Re: Windows Installation of OpenSSL

2012-05-11 Thread John
"Thomas J. Hruska" wrote in message news:4fadc0d5.1090...@shininglightpro.com... > On 5/11/2012 9:00 AM, John wrote: >> Hello. When using the Win32 OpenSSL v1.0.1c 16Mb Installer from here >> http://slproweb.com/products/Win32OpenSSL.html, I am given the option ner >> the very end of the install

Re: Windows Installation of OpenSSL

2012-05-11 Thread Thomas J. Hruska
On 5/11/2012 9:00 AM, John wrote: Hello. When using the Win32 OpenSSL v1.0.1c 16Mb Installer from here http://slproweb.com/products/Win32OpenSSL.html, I am given the option ner the very end of the installation to Copy OpenSSL DLLs to either the Windows system directory or the OpenSSL binaries (c:

RE: Looking for (easy) help.

2012-05-11 Thread scotty42
Ahhh!So, a 15 byte block (or ends with a 15 byte after multiples of 16 bytes) would use a 0x01 in the last position...?And a whole multiple of 16 blocks would have an extra block filled with 0x0f's...?My initial testing now looks like I can get it to work.Thanks!-Scott Weber Original Mes

RE: Looking for (easy) help.

2012-05-11 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of scott...@csweber.com >Sent: Friday, 11 May, 2012 17:09 >I manually padded the input in the C code with spaces. Then I >manually padded the input file with spaces. Now both cleartexts >are exactly 16 bytes long. >The output from the openssl e

RE: Help me find the SSL wrapper/another solution: nonblocking

2012-05-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Marcin Glogowski > Sent: Tuesday, 08 May, 2012 09:18 > Hello, > I have to write non blocking SSL/TLS server based on the > OpenSSL library. > I couldn't find any example/tutorial with this. > Please write me where can I find some client/server

RE: Programming with OpenSSL in different operation systems

2012-05-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Vladimir Belov > Sent: Thursday, 10 May, 2012 16:09 > I want to know what constants(such as OPENSSL_SYS_WIN32 or > OPENSSL_SYS_UNIX) > with #define operator I must define at the beginning of the > program in > different OS: Windows, Linux a

RE: TLS Handshake is Failing. cipher=DHE-RSA-AES128-SHA

2012-05-11 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mr.Rout > Sent: Friday, 11 May, 2012 03:50 > Please help me out in debugging this cipher negotiation issue. > > My client supports OpensslV1.0 and my server supports > Openssl0.9.7. I used > self-signed RSA type certificate on both server & cl

RE: Looking for (easy) help.

2012-05-11 Thread scotty42
Here is an update.  I have 2 code fragments, one that works, AND ONE THAT DOESN'T.The ONLY difference is the content of the 16 bytes of clear text being encoded.  Both are decrpyted with the following command:openssl aes-256-cbc     -in output.bin     -K 31313131313131313131313131313131

RE: Looking for (easy) help.

2012-05-11 Thread scotty42
Nice catch.  but no, sorry.The function AES_set_encrypt_key(key32, 256, &aeskey) contains the key length (32 bytes X 8 bits).I repeated the test from Marek changing the keys and IV to my values, and his demo still works.So I am continuing my side by side test to see what the difference is.  So far

RE: Looking for (easy) help.

2012-05-11 Thread Jeremy Farrell
This is a wild guess, no idea if it's relevant, but the array key32 consists of 33 bytes, 32 containing 0x31 (assuming ASCII) followed by one containing 0x00. Is that how it's meant to be?   Regards,    jjf   From: scott...@csweber.com [mailto:scott...@csweber.com] Sent:

RE: Looking for (easy) help.

2012-05-11 Thread scotty42
Thanks for your reply, but that's not doing it.I manually padded the input in the C code with spaces.  Then I manually padded the input file with spaces.  Now both cleartexts are exactly 16 bytes long.The output from the openssl executable is now 32 bytes...?  Where did it decide to do that?The API

Re: Looking for (easy) help.

2012-05-11 Thread Marek . Marcola
Hello, Parametr "-nosalt" is not used in this case. I have attached my test code, to use this example save file aes_enc.c and execute: # gcc -Wall -pedantic -o aes_enc -lcrypto aes_enc.c # ./aes_enc | od -x 000 e61f b8eb c202 6df8 4cc4 631e 4bf2 dedd 020 # ./aes_enc > enc.bin # opens

Windows Installation of OpenSSL

2012-05-11 Thread John
Hello. When using the Win32 OpenSSL v1.0.1c 16Mb Installer from here http://slproweb.com/products/Win32OpenSSL.html, I am given the option ner the very end of the installation to Copy OpenSSL DLLs to either the Windows system directory or the OpenSSL binaries (c:/OpenSSL/bin) directory. Is the

RE: A Question on Cipher Format.

2012-05-11 Thread Erik Tkal
I'm not sure that answers the question as to significance as opposed to defining the acronyms. TLS_DHE_RSA_WITH_AES_128_CBC_SHA is a cipher suite defined for use with TLS that uses 128-bit AES in CBC mode for the data encryption and SHA-1 for message authentication. The encryption keys are gen

Re: Unable to read DER encoded CRL (but able to read the file in windows) ?

2012-05-11 Thread Balamurugan rajan
Yes i did . then also it give the same error. Even with the d2i_x509 function also i tried (c code ) .It is not able to decode the file. On Fri, May 11, 2012 at 5:22 PM, Mathias Tausig wrote: > Did you specify the "-inform der" option? > > On 05/11/2012 01:35 PM, brajan wrote: > > > > I am gett

RE: FAILED:unable to get local issuer certificate

2012-05-11 Thread Tammany, Curtis
Dr. Henson, I installed the Apache 2.2.22/OpenSSL 1.0.1a bundle and then put OpenSSL 1.0.0i on top of that. That, in conjunction with adding the root cert to the store for those users with 6-layer cert chains, did the trick! All the users can now access the site! This is an area I'm not very s

Looking for (easy) help.

2012-05-11 Thread scotty42
(resent, as I never saw this come through the list server)I am looking for some assistance.  This should be really easy.  But it's not working.  Any quick advice I can get would be appreciated.When I use the API, I get a different cypher text then I get from the command line.And the command line ap

Re: Unable to read DER encoded CRL (but able to read the file in windows) ?

2012-05-11 Thread Mathias Tausig
Did you specify the "-inform der" option? On 05/11/2012 01:35 PM, brajan wrote: > > I am getting the below error message when i am try to READ the CRL content . > > 19104:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong > tag:tasn_dec.c:1294: > 19104:error:0D07803A:asn1 encoding rout

Unable to read DER encoded CRL (but able to read the file in windows) ?

2012-05-11 Thread brajan
I am getting the below error message when i am try to READ the CRL content . 19104:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1294: 19104:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509_ALGOR 19104:error:0D08303A:a

openssl-fips-1.2.3 cross compilation

2012-05-11 Thread Laszlo Zavaleta
Hey all, I'm trying to cross compile openssl-fips-1.2.3 with 'android' target using the following env vars and commands : export HOSTCC="/usr/bin/gcc" export FIPS_SIG="/tmp/incore" export CROSS_COMPILE="${NDKPATH}/toolchains/arm-eabi-4.4.0/prebuilt/darwin-x86/bin/arm-eabi-" export ANDROID_DEV="${

Re: A Question on Cipher Format.

2012-05-11 Thread Matt Caswell (fr...@baggins.org)
TLS = Transport Layer Security DHE = Diffie Hellman Ephemeral RSA = Public Key Cryptography algorithm named after inventors, Rivest, Shamir & Adleman AES_128 = Advanced Encryption Standard using 128bit key CBC = Cipher Block Chaining (a block cipher mode of operation) SHA = Secure Hash Algorithm M

A Question on Cipher Format.

2012-05-11 Thread Mr.Rout
Dear All, What is the significance of each phrase in the below cipher suite ? Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA May be this is a dump question. But i am interested to know each phrase. Best Regards, Siba Shankar Rout -- View this message in context: http://old.nabble.com/A-Ques

Re: Programming with OpenSSL in different operation systems

2012-05-11 Thread Alexander Komyagin
I think that you better start with corresponding INSTALL.* file. It shall give you all the answers you need. Good luck! On Fri, 2012-05-11 at 00:09 +0400, Vladimir Belov wrote: > Hello. > I want to know what constants(such as OPENSSL_SYS_WIN32 or OPENSSL_SYS_UNIX) > with #define operator I must d

TLS Handshake is Failing. cipher=DHE-RSA-AES128-SHA

2012-05-11 Thread Mr.Rout
Hi All, Please help me out in debugging this cipher negotiation issue. My client supports OpensslV1.0 and my server supports Openssl0.9.7. I used self-signed RSA type certificate on both server & client. But my Handshake is failing. My client sends these ciphers in client hello message. Cipher S