Re: How to verify that DH private and public key have been generated ?

2011-03-23 Thread Mike Mohr
ikuzar, I'm sorry to be blunt, but if you don't understand what I'm saying then you shouldn't be writing code that deals with low-level cryptographic objects/primitives. See the recent revelations from Sony and Nokia for why: even multinational corporations with hundreds of specialist developers

Re: How to verify that DH private and public key have been generated ?

2011-03-23 Thread Dr. Stephen Henson
On Wed, Mar 23, 2011, ikuzar wrote: > Hello, > I 'd like to know how to verify that DH private and public key have been > generated ? > In my DH struct, p and g had been generated with commands line ( openssl > dhparam... ) > > struct > { > BIGNUM *p; // prime number

Re: How to verify that DH private and public key have been generated ?

2011-03-23 Thread ikuzar
I do not understand what you mean. 1) I tried to print data's size returned by i2d_DHparams(const_dh, &dhbuf); without computing private nor public key. I have got 138 bytes. Then I remade the same operation but I had computed private and public key using DH_generate_key(dh); and I have still go

Re: Windows CE and FIPS

2011-03-23 Thread Dr. Stephen Henson
On Wed, Mar 23, 2011, Greaves, Ed (GE Healthcare) wrote: > > On Wed, Mar 23, 2011, Greaves, Ed (GE Healthcare) wrote: > > > >> Any plans for the OpenSSL FIPS module to support Windows CE? > >> > >> What is the issue preventing this? > >> > > > > Well it can't be added to the existing module due

RE: Windows CE and FIPS

2011-03-23 Thread Greaves, Ed (GE Healthcare)
> On Wed, Mar 23, 2011, Greaves, Ed (GE Healthcare) wrote: > >> Any plans for the OpenSSL FIPS module to support Windows CE? >> >> What is the issue preventing this? >> > > Well it can't be added to the existing module due to the rule change at the > start of 2011. > > A new validation is undera

Re: Windows CE and FIPS

2011-03-23 Thread Dr. Stephen Henson
On Wed, Mar 23, 2011, Greaves, Ed (GE Healthcare) wrote: > Any plans for the OpenSSL FIPS module to support Windows CE? > > What is the issue preventing this? > Well it can't be added to the existing module due to the rule change at the start of 2011. A new validation is underay but so far no

Re: How to verify that DH private and public key have been generated ?

2011-03-23 Thread Mike Mohr
Try checking the bit count of the structure members. The private and public keys should be similar in size to p. On Mar 23, 2011 10:27 AM, "ikuzar" wrote: > Hello, > I 'd like to know how to verify that DH private and public key have been > generated ? > In my DH struct, p and g had been generated

RE: Windows CE and FIPS

2011-03-23 Thread Greaves, Ed (GE Healthcare)
> On 03/23/11 11:56 AM, Greaves, Ed (GE Healthcare) wrote: >> Windows CE 6.0 and 7.0 for ARM. > > 7 was released this month, right? I'd imagine there will be a > development effort spend on it when someone takes it on for their own > requirements. > > but I thought Windows-centric stuff gener

Re: Windows CE and FIPS

2011-03-23 Thread John R Pierce
On 03/23/11 11:56 AM, Greaves, Ed (GE Healthcare) wrote: Windows CE 6.0 and 7.0 for ARM. 7 was released this month, right? I'd imagine there will be a development effort spend on it when someone takes it on for their own requirements. but I thought Windows-centric stuff generally used t

RE: Windows CE and FIPS

2011-03-23 Thread Greaves, Ed (GE Healthcare)
Windows CE 6.0 and 7.0 for ARM. -Ed -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John R Pierce Sent: Wednesday, March 23, 2011 1:42 PM To: openssl-users@openssl.org Subject: Re: Windows CE and FIPS On 03/23/11 11:23 AM, Gr

Re: Windows CE and FIPS

2011-03-23 Thread John R Pierce
On 03/23/11 11:23 AM, Greaves, Ed (GE Healthcare) wrote: Any plans for the OpenSSL FIPS module to support Windows CE? What is the issue preventing this? which of the multitudes of Windows CE versions and variants would this support? on what platform(s) would it be certified as FIPS compl

Windows CE and FIPS

2011-03-23 Thread Greaves, Ed (GE Healthcare)
Any plans for the OpenSSL FIPS module to support Windows CE? What is the issue preventing this? -Ed Greaves

How to verify that DH private and public key have been generated ?

2011-03-23 Thread ikuzar
Hello, I 'd like to know how to verify that DH private and public key have been generated ? In my DH struct, p and g had been generated with commands line ( openssl dhparam... ) struct { BIGNUM *p; // prime number (shared) BIGNUM *g; // generator o

Re: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01

2011-03-23 Thread Dr. Stephen Henson
On Wed, Mar 23, 2011, Krister Jarl wrote: > Hi! > > I'm experiencing a problem trying to establish a TLS-connection to our > SIP-platform. The error occurs both when trying to connect using another > SIP-server and when using openssl s_client. The problem is not > intermittent and can be reproduc

error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01

2011-03-23 Thread Krister Jarl
Hi! I'm experiencing a problem trying to establish a TLS-connection to our SIP-platform. The error occurs both when trying to connect using another SIP-server and when using openssl s_client. The problem is not intermittent and can be reproduced every time. error:0407006A:rsa routines:RSA_padding

Re: DIRECTORYSTRING and substitute in v1.0.0d

2011-03-23 Thread Christian Weber
Dr. Stephen Henson schrieb am 22.03.2011 18:50: ... You shouldn't need that patch. I think your problem is: ASN1_OPT(X509_ADMISSION_PROF_INFO, professionOIDs, ASN1_OBJECTS), Which is making an item template optional. Try instead doing: ASN1_SEQUENCE_OF_OPT(X509_ADMISSION_PROF_INFO, professionO