RE: DER public key - differing keylengths?

2010-07-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mark Bishop > Sent: Tuesday, 06 July, 2010 12:09 > When I execute: > > //Convert public key from PEM to DER > openssl rsa -inform PEM -in public_key.pem -out public_key.der > -outform DER -pubin -pubout > > I get a 162 byte file. > > When I

Re: Unable to set PSK ciphers for DTLS on Federa 13

2010-07-06 Thread Lindani Phiri
I found the issue with my code was that I was calling the function :   SSL_CTX_set_psk_client_callback() after I had already created my SSL object from the context. I used   SSL_set_psk_client_callback() on my SSL object instead and that fixed it. Lindani --- On Sat, 7/3/10, Lindani Phiri wr

2 way certificate authentication with apache

2010-07-06 Thread David Tisdell
Hi, I am trying to get 2 way certificate authentication going in Apache. I have installed the certificate into my browser (firefox) but it just times out. Anyone have any ideas? Thanks. Dave Here is the ssl section of my Apache config SSLEngine on SSLOptions +ExportCertData +StrictRequire SSL

DER public key - differing keylengths?

2010-07-06 Thread Mark Bishop
When I execute: //Convert public key from PEM to DER openssl rsa -inform PEM -in public_key.pem -out public_key.der -outform DER -pubin -pubout I get a 162 byte file. When I execute: //Create public key in DER format openssl rsa -in private_key.pem -pubout -outform DER -out public_key.der

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Kenneth Goldman
An argument against combining the two DLL's with a custom build is that your configuration will be different from everyone else. Whoever maintains your code after you move on will have to learn your non-standard configuration. More likely, they'll waste time undoing your strange setup and going ba

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Ger Hobbelt
This is off the top of my head, didn't check the sources to make sure, so validity is 'mostly sure but not entirely'. Quite a few bits 'n pieces in OpenSSL are 'template' based. (several crypto methods, a lot of ASN.1 work, an object stack, ...) Think about templates (wider scope than just the C++

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Dr. Stephen Henson
On Tue, Jul 06, 2010, Ger Hobbelt wrote: > On Tue, Jul 6, 2010 at 9:10 AM, Deckers, Rob wrote: > > > If you look in the OpenSSL code (of between the .lib files after build) > > , you will find 11 so called engines. > > - Sureware > > - Padlock > > - Cswift > > - 4758cca > > - Aep > > - Atalla >

RE: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Deckers, Rob
Thanks, I am starting to understand the structure. I now made the same structure in my CMake files. 11 engines and the modules crypto and ssl. But the Crypto module has a linker problem. 1>-- Build started: Project: openssl.crypto, Configuration: Debug Win32 -- 1>Linking... 1> Creat

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Ger Hobbelt
On Tue, Jul 6, 2010 at 9:10 AM, Deckers, Rob wrote: > If you look in the OpenSSL code (of between the .lib files after build) > , you will find 11 so called engines. > - Sureware > - Padlock > - Cswift > - 4758cca > - Aep > - Atalla > - Capi > - Chil > - Nuron > - Gmp > - Ubsec > > Does anyone kn

Re: Large CRL Handling Problem

2010-07-06 Thread Jakob Bohm
On 06-07-2010 01:03, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Ryan Smith Sent: Friday, 02 July, 2010 18:31 I have written a FIPS-1.1.2 compliant (OpenSSL 0.9.7m) application that validates certificates that are read in from files. It also

Huge performance issues using SSL3

2010-07-06 Thread Ludwig Groten
Hi list, In our application we use OpenSSL 0.9.8a in combination with libcurl (7.19.7) for uploading files to a server. On different machines we see a huge performance issue when using SSL3. Using SSL2 does not show this issue. >From looking into the network traffic we do see a delayed ACK fro

Makefile in test dir

2010-07-06 Thread kai_yang2008
HI All, I found that that in the Makefile in the test dir , there are lines like: test_aes: #$(AESTEST) # @echo "test Rijndael" # ../util/shlib_wrap.sh ./$(AESTEST) It seems that it it not going to run the test_aes. so i just want to know why comment these lines on ? Thanks! Kevin,

RE: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Deckers, Rob
If you look in the OpenSSL code (of between the .lib files after build) , you will find 11 so called engines. - Sureware - Padlock - Cswift - 4758cca - Aep - Atalla - Capi - Chil - Nuron - Gmp - Ubsec Does anyone know if these are in the Libeay32.dll of in the Ssleay32.dll ? Rob Deckers This me