Thumbprint algorithm

2010-09-01 Thread kartik rustagi
Hello everyone, Can anyone tell me the what exactly is thumbprint algorithm? All the certificates that I am creating using openssl have thumbprint algorithm as SHA1. I see no configuration to change that in openssl.cnf . As I understood, the only hash that is required in a certificate is the signa

Re: RE: AES in counter mode no support in openssl

2010-09-01 Thread sagar gupta
can that aes_ctr.c be used to connect to hardware driver. I have a hardware driver which can implement the encryption method for more performance. Thanks On Thu, 02 Sep 2010 03:30:20 +0530 wrote > OpenSSL 1.0.0a has aes_ctr.c in the crypto/aes directory.   Erik Tkal Subject: AES i

Re: Support of SHA-2

2010-09-01 Thread Alex Chen
I changed the default_md to sha512 in the configuration file and the generated pem file shows Signature Algorithm: sha512WithRSAEncryption Client and server are still able to communicate. ( Server uses the new pem file and the client uses an old pem file with md5 ). So I guess that works f

Re: Support of SHA-2

2010-09-01 Thread Alex Chen
So if I want to use SHA-2 in my certificates, how do I choose on from the available SHA-2 family? The only thing I see in the config file we use is default_md = md5 and the generated pem file has the following entry: Signature Algorithm: md5WithRSAEncryption Which SHA-2 family can I use?

RE: Connection Resetting

2010-09-01 Thread David Schwartz
Sam Jantz wrote: > It's multi threaded with non-blocking I/O.  I'm not sure exactly what > you mean by socket discovery, but I think you are asking how my program > determines when something is ready?  If that's the case then my program > uses a select statement to watch the file descriptor to se

RE: Connection Resetting

2010-09-01 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Sam Jantz > Sent: Wednesday, 01 September, 2010 12:25 > My proxy behaves like number two in the previous email. > It is purely a bidirectional proxy with no clear tracking of the > protocol [after CONNECT] It's m

Re: CSR generation in OpenSSL...

2010-09-01 Thread Dr. Stephen Henson
On Wed, Sep 01, 2010, monojit.da...@cognizant.com wrote: > > Hi, > > How can I generate CSR programmatically using OpenSSL APIs; not using the > openssl tool? > Can I you plz. provide me with the API name or some sample code to do this? > Look in demos/x509/mkreq.c Steve. -- Dr Stephen N. He

RE: AES in counter mode no support in openssl

2010-09-01 Thread Erik Tkal
OpenSSL 1.0.0a has aes_ctr.c in the crypto/aes directory. Erik Tkal Subject: AES in counter mode no support in openssl hi all, I was working on the Openssl1.0.0 version for AES cryptographic support in counter mode i.e; AES-CTR mode. I did not find any support added to the openssl1.0.0 ver

RE: Request on AES 512 bit encryption Configuration in Openssl.

2010-09-01 Thread Erik Tkal
AES by definition has a 128-bit block size and uses either a 128, 192 or 256-bit key. If you mean the Rijndael algorithm, that is more flexible and can have a block size up to 256 bits, with no key size limit. I do not believe OpenSSL has the generic support (older versions may have from pre-A

Confusion about subject alternative names

2010-09-01 Thread Gaiseric Vandal
Hi I am using various version of openssl-0.9.x (including openssl-0.9.8k-1.fc11.i686 on my linux machine altho the cusotmized openssl.cnf file is probably inherited from a slightly earlier version.) When I create a certificate signing request with openssl, I have an option to specify an Subj

CSR generation in OpenSSL...

2010-09-01 Thread Monojit.Datta
Hi, How can I generate CSR programmatically using OpenSSL APIs; not using the openssl tool? Can I you plz. provide me with the API name or some sample code to do this? Regards, Monojit. This e-mail and any files transmitted with it are for the sole use of the intended recipient(s) and may co

Request on AES 512 bit encryption Configuration in Openssl.

2010-09-01 Thread udaya shankara
Hi, Is it possible to have AES 512 bit encryption in latest release of openssl. Regards, Uday,

AES in counter mode no support in openssl

2010-09-01 Thread sagar gupta
hi all, I was working on the Openssl1.0.0 version for AES cryptographic support in counter mode i.e; AES-CTR mode. I did not find any support added to the openssl1.0.0 version. I wanted to ask that is there support for AES counter mode in openssl?? if Yes which version of Openssl support AES co

Re: Connection Resetting

2010-09-01 Thread Sam Jantz
A little more about how my proxy works, My proxy behaves like number two in the previous email. It is purely a bidirectional proxy with no clear tracking of the protocol. With the only exception being it reads the entire (unencrypted) Connect request from the client, and then goes and connec

Converting from traditional key to PKCS8

2010-09-01 Thread Vivek Madani
While trying to convert an existing traditional private key file to pkcs8 format, I am getting following error: unable to load key 7916:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:ev p_enc.c:330: 7916:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:428:

Re: AES in counter mode no support in openssl

2010-09-01 Thread Luc Perthuis
sagar gupta wrote: hi all, I have been working on openssl 1.0.0 for support on AES encryption method in counter mode. I was wondering wheter there is any support for AES in counter mode in Openssl. Please tell me where to find the corresponding source for the AES counter mode if there is supp

AES in counter mode no support in openssl

2010-09-01 Thread sagar gupta
hi all, I have been working on openssl 1.0.0 for support on AES encryption method in counter mode. I was wondering wheter there is any support for AES in counter mode in Openssl. Please tell me where to find the corresponding source for the AES counter mode if there is support for the that in o