Re: SSL_OP_NO_QUERY_MTU problem in openssl 1.0.0.e

On Oct 19, 2011, at 11:45 PM, Oleg Moskalenko wrote: > Hi > > I installed the new OpenSSL version and I immediately ran into a problem with > DTLS: when the option SSL_OP_NO_QUERY_MTU is set, then the SSL_connect > command produces a segmentation fault. Have you tried the first bug fix availab

Re: Failing to verify the certificate of one specific site

2011/10/9 Lucas Clemente Vella : > First of all, I am not a direct user of the OpenSSL library, but I am > using it via Python 2.7 built-in module ssl, which in turn uses > OpenSSL. Since my problem is SSL specific, I thought people here would > be more apt to help me. Now I wrote the C code using

SSL_OP_NO_QUERY_MTU problem in openssl 1.0.0.e

Hi I installed the new OpenSSL version and I immediately ran into a problem with DTLS: when the option SSL_OP_NO_QUERY_MTU is set, then the SSL_connect command produces a segmentation fault. I am using Linux Ubuntu 11.04. If I want to use my own discovered MTU, then I have to use that option.

Re: Openssl version compatibility [0.9.8r vs. 1.0.0e]

> From: "Hasan Rezaul-CHR010" > To: , > Date: 10/19/2011 12:44 PM > Subject: Openssl version compatibility [0.9.8r vs. 1.0.0e] > Sent by: owner-openssl-us...@openssl.org > > We have a bunch of Linux Boxes (Clients) that would run openssl 0.9.8r. > > We will have a Solaris box (CA Server), tha

Re: test vectors for CTR DRBG

Jiri Hladky-2 wrote: > > Hello, > > I'm looking for the test vectors for CTR DRBG random number generator. I > got > test vectors from > > http://csrc.nist.gov/groups/STM/cavp/documents/drbg/drbgtestvectors.zip > > which contains CTR_DRBG.rsp file. However, I'm looking for the following > s

RE: getting the input not from command line

Ciao. If you use 'prompt = no' in openssl.conf, then it won't ask anything. I'm using it and it works ok! Cheers. Sergio. > Date: Wed, 19 Oct 2011 22:25:57 +0530 > Subject: Re: getting the input not from command line > From: pkr...@gmail.com > To: openssl-users@openssl.org > > Thanks jakob,

Re: getting the input not from command line

Thanks jakob, I am able to do it. now i have another problem. The below command generate a signed certificate. but to generate it ask for the user permission. what i want is it will directly generate the certificate with out asking the user permission. please find the command below. openssl ca -i

Openssl version compatibility [0.9.8r vs. 1.0.0e]

Hi All, We have a bunch of Linux Boxes (Clients) that would run openssl 0.9.8r. We will have a Solaris box (CA Server), that would run openssl 1.0.0e Is there any compatibility problems that we would need to be concerned about ? Is there any difference in functionality that could give rise to un

Re: getting the input not from command line

There is almost an example on the documentation page for the req utility. I have not used it myself, but it seems this would be a typical example: -subj "/DC=org/DC=OpenSSL/DC=users/CN=John Doe" On 10/19/2011 5:32 PM, prabhu kalyan rout wrote: Hi jakob, Thanks for you help. Can you please giv

Re: getting the input not from command line

Hi jakob, Thanks for you help. Can you please give me one example of the -subj option. Thanks & Regards Prabhu On Wed, Oct 19, 2011 at 7:46 PM, Jakob Bohm wrote: > Use the option -subj and adjust other settings in openssl.cnf to make things > easier. > > On 10/19/2011 2:43 PM, prabhu kalyan rou

RE: How to recover Self signed SSL private Key Pass Phrase

> can any one please help me regarding this, like how to > retrieve the SSL pass phrase , or assign a new pass phrase > for the same private key. Add all information you remember (possible parts, used characters, length information) to a key cracking tool, run it and wait?

Re: How to recover Self signed SSL private Key Pass Phrase

It was one of my family members birthday written backwards followed by the word TeaPot with some combination of upper and lower case Password of the year! :) On 19 Oct, 2011, at 10:16 PM, Jakob Bohm wrote: > It was one of my family members > birthday written backwards followed by the word TeaPo

Re: getting the input not from command line

Use the option -subj and adjust other settings in openssl.cnf to make things easier. On 10/19/2011 2:43 PM, prabhu kalyan rout wrote: Hi, As per my project requirement i should configure the openssl req command in such a way that it will not ask the user information from prompt. Is there any wa

Re: How to recover Self signed SSL private Key Pass Phrase

The passphrase is used to actually encrypt the private key. The only way is to try lots and lots of passphrases until you find the right one. If you remember some parts of the passphrase (like "It was one of my family members birthday written backwards followed by the word TeaPot with some c

getting the input not from command line

Hi, As per my project requirement i should configure the openssl req command in such a way that it will not ask the user information from prompt. Is there any way so that i can directly pass the information in the command line or through a file. kindly help Regards Prabhu

How to recover Self signed SSL private Key Pass Phrase

Hi all I had generated SSL self signed certificates and deployed on m system, where i had saved m passphrase. Like 5 months back. Now i am unable to find the document where i had saved passphrase , and unable to retireve the Pass phrase for the SSL certificates can any one please help me regard

Re: SSL documentation

On 10/19/2011 6:10 AM, Mohan Radhakrishnan wrote: Hi, Is there any material available that shows flows of one-way/two-ssl and different types of CA architectures ? We use two-way SSL and generate CSR’s and update expired certificates and we are aware of the basic points. I am not sure wha