use open-ssl to secure DSR protocol in ns2

2012-02-24 Thread Benamar Lydia
hello, I want to know how to use open-ssl in order to secure DSR protocol under ns2. i want specially to use deffie-hellman method. thank you. __ OpenSSL Project http://www.openssl.org User Support M

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread Jeffrey Walton
On Fri, Feb 24, 2012 at 4:08 PM, Jakob Bohm wrote: > On 2/24/2012 2:14 PM, sandeep kiran p wrote: >> >> You mentioned that OpenSSL is holding a "snapshot" lock in rand_win.c. I >> couldn't find anything like that in that file. Can you specifically point me >> to the code that you are referring to?

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread Jakob Bohm
On 2/24/2012 2:14 PM, sandeep kiran p wrote: You mentioned that OpenSSL is holding a "snapshot" lock in rand_win.c. I couldn't find anything like that in that file. Can you specifically point me to the code that you are referring to? I would also like to get an opinion on possible workarounds t

Re: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Jakob Bohm
On 2/24/2012 8:27 PM, Edward Ned Harvey wrote: From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Michael S. Zick You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike, How do you call that a

Re: Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-24 Thread Gatewood_Green
What is your test environment and method? We've tried this in both our embedded OS (minimized LFS style build) and OpenSUSE. Both ways the result is the same. Focusing on the PRNG, We cannot get FIPS_rand_status() to report 1. Tried both on hardware and in VMs. Moved to the 20120222 snapshots.

RE: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Edward Ned Harvey
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Michael S. Zick > > You must be new to mailing lists also. > Start your own thread, they are cheap here, don't hijack another topic. Mike, How do you call that a thread hijack? New subject, new threa

Re: Triple DES ECB question

2012-02-24 Thread burtbick
Johannes Bauer wrote: > > On 24.02.2012 03:51, burtbick wrote: > > > HTH, > Joe > __ > OpenSSL Project http://www.openssl.org > User Support Mailing Listopenssl-users@openssl

Re: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Michael S. Zick
On Fri February 24 2012, Jaquez Jr, Hector L. wrote: > Hello, > I am new to certificates, how to create them, how to import > them etc. You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike > I am looki

Re: Triple DES ECB question

2012-02-24 Thread Johannes Bauer
On 24.02.2012 03:51, burtbick wrote: > So the new questions are: > Is des-ede the proper choice for "Triple DES-ECB" as the target device > specification requires? If not then is there another viable option? You can use 3K3DES and have the same results (with lower performance) if you set K1 = K3

Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Jaquez Jr, Hector L.
Hello, I am new to certificates, how to create them, how to import them etc. I am looking for good training material that I can read over to learn more about this. I can create a CSR file but don't know how to import it using command line or GUI for that matter. We have serve

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread sandeep kiran p
You mentioned that OpenSSL is holding a "snapshot" lock in rand_win.c. I couldn't find anything like that in that file. Can you specifically point me to the code that you are referring to? I would also like to get an opinion on possible workarounds that I can enforce to avoid the deadlock. 1. Can

RE: Can I use an exsisting csr file?

2012-02-24 Thread Edward Ned Harvey
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of jim.armstrong > > openssl version -a returns OpenSSL 0.9.8g - Platform: debian-i386-i686/cmov > > There's an existing csr file on the server. Can I use this csr file or do I > need to generate a new

TLS Fast Start Support

2012-02-24 Thread Ryan Brown
Improving SSL performance, any support for including TLS Fast Start? http://blog.chromium.org/2011/05/ssl-falsestart-performance-results.html https://tools.ietf.org/html/draft-bmoeller-tls-falsestart-00 __ OpenSSL Project

RE: Triple DES ECB question

2012-02-24 Thread burtbick
Thanks, Per the device specification they are saying that they are using Triple DES-ECB, since the keys they are using are 16 bytes I'm assuming that it is 2-key Triple DES but they do not clearly state that in the specifications. I have asked them to confirm that it is 2-key. Here's the comman

Can I use an exsisting csr file?

2012-02-24 Thread jim.armstrong
openssl version -a returns OpenSSL 0.9.8g - Platform: debian-i386-i686/cmov There's an existing csr file on the server. Can I use this csr file or do I need to generate a new one? All the info on the existing file is accurate and it's 2048 bit. So no changes need to be made to it. If I needed

Re: Triple DES ECB question

2012-02-24 Thread burtbick
Jeffrey Walton-3 wrote: > > On Thu, Feb 23, 2012 at 2:12 PM, burtbick wrote: >> >> >> But when I try using the openssl command line tool I wind up with 24 >> bytes >> of cipher text for my encrypted 16 byte key value. >> >> > > It sounds like the device wants a '2-key TripleDES' key, and O