Re: Configure OpenSSL to skip SSL1 & SSL2?

2012-06-12 Thread Jeffrey Walton
On Tue, Jun 12, 2012 at 3:04 PM, Garrison, Jim (ETW) wrote: >> -Original Message- >> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- >> us...@openssl.org] On Behalf Of Garrison, Jim (ETW) >> Sent: Tuesday, June 12, 2012 10:41 AM >> To: openssl-users@openssl.org >> Subject: RE:

RE: Configure OpenSSL to skip SSL1 & SSL2?

2012-06-12 Thread Garrison, Jim (ETW)
> -Original Message- > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Garrison, Jim (ETW) > Sent: Tuesday, June 12, 2012 10:41 AM > To: openssl-users@openssl.org > Subject: RE: Configure OpenSSL to skip SSL1 & SSL2? > > > -Original Messag

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread exvance
That was it! Thanks for your help. I just uninstalled the libopenssl package and installed the correct version. It now works. Thanks! Erik Tkal wrote: > > In fact a quick compare of x509.h shows that the X509_sign_ctx entry point > is new in OpenSSL 1.0.1. > > > ..

RE: Configure OpenSSL to skip SSL1 & SSL2?

2012-06-12 Thread Garrison, Jim (ETW)
> -Original Message- > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Jeffrey Walton > Sent: Monday, June 11, 2012 8:38 PM > To: openssl-users@openssl.org > Subject: Re: Configure OpenSSL to skip SSL1 & SSL2? > > On Mon, Jun 11, 2012 at 4:32

About signing RSA-SHA1(RSASSA-PKCS1-v1_5)

2012-06-12 Thread Neko
I'm trying to use OpenSSL to do RSA-SHA1(RSASSA-PKCS1-v1_5), which is used in xml signature. But the result doesn't match with the one comes from xmlsec. How I did it: RSA_sign(NID_sha1, *digestvalue*, 20, signvalue, siglen, *rsa*); where *digestvalue* is the direct output of SHA1() without encod

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread Erik Tkal
In fact a quick compare of x509.h shows that the X509_sign_ctx entry point is new in OpenSSL 1.0.1. Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Be

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread Erik Tkal
Hi Eric, So it looks like your /usr/bin/openssl binary is built from OpenSSL 1.0.1, but the shared libraries in /usr/lib are from 1.0.0? I'm not too familiar with how linux library resolution works, but don't you need the 1.0.1 libs copied to the /usr/lib folder? I don't think 1.0.1 and 1.0.0

Re: symmetric key generation..

2012-06-12 Thread Michel
Hi Mr Newbie, Joshua is right when saying you should be carefull using tech's you might not fully understand ( just like me, ;-) ) Perhaps RAND_bytes() is enough for your needs ? http://www.openssl.org/docs/crypto/RAND_bytes.html I am guessing it could be profitable for you to read : http://c

Re: symmetric key generation..

2012-06-12 Thread Joshua Bowman
On 6/10/2012 11:18 PM, vinayak.T.K wrote: > presently i m working on the project which includes the generation of > symmetric key from the public keyi m just a begginerso can u please > help me out. > > Victor Duchovni wrote: >> On Wed, Nov 21, 2007 at 04:21:18AM -0800, Ramkumar Ganapathy

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread exvance
Hi Erik, Here is the output: ~~# which openssl /usr/bin/openssl root@ph:~# openssl version OpenSSL 1.0.1c 10 May 2012 (Library: OpenSSL 1.0.0e 6 Sep 2011) Thanks for any info you can provide! Eric Erik Tkal wrote: > > What's the output of 'which openssl' and 'openssl version'? > > >

Re: symmetric key generation..

2012-06-12 Thread vinayak.T.K
presently i m working on the project which includes the generation of symmetric key from the public keyi m just a begginerso can u please help me out. Victor Duchovni wrote: > > On Wed, Nov 21, 2007 at 04:21:18AM -0800, Ramkumar Ganapathy wrote: > >> >> I am trying to use the OpenSSL

Re: SSLv3 handshake timeouts over slow communication

2012-06-12 Thread Jayant Dusane
SO_RCVTIMEO and SO_SNDTIMEO didnt work! and also nothing related to certifacte, firewall, authentication. because it works with 0.6 ms latency and stopped working in ~100ms latency network. logs are : SSL_connect:error in SSLv2/v3 write client hello B [512]SSL_connect:error