RE: pb in compil

2001-04-30 Thread Bill Browning
try adding -lnsl and -lsocket to your link line. Bill -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, April 30, 2001 9:22 AM To: [EMAIL PROTECTED] Subject: pb in compil Hi, Under Solaris 2.6, with gcc 2.95, i have the following error during the compi

RE: How can I encrypt public key in handshake?

2001-03-20 Thread Bill Browning
Yes I must agree on re-read I made two fatal mistakes. One should definitely not pass encrypted tokens to the client and one should not design an authentication scheme in the time takes to type out a message. Proper approach would have been to replace steps 4 and 5 with this: 4. Send client a tok

RE: How can I encrypt public key in handshake?

2001-03-20 Thread Bill Browning
verification of the client by the server. Just my random thoughts... Bill Browning -Original Message- From: corky peavy [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 20, 2001 11:18 AM To: [EMAIL PROTECTED] Subject: How can I encrypt public key in handshake? I am building a system w

RE: how to understand the error code?

2001-03-20 Thread Bill Browning
Did you do an SSL_load_error_strings( ); anywhere in your code? If not give that a try. Bill Browning -Original Message- From: Jason Wang [mailto:[EMAIL PROTECTED]] Sent: Friday, March 16, 2001 10:11 AM To: [EMAIL PROTECTED] Subject: how to understand the error code? Please help

RE: Problems with obtaining the client certificate.

2001-03-14 Thread Bill Browning
Did you do an SSL_CTX_set_verify( ctx, SSL_VERIFY_PEER, verify_callback ); on your server side? If not then I don't think that the server side requested a certificate from the client. In which case SSL_get_peer_certificate(); would be returning a null certificate. Bill -Original Message-

Algorithm names from acronyms.

2001-03-14 Thread Bill Browning
Hello everyone, I've compiled out several algorithms that I do not wish to use in openssl (i.e. NO_IDEA, NO_DSA, etc). After running openssl ciphers I've noticed several ciphers that I have no idea what their real names are, or how to compile with out them. Can anyone tell me what EDH sta

RE: TLS details

2001-03-14 Thread Bill Browning
This should really have been posted only to openssl-users. There are several examples of the handshake details in Eric Rescorla's "SSL and TLS Designing and Building Secure Systems" (ISBN: 0-201-61598-3) -Original Message- From: ET Tan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 13,

RE: Message status - undeliverable

2001-02-09 Thread Bill Browning
It looks like once again we may need to ask Novell to do a little fixing. I assume this is still a problem on their end? Can the list administrator confirm this before I rant at this fellow? Thanks, Bill Browning Novell, Inc. (NOVELL-DOM) 122 East 1700 South Provo, UT 84606 US

RE: Openssl on Win32 (help!)

2001-01-26 Thread Bill Browning
Included below is Microsoft's man page regarding that link error, it sounds like you may be mixing 32 and 16 bit libraries or actually have a corrupt .lib file. Did the *test.exe executables (i.e.. shatest.exe ) build correctly? Do your typically run VCVARS32.bat before running nmake? Are you usin

RE: DOCs / detecting Error conditions

2001-01-10 Thread Bill Browning
Try looking at the ERR_ functions such as: int ERR_peek_error() int ERR_get_error() and my favorite, ERR_error_string(int, char*) Bill -Original Message- From: Dave Boardman [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 10, 2001 2:48 PM To: [EMAIL PROTECTED] Subject: DOCs / detecti

SSL23_Get_Server_Hello - Unknown protocol

2000-09-14 Thread Bill Browning
known protocol I do not get it on the NT side. So, my questions are: What exactly should the packet from the server look like? What is a good way to peer at these packets? Have I made a simple mistake somewhere, such as compilation of the library under Solaris, etc.? Thanks for your thoughts,

Adding Entropy on the fly.

2000-09-12 Thread Bill Browning
is collected from several sources (ie, mouse moves, time between key presses etc.) 3. I take all this data and call RAND_seed with it. I am going to improve the "randomness" of numbers from the PRNG by doing this? Or am I just wasting clock cycles? Thanks, Bil

memcpy failure in do_ssl3_write

2000-09-05 Thread Bill Browning
ase let me know. Is there an easy way for me to enable more detailed debugging in the SSL library? Any help would be appreciated. Bill Browning CODE SNIP Class variables: Class CSSLSocket{ *** LOTS OF STUFF SNIPPED OUT *** static SSL_CTX *m_Ssl_ctx; SSL *m_