RE: Displaying DH parameter size

2013-10-08 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Sean Alexandre > Sent: Tuesday, October 08, 2013 20:08 > I'm writing a client app that uses OpenSSL to connect to an SSL server. I want > to display the number of bits used for the DH parameter set. I've tried > (psuedocode): > SSL *ssl; >

RE: openSSL performance

2013-10-08 Thread Dave Thompson
Aside: this message was pretty garbled, and in richtext which my Outlook won't fix sensibly. I've tried to manually reformat what I can, but it would be easier if you posted plaintext. > From: owner-openssl-us...@openssl.org On Behalf Of laurent.boll...@laposte.net > Sent: Tuesday, October 08, 2

Displaying DH parameter size

2013-10-08 Thread Sean Alexandre
I'm writing a client app that uses OpenSSL to connect to an SSL server. I want to display the number of bits used for the DH parameter set. How do I do this? So far I've found "struct dh_st" and it has (from dh.h): BIGNUM *p;

RE: Implementing msCRLNextPublish extension

2013-10-08 Thread adrien pisarz
Hi, May someone help me or give me a clue ? Regards Adrien From: apis...@hotmail.com To: openssl-users@openssl.org Subject: Implementing msCRLNextPublish extension Date: Fri, 13 Sep 2013 11:24:06 +0200 Hi, A new non-critical extension is available in order to download the Crl before his e

Re: Strange behaviour

2013-10-08 Thread Walter H.
I thought similar, but it becomes more strange; if the webserver uses a certificate that is signed from a CA with built in token, then this needn't be; and in case it is signed from my internediate certificate, this doesn't help ... Greetings, Walter On 07.10.2013 09:39, Mat Arge wrote: Jus

Re: Signature did not match the certificate request

2013-10-08 Thread Viktor Dukhovni
On Tue, Oct 08, 2013 at 06:00:39AM -0700, Rahul Tolani wrote: > I'm signing a CSR that is generated by Windows Phone. > But in that CSR I have a null character in the subject property. You're not signing the CSR, the phone did that, which is why you can't modify it. You're trying to issue a sign

Re: Signature did not match the certificate request

2013-10-08 Thread Walter H.
On 08.10.2013 15:00, Rahul Tolani wrote: Actual Subject Property => subject=/CN=B1C43CD0-1624-5FBB-8E54-34CF17DFD3A1\x00 this is just a bug - the \x00 looks like the terminating \0 ... Required Subject Property => subject=/CN=B1C43CD0-1624-5FBB-8E54-34CF17DFD3A1 Greetings, Walter

Signature did not match the certificate request

2013-10-08 Thread Rahul Tolani
Hi !! I'm signing a CSR that is generated by Windows Phone. But in that CSR I have a null character in the subject property. After changing the subject property and trying to sign the CSR i get an error message "Signature did not match the certificate request" How to get through this ?? Here is

Re: reason behind error message

2013-10-08 Thread Viktor Dukhovni
On Tue, Oct 08, 2013 at 02:52:33PM +0530, Mithun Kumar wrote: > I am getting the following error from openssl. Any inputs where things are > going wrong? > > error:140A4044:SSL routines:SSL_clear:internal error int SSL_clear(SSL *s) { if (s->method == NULL) {

RE: openSSL performance

2013-10-08 Thread Salz, Rich
Ø (sorry for duplicating the thread, I did'nt receive any answer in my mailbox as I expected, I only saw them through the mail archive...?) It’s common (and many would say, the correct behavior) for mailing list replies to go to the mailing list. Ø I've started with a 1K key and later on swi

reason behind error message

2013-10-08 Thread Mithun Kumar
i am getting the following error from openssl. Any inputs where things are going wrong? error:140A4044:SSL routines:SSL_clear:internal error -Thanks in advance.

openSSL performance

2013-10-08 Thread laurent . bollini
>RSA key size only affects handshake, and should be costly client side only if >>using client-auth; are you?No; as client and server code is under my >responsability, I chosed to also asked for client-auth. Still, I don't see how >this could be the reason for my slowdown given the overall data

openSSL performance

2013-10-08 Thread laurent . bollini
(sorry for duplicating the thread, I did'nt receive any answer in my mailbox as I expected, I only saw them through the mail archive...?) >Are you sure that the key exchange is not a factor? Have you measured SSL >>setup times compared to post-setup transfer times?>4K RSA is computationally >exp