Re: Distinctions between EVP_* functions

2012-05-29 Thread Dr. Stephen Henson
On Tue, May 29, 2012, Naveen Nathan wrote: > Hi, > > I'm trying to understand the distinction between: > > EVP_DigestSign* and EVP_Sign*. I'm trying to understand how openssl > performs HMAC on the command line. It seems to use the EVP_DigestSign > with a key type EVP_PKEY* which stores a symmet

Distinctions between EVP_* functions

2012-05-29 Thread Naveen Nathan
Hi, I'm trying to understand the distinction between: EVP_DigestSign* and EVP_Sign*. I'm trying to understand how openssl performs HMAC on the command line. It seems to use the EVP_DigestSign with a key type EVP_PKEY* which stores a symmetric MAC key. Is EVP_DigestSign* specifically different so

RE: [openssl-dev] RE: Clarification regarding extension supported in OpenSSL certificates.

2012-05-29 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Erwann Abalea >Sent: Tuesday, 29 May, 2012 10:13 >Yes to everything. Minor caveat: OpenSSL supports signatures using SHA256 *with RSA and ECDSA* back to 0.9.8 and I think 0.9.7, but SHA256 (and SHA224) with DSA only since 1.0.0. (As I recall

RE: simply openssl encode c function

2012-05-29 Thread ml
Le lundi 28 mai 2012 à 17:25 -0400, Dave Thompson a écrit : > > From: owner-openssl-us...@openssl.org On Behalf Of ml > > Sent: Saturday, 26 May, 2012 16:18 > > > I try to realize as base64 encoding > > char *base64(char *input, int length) > > { > > BIO *bmem, *b64; > > BUF_MEM *bptr; > > >

Re: Problems with OpenSSl BN

2012-05-29 Thread Matt Caswell (fr...@baggins.org)
On 29/05/12 16:55, chip...@gmx.de wrote: Hi, thank you again for your answer. Now I set for every variable the BN_FLG_CONSTIME Flag, so that I can be sure, that they will need the same time. I measured the time the BN_nnmod operation in the BN_mod_add function needs for the modulo operation a

RE: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-29 Thread Jeremy Farrell
> From: Jakob Bohm [mailto:jb-open...@wisemo.com] > Sent: Tuesday, May 29, 2012 8:34 AM > On 5/27/2012 2:29 AM, Jeremy Farrell wrote: > >> From: Jakob Bohm [mailto:jb-open...@wisemo.com] > >> On 5/25/2012 5:30 PM, Ken Goldman wrote: > >>> On 5/25/2012 3:33 AM, Jakob Bohm wrote: > >>> > ANSI C

Re: UEFI Authenticode Code - is it any good?

2012-05-29 Thread Lee Fisher
I forwarded this to the EFI list, for a response from Intel: http://sourceforge.net/mailarchive/message.php?msg_id=29329799 Original Message Subject: Re: [edk2] Fwd: Re: UEFI Authenticode Code - is it any good? Date: Tue, 29 May 2012 08:47:51 + From: Long, Qin Reply-To: ed

OpenSSL renegotiation problems with TLS

2012-05-29 Thread Chris Long
Hi, I was hoping to get some insight on renegotiation issues I've been having. The program I've been developing is using OpenSSL in C++ and is a small client/server application. But I am writing directly to memory bios and SSL as to use our existing socket server. Everything so far seems to

Re: Problems with OpenSSl BN

2012-05-29 Thread chipler
Hi, thank you again for your answer. Now I set for every variable the BN_FLG_CONSTIME Flag, so that I can be sure, that they will need the same time. I measured the time the BN_nnmod operation in the BN_mod_add function needs for the modulo operation and I see again big differences in the oper

Re: [openssl-dev] RE: Clarification regarding extension supported in OpenSSL certificates.

2012-05-29 Thread Erwann Abalea
Yes to everything. As your question is not about the development of OpenSSL, but instead about its use, it should have been better in the openssl-users mailing list. Le 28/05/2012 15:43, Manas Ranjan Lenka a écrit : Hi, In addition to the below queries we have one more query in our mind. Pl

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-29 Thread Kenneth Goldman
> From: Jakob Bohm > Which version of the ANSI Spec, and where did you get a copy? > > I have to rely on secondary sources and experience using various > implementations that claim conformance. I generally refer to Plauger's "The Standard C Library", where he quotes the spec with commentary an

Re: Problems with root CA - Is it possible to reissue the root certificate without affecting existing clients?

2012-05-29 Thread Jakob Bohm
On 5/28/2012 5:19 PM, Brian Powell wrote: Hello, Last year we deployed a root and intermediary CA's to support a web service - We have now found some issues with the root CA and need to fix them. We have many clients in many organisations which have installed the old root cert - There is curr

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-29 Thread Jakob Bohm
On 5/27/2012 2:29 AM, Jeremy Farrell wrote: From: Jakob Bohm [mailto:jb-open...@wisemo.com] On 5/25/2012 5:30 PM, Ken Goldman wrote: On 5/25/2012 3:33 AM, Jakob Bohm wrote: ANSI C and POSIX free() is NOT required to handle free(NULL) as a NOP. I checked reputable sources (Plauger, Harbison an