RE: Keys for des-ede encryption

2012-10-14 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of naveen >Sent: Saturday, 13 October, 2012 21:59 >I have a question related to openssl. I need to give two keys >k1 and k2 for ede encryption(for des). Now how do I give it in >the command line ? >I see that there is a "pass" parameter and "iv" p

Re: FIPS seed_pid issue

2012-10-14 Thread Kumar Ghanta
Thank you very much for the quick response Stephen. Is it fine if we allow parent and child processes to share the same seed? I just want to know if there are any NIST restrictions. If possible, can you please elaborate on how does openssl takes care automatically after 1.2? On Fri, Oct 12, 2012 a

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread Jeremy Farrell
> From: ml [mailto:m...@smtp.fakessh.eu] > Sent: Sunday, October 14, 2012 11:33 PM > > Le dimanche 14 octobre 2012 à 18:10 -0400, Dave Thompson a écrit : > > > From: owner-openssl-us...@openssl.org On Behalf Of ml > > > Sent: Sunday, 14 October, 2012 17:54 > > > > > i am a little question concernin

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread ml
Le dimanche 14 octobre 2012 à 18:10 -0400, Dave Thompson a écrit : > > From: owner-openssl-us...@openssl.org On Behalf Of ml > > Sent: Sunday, 14 October, 2012 17:54 > > > i am a little question concerning the presence of libssl.dll > > libcrypt.dll into the win32 standard system or OS > > > > in

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of ml > Sent: Sunday, 14 October, 2012 17:54 > i am a little question concerning the presence of libssl.dll > libcrypt.dll into the win32 standard system or OS > > into linux this lib are very standard > its the same when are the poor win32 OS is

RE: Firefox unhappy with my self signed Cert

2012-10-14 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Friday, 12 October, 2012 17:06 >Interesting. While I was playing around with this, I actually >noticed that if I use the -subj option on the CSR, I am not able >to do this. I was able to get it working by adding the common nam

RE: Encryption algorithm

2012-10-14 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Alex Chen >Sent: Friday, 12 October, 2012 21:31 >The 'openssl cipher -v' command shows the following cipher suites: >If both the client and server uses the sample version of openssl >library and they only calls OpenSSL_add_all_algorithms() >t

RE: SSL_connect with pselect failing

2012-10-14 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Sunday, 14 October, 2012 17:36 >I am trying to use SSL_connect. I have bound a socket to my interface, >set up the context, and call SSL_connect(). This is returning a -1, >which I catch, and call SSL_get_error() to fall throu

Re: SSL_connect with pselect failing

2012-10-14 Thread Derek Cole
Nevermind. I didn't realize that I did have the call in there for my socket connect() (which was in another part of the code for non-ssl connections...it is needed for both). I had though SSL_connect took care of that too. On Sun, Oct 14, 2012 at 5:35 PM, Derek Cole wrote: > Hello, > > I am try

win32 exe linked with -lssl -lcrypt

2012-10-14 Thread ml
hello sir and doctor i am a little question concerning the presence of libssl.dll libcrypt.dll into the win32 standard system or OS into linux this lib are very standard its the same when are the poor win32 OS is ready -- gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fake

SSL_connect with pselect failing

2012-10-14 Thread Derek Cole
Hello, I am trying to use SSL_connect. I have bound a socket to my interface, set up the context, and call SSL_connect(). This is returning a -1, which I catch, and call SSL_get_error() to fall through a switch statement. It is retuning a SSL_ERROR_WANT_WRITE So I am trying to use pselect in a wh

Re: top 10 mistakes when using libopenssl?

2012-10-14 Thread Dr. Stephen Henson
On Sat, Oct 13, 2012, Ken Goldman wrote: > On 10/10/2012 8:08 PM, Kyle Hamilton wrote: > >Suggestions from my experience: > > If you include the library, #1 for novices has to be: > > 1 - Using strlen() to get the length of encrypted data. > > I'd add... Forgetting to call OpenSSL_add_all_al

Re: Mac OS X and SSL Client Certitficates [UPDATE]

2012-10-14 Thread Tom Browder
On Fri, Oct 12, 2012 at 8:59 AM, Tom Browder wrote: > I have successfully generated SSL client certs (generated with openssl > 1.0.1c) used by Safari, Firefox, and Chrome on Linux and Windows plus > IE 9 on Windows, but I cannot get successful access with either Safari > or Firefox on Mac OS X. >