Which API will be easy to to use for FIPS compliance application

2010-09-15 Thread bhanu mukund jampala
I see a couple of APIs for using openssl library in my applications. I see EVP API and other APIs are specific to symetric/HASHs/MACs so forth. I looks from the code I can do all that from EVP itself. If my application is just targetted to testing openssl for *fips *complaince, which API can I pr

Re: Intermediate root CA's -- lost and confused :(

2010-09-15 Thread Paul B. Henson
On Mon, 13 Sep 2010, Mounir IDRASSI wrote: > Your problem could come from the fact that your Apache > SSLCertificateChainFile configuration is missing the Thawte Cross Root CA > that links "thawte Primary Root CA" to "Thawte Premium Server CA". Thanks for the suggestion, but I don't see that I ne

Re: sending RSA public and private keys to calling function

2010-09-15 Thread krishnamurthy santhanam
Hi Dave, Thanks for your suggestion. I had generated 1024 bytes RSA key. I need to convert this into DER to ASCII. Is this output is right? int main() { RSA *rsa; int len, len1; rsa = RSA_generate_key(1024, 3, NULL, NULL); size_t size; unsigned char *iend, keybuf[3000]; int i; size = i2d_RSAPriva

Re: Code Sample | Download Certificate

2010-09-15 Thread Wim Lewis
On Sep 15, 2010, at 6:24 AM, Ranjith Venkatesh wrote: > Is it possible to download a certificate given the website eg: > https://domainX.com using openssl functions? > If yes, what are relevant functions and relevant code samples? It's possible to do this using "openssl s_client -showcerts". You

Re: ubuntu testing dtls capabilities

2010-09-15 Thread Michael Tüxen
Hi Sebastian, which version of openssl are you using? 0.9.8 contains a lot of bugs regarding DTLS. (You can see a list of fixes at http://sctp.fh-muenster.de/dtls-patches.html). They are fixed in 1.0.? Do the same problems show up with 1.0.?? Best regards Michael On Sep 15, 2010, at 7:10 PM, Se

ubuntu testing dtls capabilities

2010-09-15 Thread Sebastian Proca
Hello all, I need to check(test) if my Ubuntu 10.04 with Openssl really uses Datagram TLS connection to encrypt a certain UDP flow. Until now I found a way, using the s_server and s_client applications from apps/ directory to test if the dtls capabilities are supported: 1) First generate the k

Re: [FWD] help

2010-09-15 Thread Chris
On Sep 15, 2010, at 9:51 AM, Lutz Jaenicke wrote: > Forwarded to openssl-users for public discussion. > > Best regards, > Lutz > > - Forwarded message from Sujatha S - > > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; > d=gmail.com; s=gamma; > h=domainkey-sign

[FWD] help

2010-09-15 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from Sujatha S - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :sub

Code Sample | Download Certificate

2010-09-15 Thread Ranjith Venkatesh
Is it possible to download a certificate given the website eg: https://domainX.com using openssl functions? If yes, what are relevant functions and relevant code samples? Ranjith Venkatesh Website: www.ranjithvenkatesh.com

Reading Transfer-Encoding: chunked data

2010-09-15 Thread Raj
Can anybody tell me how to read the chunked data using Open SSL API, I am writing a Man In The Middle application which intercepts the browser request and sends own request to the server , read the information from the server and puts it back to the browser. Now I am some what blocked in point

RE: Unstable output

2010-09-15 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Wim Meganck > Sent: Tuesday, 14 September, 2010 07:59 > I've made a test program. > I have an unstable output with keys/data in the magic option. > With other data/keys the output is stable (doc option). >

RE: Bug Report - Win32 OpenSSL v1.0.0a

2010-09-15 Thread Sharin Yeoh
Hi there, We came across a possible bug while using the above version of OpenSSL when converting an Apache .PFX certificate to a .PEM certificate in order to use it on a Citrix NetScaler appliance which runs on FreeBSD. The onversion using the following command : openssl pkcs12 -in c:\certs

Re: openssl and PeopleSoft

2010-09-15 Thread Kyle Hamilton
Generally, one can use /dev/random. This is the most appropriate way, in my opinion, as it allows the system to take its own uncertainty and stir it into the entropy pool. Alternatively, you can take a passphrase -- a section of a book that you pick, a set of words randomly chosen from the dictio