/CA.pem CONNECTED(0003) 5063:error:140790E5:SS