Difference Between 1.0.0 and 1.0.1

2013-08-20 Thread Harshvir Sidhu
Hi, I was curious to learn about the differences between 1.0.0 and 1.0.1. I have server application which works fine with 1.0.0 but fails with 1.0.1? Thanks.

Error in Handshake

2013-08-20 Thread Harshvir Sidhu
I have downloaded OpenSSL 1.0.1c. My application is a Server Application running on Windows XP compiled using VS2008. When i used SSL_Accept function then it fails. SSL_get_error gives an value of 5. ERR_get_error gives a string error::lib(0):func(0):reason(0) I have called SSL_load_error_s

FIPS with CAPI Engine

2012-06-06 Thread Harshvir Sidhu
Hi, I was having a quesiton that while using OpenSSL on a Windows Mobile Device. If i am using CAPI engine, then is there a way to make sure that while doing handshake that only FIPS compliant ciphers are shared. Thanks. // Harshvir

Installing Certificates

2012-01-19 Thread Harshvir Sidhu
Hi, I know the problem is not directly related to OpenSSL, but i thought someone might know it. Also if someone know some method that i can use using OpenSSL, please let me know that, I am open to use that also. I am trying to programatically install certificate to Windows Certificate Store, for t

Re: Is certificate a CA or Client Certificate

2011-09-29 Thread Harshvir Sidhu
se > End use (server / person / company / etc.) > > > > > On 9/29/2011 3:39 PM, Harshvir Sidhu wrote: > >> >> Hey, >> I tried using this method following is the flow. >> >> IF CA: TRUE >>If Self Signed >>ROOT >>else &

Re: Is certificate a CA or Client Certificate

2011-09-29 Thread Harshvir Sidhu
different that i need to do for p7b file format? Thanks. // Harshvir On Fri, Sep 16, 2011 at 2:33 PM, Jakob Bohm wrote: > On 9/16/2011 9:02 PM, Harshvir Sidhu wrote: > >> I already tried this command, but its not giving any information showing >> wheter its a root certificate or a

Re: Is certificate a CA or Client Certificate

2011-09-16 Thread Harshvir Sidhu
I already tried this command, but its not giving any information showing wheter its a root certificate or a client certificate. - Harshvir On Fri, Sep 16, 2011 at 1:53 PM, Jakob Bohm wrote: > On 9/16/2011 7:58 PM, Harshvir Sidhu wrote: > >> Hi, >> In openssl is there some me

Is certificate a CA or Client Certificate

2011-09-16 Thread Harshvir Sidhu
Hi, In openssl is there some method using which i can find whether the cerficiate in a file a Client Certificate or a CA/Root Certificate? - H S

SSL_load_error_strings() crash with access reading location.

2011-08-09 Thread Harshvir Sidhu
I am having a WinXP application to which i have linked SSL statically. Function call SSL_load_error_strings is failing with a crash and from the dump its giving error access violation reading location. MyApp.exe!_lh_doall_arg() + 0x3af bytes MyApp.exe!_lh_insert() + 0x4d bytes MyApp.exe!_E

Re: Applink issues

2011-08-04 Thread Harshvir Sidhu
Seems like you are using DLLs for OpenSSL. Try including applink.c in your application. On Thu, Aug 4, 2011 at 1:19 PM, Colin Rice wrote: > Hello, > > We are currently using OpenSSL for a network communications program. > However we have encountered an obscure bug on windows where we are unable

Re: State Machine with Managed C++

2011-07-01 Thread Harshvir Sidhu
1:03 PM, Gayathri Sundar wrote: > Did you implement fd timeouts and appropriate cleanups after some > expiration? It's impossible for non blocking sockets to hang..so I am > assuming ur having a lot of unused fds on ur poll table. > > On Friday, July 1, 2011, Harshvir

State Machine with Managed C++

2011-07-01 Thread Harshvir Sidhu
Hi, I have implemented the state machine in my managed C++ application. Everything works fine for sometime, but after a while Asynchronous socket call beginreceive hangs, it never come out of that. I do not see any relation to this with SSL but this happens only when i am calling SSL routines in

How much memory leaks for BIO, SSL and SSL_CTX

2011-06-28 Thread Harshvir Sidhu
Hi, Its a very vague question, it will be great if someone can answer? How much memory leak per connection if we do not free BIO, SSL and SSL_CTX. Thanks. // Harshvir

Re: SSL Communication using BIO

2011-05-25 Thread Harshvir Sidhu
y tls and not sslv3 etc. > > thanks > --Gayathri > > On Wed, May 25, 2011 at 10:12 AM, Harshvir Sidhu wrote: > >> Thanks Gayatri. >> This is what i am doing, but i dont have any buffer to send initially, my >> data transfer start from server side. >> What i was

Re: SSL Communication using BIO

2011-05-25 Thread Harshvir Sidhu
Just to clarify my last message, I am using state machine, i called SSL_connect after creating ctx and ssl objs, 2 mem bios and set them to ssl, and then read data from bio, and sent that to server and that gave me error. On Wed, May 25, 2011 at 10:12 AM, Harshvir Sidhu wrote: > Thanks Gaya

Re: SSL Communication using BIO

2011-05-25 Thread Harshvir Sidhu
> E. Initialize ur state machine for ssl connect pending > F. Take the buffer to be sent, copy it to the memory write bio, > encrypt it using ssl connect, then do a tcp send > G. While still connect pending, do tcp read, copy to read bio, call > ssl connect to decrypt. > > Th

Re: SSL Communication using BIO

2011-05-25 Thread Harshvir Sidhu
Hi, I am trying to implement State Machine based on the demo application, that is a server code. Like i am writting the client side. So when i try to do handshake, by calling SSL_connect, which i have used memory bios, after that i check for data available, and then i read data and send to

Re: SSL Communication using BIO

2011-05-23 Thread Harshvir Sidhu
I have discussed that with my team, we only have to use OpenSSL, SSAPI has been ruled out for our work. // Harshvir On Mon, May 23, 2011 at 3:56 PM, John R Pierce wrote: > On 05/23/11 1:59 AM, Harshvir Sidhu wrote: > >> So are you suggesting that i change the approach in

Re: SSL Communication using BIO

2011-05-23 Thread Harshvir Sidhu
Anyone any comments on this. Is openssl appropriate choice for my case? // Harshvir On Mon, May 23, 2011 at 3:59 AM, Harshvir Sidhu wrote: > David, >So are you suggesting that i change the approach in my Code. My > application is for Windows and in Managed C++. In that i am using

Re: SSL Communication using BIO

2011-05-23 Thread Harshvir Sidhu
assumption is that data was already read from socket, when callback was called. Another thing i would like to mention is I am using Sockets Managed Class, not the native sockets. // Harshvir On Sun, May 22, 2011 at 10:06 PM, David Schwartz wrote: > On 5/22/2011 5:10 PM, Harshvir Sidhu wr

Re: SSL Communication using BIO

2011-05-22 Thread Harshvir Sidhu
:21 PM, G S wrote: > On Sun, May 22, 2011 at 5:10 PM, Harshvir Sidhu wrote: > >>Can someone point me to some example code for this in which BIO is used >> to encrypt and decrypt data and then using normal sockets for send/receive? >> I am not able to find anything in ope

SSL Communication using BIO

2011-05-22 Thread Harshvir Sidhu
Hi, Previously I have used SSL_XXX functions for performing SSL operations. Now i have am working on an application which is written in Managed C++ using callback functions(BeginReceive and EndReceive), and SSL_Read function is not working for that. So i tried using BIO_ functions to create a bi

Re: Multiple connection from 1 client

2011-05-10 Thread Harshvir Sidhu
rk. If you have interest let me know your rates and real > email and so forth. > > > > Thanks, Eric > > > > > > At 08:33 PM 5/6/2011, you wrote: > > > > Harsh., > > > > If u have any specific doubts in writing this asynchronous state > >

Re: Multiple connection from 1 client

2011-05-09 Thread Harshvir Sidhu
d can spend some time on this. > > Thanks > --Gayathri > > > On Friday, May 6, 2011, Harshvir Sidhu wrote: > > Thanks, I will give this a try. > > // Harshvir > > > > On Fri, May 6, 2011 at 6:44 PM, Eric S. Eberhard > wrote: > > Change the socke

Re: Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
Ds, unless and until one client is >> finished with its processing the other client will not be able to >> communicate with the server as the previous fd is blocked. The server is >> waiting on the 1st client to finish. When you have 3 ports and 3 clients >> then ofcourse it

Re: Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
and 3 clients > then ofcourse it will work. > > thanks > --Gayathri > > > On Fri, May 6, 2011 at 5:50 PM, Harshvir Sidhu wrote: > >> Gayatri, >> My server code is single threaded and i am using blocking sockets, i am >> using fd_set and select to wait for

Re: Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
l or check for FIONBIO flag. > > Thanks > --Gayathri > > > On Fri, May 6, 2011 at 5:29 PM, Harshvir Sidhu wrote: > >> Well i think this link is for my question. >> I have already done 1-5 from the Before you ask list. >> Number 6, i dont know anyone who use openssl. >

Re: Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
apologize for my understanding. On Fri, May 6, 2011 at 5:18 PM, Jeremy Farrell wrote: > > > *From:* Harshvir Sidhu > > Hi, > >I have a server application, which accepts normal sockets and ssl socket > connections. I am trying to make 3 connections to server from 1 c

Re: Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
My code is all jumbled up, its a big big code. I dont think i can share the code. If there is some particular call that you want to see, please let me know i will share the function call or block of calls. Thanks. On Fri, May 6, 2011 at 2:22 PM, derleader mail wrote: > Hi, > >I have a ser

Multiple connection from 1 client

2011-05-06 Thread Harshvir Sidhu
Hi, I have a server application, which accepts normal sockets and ssl socket connections. I am trying to make 3 connections to server from 1 client machine, on same server port. When i connect on normal sockets then it works with any number of connections. When i tried to connect SSL then

Re: SSL_shutdown & closesocket

2011-05-03 Thread Harshvir Sidhu
Which code you want, my application is very big? Just the code to call, SSL_shutdown from client side is pasted in this. http://pastebin.com/7P70aNWU On Tue, May 3, 2011 at 12:35 PM, derleader mail wrote: > Hi, >I am using Blocking sockets for my applicaiton. The server i have accept >

SSL_shutdown & closesocket

2011-05-03 Thread Harshvir Sidhu
Hi, I am using Blocking sockets for my applicaiton. The server i have accept SSL and non SSL connections, from the client side when i connect with SSL then on closesocket i dont get a notification of client closed, while for non SSL i get notification. Is this some desired behavior or i am missi

Re: OpenSSL SSL_Accept Error

2011-04-13 Thread Harshvir Sidhu
ssl-us...@openssl.org On Behalf Of Harshvir Sidhu > > Sent: Tuesday, 12 April, 2011 15:13 > > > Just to add a note to my last question, > > I tried to use openssl.exe s_client -connect IP:PORT > > and it gives the following error message in that. > (r

Re: OpenSSL SSL_Accept Error

2011-04-12 Thread Harshvir Sidhu
at 10:08 AM, Harshvir Sidhu wrote: > Hi, >I am trying to write the server side code using OpenSSL. >I am getting the following error on SSL_Accept. >error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad > record mac > >I tried to google on this,

OpenSSL SSL_Accept Error

2011-04-12 Thread Harshvir Sidhu
Hi, I am trying to write the server side code using OpenSSL. I am getting the following error on SSL_Accept. error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac I tried to google on this, everywhere they were mentioning that there was some build error, which

Re: Certificate Access Question

2011-03-09 Thread Harshvir Sidhu
ate (service launcher UserA), you can save certificate for > LocalMachine but your service must > > use local machine store to retrieve certificate and not “my” (personal) > store. > > > > *Da:* owner-openssl-us...@openssl.org [mailto: > owner-openssl-us...@openssl.org] *

Re: Certificate Access Question

2011-03-08 Thread Harshvir Sidhu
for me. > > > *On Tue 08/03/11 2:20 PM , Harshvir Sidhu hvssi...@gmail.com sent: > * > > Hi, >I dont think this question is related to openssl, but just checking if > someone has done something like this. >I have a service that runs under UserA, and my desktop user

Certificate Access Question

2011-03-08 Thread Harshvir Sidhu
Hi, I dont think this question is related to openssl, but just checking if someone has done something like this. I have a service that runs under UserA, and my desktop user is UserB. When I install certificates using UserB, then i am not able to access them in UserA, for the obvious reason

Re: Error OPENSSL_Uplink(006E9000,08): from Windows Service

2011-02-16 Thread Harshvir Sidhu
I think this solved my problem. http://www.openssl.org/support/faq.html#PROG2 On Wed, Feb 16, 2011 at 12:43 PM, Harshvir Sidhu wrote: > Hi, > I am trying to use OpenSSL in a Windows Service using CAPI to read > Certificates and Pvt Key from Windows Certificate Store. But its

Error OPENSSL_Uplink(006E9000,08): from Windows Service

2011-02-16 Thread Harshvir Sidhu
Hi, I am trying to use OpenSSL in a Windows Service using CAPI to read Certificates and Pvt Key from Windows Certificate Store. But its giving me following error. OPENSSL_Uplink(006E9000,08): no OPENSSL_Applink The same code runs as Desktop Application, but wh

OpenSSL with Managed C++

2011-01-31 Thread Harshvir Sidhu
Hi, Can we use OpenSSL lib with Managed C++? Thanks. // Harshvir

Re: CAPI Engine for Win CE

2011-01-07 Thread Harshvir Sidhu
ing the "standard" short name without A neither W). > > Best regards, > > Pierre > > Le 07/01/2011 05:25, Harshvir Sidhu a écrit : > > Hi Pierre, > No I will need OpenSSL, as i am using OpenSSL for doing all the work I > need. > OpenSSL code 1.0.0a is calling the

Re: CAPI Engine for Win CE

2011-01-06 Thread Harshvir Sidhu
use the name ending with nothing: "CryptSignHash", > and adjust your compile flags to activate unicode for evc compiler. > > Of course you have to use the MS evc compiler 420 to do all this stuff. > > Yours sincerely, > Pierre > > > Le 06/01/2011 13:43, Harshvir Sidhu a é

Re: CAPI Engine for Win CE

2011-01-06 Thread Harshvir Sidhu
; > Harshvir : please find useful information and pre-compiled openssl for WCE > here : > http://delaage.pierre.free.fr > > Yours sincerely, > Pierre Delaage > > Le 05/01/2011 23:44, Jeffrey Walton a écrit : > >> On Wed, Jan 5, 2011 at 12:45 PM, Harshvir Sidhu >>

CAPI Engine for Win CE

2011-01-05 Thread Harshvir Sidhu
Hi, Is the CAPI engine from OpenSSL supported on WinCE? // Harshvir

Re: Private Key from Windows Cert Store

2011-01-03 Thread Harshvir Sidhu
Fili, can you please share the snippet for this, I am still not able to get this to work. It keep on giving error. On Wed, Dec 8, 2010 at 9:57 AM, Fili, Tom wrote: > Ok, I look to have got it working. > > Using SSL_CTX_set_default_verify_paths after registering the engine > worked as desired. >

Re: Private Key from Windows Cert Store

2010-12-08 Thread Harshvir Sidhu
I am using the same method, i am not able to load private key. On Fri, Dec 3, 2010 at 2:47 PM, Fili, Tom wrote: > Ok, I got it loading. Thanks. > > I'm still have an issue, which would stem from my lack of understanding > of OpenSSL. This seems to succeed in giving me the private key. > > ENGINE

Re: Private Key from Windows Cert Store

2010-11-30 Thread Harshvir Sidhu
Before you can use Engine_by_id, you need to call. ENGINE_load_builtin_engines(); I am also not able to use Private Key from Cert Store. Let me know incase you are able to do that. On Tue, Nov 30, 2010 at 9:16 AM, Fili, Tom wrote: > Thanks, but I was more looking for docs on the interop of Ope

Not able to load CAPI Engine

2010-10-05 Thread Harshvir Sidhu
Hi All, I am trying to load capi engine, Here the the code snippet that i am trying to use. void InitEngine() { ENGINE *e = NULL; int ret = 0; const char *engine_id = "capi"; ENGINE_load_builtin_engines(); ENGINE_register_all_complete(); e = ENGINE_by_id(engine_id); if(!e) re

Re: Just Encryption Using Openssl

2010-08-24 Thread Harshvir Sidhu
e) > BF_cfb64_encrypt(data, out, data_len, &bfkey, ivec, &num, enc); > > memcpy(data, out, data_len); > free(out); > } > > // bob is now free to send the ecnrypted key back to alice > > Note: you should also look at the open_ssl api. I found this very help

Re: Getting info from SSL_CTX

2010-08-19 Thread Harshvir Sidhu
is > a TLS equivalent function called tls1_PRF() found int ssl/t1_enc.c at line > 230. This one takes a lot more parameters, but does not require the SSL > structure like the first one does. I hope that this helps, and please let > me know if you find anything else, or successfully generate t

Getting info from SSL_CTX

2010-08-19 Thread Harshvir Sidhu
Hi, I am trying to get info from SSL_CTX created through TCP connection, so that i can use that to encrypt/decrypt data and send through UDP. I am trying to authenticate and share keys using SSL_Connect handshake method, and then later extracting information from that CTX and encrypt data.

Re: Just Encryption Using Openssl

2010-07-21 Thread Harshvir Sidhu
to the URL for the same. Thanks. // Harshvir On Wed, Jul 21, 2010 at 10:38 AM, Jakob Bohm wrote: > On 21-07-2010 16:02, Harshvir Sidhu wrote: > >> Hi All, >> I am trying to use encryption over Client/Server machines. My >> requirement is that i have to use winsock U

Re: Just Encryption Using Openssl

2010-07-21 Thread Harshvir Sidhu
ncrypt(data, out, data_len, &bfkey, ivec, &num, enc); > > memcpy(data, out, data_len); > free(out); > } > > // bob is now free to send the ecnrypted key back to alice > > Note: you should also look at the open_ssl api. I found this very helpful. > > Che

Re: Just Encryption Using Openssl

2010-07-21 Thread Harshvir Sidhu
ly naive) example... > > Cheers, > Ben. > > > On 21 July 2010 15:02, Harshvir Sidhu wrote: > >> Hi All, >> I am trying to use encryption over Client/Server machines. My >> requirement is that i have to use winsock UDP functions to send and receive >&g

Just Encryption Using Openssl

2010-07-21 Thread Harshvir Sidhu
Hi All, I am trying to use encryption over Client/Server machines. My requirement is that i have to use winsock UDP functions to send and receive data. Is there some mechanism to perform key and cipher exchange in this case, like normally SSL_Connect will do this, but in my case i cannot use th

Re: Windows Certificate Store Private Key

2010-06-24 Thread Harshvir Sidhu
Hey thanks all for the reply. Stephen: Yes i have to do client authentication, Is there some sample available that demonstrates how can i use capi engine for the same? Thanks. // Harshvir On Thu, Jun 24, 2010 at 7:29 AM, Dr. Stephen Henson wrote: > On Wed, Jun 23, 2010, Harshvir Sidhu wr

Windows Certificate Store Private Key

2010-06-23 Thread Harshvir Sidhu
Hi All, I am trying to read Certificates and Private Key from Windows Certificate Store and then using them in OpenSSL. I am able to read Certificates but i am having trouble with reading Private Key. Have anyone done this before, any pointers will be great. Thanks. // Harshvir

Re: Missing Headers

2010-06-18 Thread Harshvir Sidhu
I have already tried that. The source code looks different for putty and openssh. so i guess, putty is not making use of openssh, they have done a separate implementation. On Thu, Jun 17, 2010 at 6:07 PM, Michael S. Zick wrote: > On Thu June 17 2010, Harshvir Sidhu wrote: > > Thanks, o

Re: OpenSSL 1.0.0a Build Error

2010-06-17 Thread Harshvir Sidhu
g the correct devkit installed and headers > @included for that (chances are high you need to download that one at the > microsoft site and install it on your box), or see what must be edited in > dso_win32.c to make it build without the above error and warning for your CE > < 3.0 setup. >

OpenSSL 1.0.0a Build Error

2010-06-17 Thread Harshvir Sidhu
Hey, I was trying to build the openssl library with the Visual Studio 2005 configurations for CE. I am getting bunch of errors, first it gave error for standart C string functions. I defined the macro _CRT_SECURE_NO_WARNINGS and it worked for that. Then i needed to define macro OPENSSL_SYSNAME_

Re: Missing Headers

2010-06-17 Thread Harshvir Sidhu
tor ed.jam...@us.army.mil 703-588-8736-voice > 703-693-7507-fax > > ITA BSS/TCS > > 1777 North Kent Street, Suite 4100, Arlington, VA 22209 > > > > > > > > *From:* owner-openssl-us...@openssl.org [mailto: > owner-openssl-us...@openssl.org] *On Behalf

Re: Missing Headers

2010-06-17 Thread Harshvir Sidhu
ssl-us...@openssl.org] *On Behalf Of *Harshvir Sidhu > *Sent:* Thursday, June 17, 2010 12:01 PM > *To:* openssl-users@openssl.org > *Subject:* Missing Headers > > I just downloaded the openssl-1.0.0a, and all the header files in > include\openssl are empty. > I checked couple of

Missing Headers

2010-06-17 Thread Harshvir Sidhu
I just downloaded the openssl-1.0.0a, and all the header files in include\openssl are empty. I checked couple of old version also like 0.9.8o, n, m, all of them have this folder empty. Is there something i need to do get them? // Harshvir