RE: Selecting certificate to be presented by a given endpoint in establishing an ssl connection

> From: owner-openssl-us...@openssl.org On Behalf Of Jakob Bohm > Sent: Wednesday, 18 April, 2012 07:57 > On 4/17/2012 7:00 PM, Nou Dadoun wrote: > > Quick question regarding certificate usage in an ssl > connection; you can associate a number of certificates with a > server endpoint - is there

RE: a question about openssl sessions

> From: owner-openssl-us...@openssl.org On Behalf Of Stéphane Charette > Sent: Sunday, 15 April, 2012 20:31 > I'm using Openssl to talk to a server that expects to re-use ssl > sessions when a client needs to open many SSL connections. I have > the same code working on Linux a

Re: d2i_PUBKEY_bio() affected by ASN1 BIO vulnerability (CVE-2012-2110)?

On Thu, Apr 19, 2012, Claus Assmann wrote: > As I'm having some problems understanding the ASN.1 parsing code, > I would like to ask here for feedback about the bug. DKIM-Filter > (OpenDKIM) uses d2i_PUBKEY_bio() with a key (input) that is at most > 1KB long. > > According to the advisory: > >

d2i_PUBKEY_bio() affected by ASN1 BIO vulnerability (CVE-2012-2110)?

As I'm having some problems understanding the ASN.1 parsing code, I would like to ask here for feedback about the bug. DKIM-Filter (OpenDKIM) uses d2i_PUBKEY_bio() with a key (input) that is at most 1KB long. According to the advisory: > Any application which uses BIO or FILE based functions to

TOFB-I mode of operation

Hello, I have to decrypt a stream of data encrypted with TDES and TOFB-I mode of operation. Which are the differences between TOFB and TOFB-I modes of operation? Are they somewhat compatible, so that I can use TOFB (implemented in OpenSSL)? Thanks and regards, Luca

RE: Difference in Private Key?

Thank you Steve. I have used the rsa tool to convert the PKCS#8 format key to RSA format and then the embedded system was fine with. Best regards, Daniel Doron Customer Support & FAE Manager Connect One 20 Atir Yeda st. Kfar Saba 44643 Israel Phone: 972-9-7660456 x138 Mobile: 972-54-4959659 __

RE: Difference in Private Key?

Thanks Richard. That helps the choke part. Now I can investigate the actual error in our system. Best regards, Daniel Doron Customer Support & FAE Manager Connect One 20 Atir Yeda st. Kfar Saba 44643 Israel Phone: 972-9-7660456 x138 Mobile: 972-54-4959659 __

Re: Difference in Private Key?

On Thu, Apr 19, 2012, Daniel Doron wrote: > > I have noticed the following command sequence generates Private Key files > with different Header. Is there a reason for this?? You will also notice > that the character count is different. > > The first private key cause our embedded system (not Lin

Re: Difference in Private Key?

Am 19.04.2012 14:05, schrieb Daniel Doron: Hi, I have noticed the following command sequence generates Private Key files with different _Header_. Is there a reason for this?? You will A quick look into the source gave me no strong hint whether this is intended, is a bug or is sloppiness not q

OpenSSL Security Advisory

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL Security Advisory [19 Apr 2012] === ASN1 BIO vulnerability (CVE-2012-2110) === A potentially exploitable vulnerability has been discovered in the OpenSSL function asn1_d2

Difference in Private Key?

Hi, I have noticed the following command sequence generates Private Key files with different Header. Is there a reason for this?? You will also notice that the character count is different. The first private key cause our embedded system (not Linux, proprietary) to choke while the second one w