OpenSSL mail server issues

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! Due to a misunderstanding within the OpenSSL team we ran into trouble with our mail and mailing service still hosted at the old server (hopefully I will be able to complete the migration to the new server over the Christmas break). Caused by a so

[winlinke...@gmail.com: update openssl error]

Forwarded to openssl-users for discussion. - Forwarded message from gate Bill - Date: Tue, 6 Aug 2013 17:22:54 +0800 From: gate Bill To: openssl-b...@openssl.org Subject: update openssl error hello my linux env: centos 6.4 x64 gcc 4.8.1 2.6.32-358.6.2.el6.x86

OpenSSL server downtime

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! The new server currently hosting the www, git, rt, ftp, and cvs services is going to be moved within the installation of our hoster. As a consequence, the system will be assigned a new IP address. Old: 178.16.220.54 New: 185.9.166.106 The move

Re: Dead indirect link to http://www.openssl.org in lucky 13 security advisory

On 02/22/2013 04:13 PM, Jakob Bohm wrote: > Att. openssl.org web server maintenance team. > > The latest security advisory for OpenSSL links to the research site for > the "lucky 13" attack analysis, which links to their report in pdf > format. That report in its list of references includes a lin

Re: OpenSSL infrastructure migration

On 01/25/2013 07:54 PM, Jakob Bohm wrote: > > The all-important download page http://www.openssl.org/source/ is no > longer sorted properly. This may be due to the backend code relying on > the implicit sorting in readdir() results for some file systems not > happening with more recent file system

Re: Web site: "Send to Majordomo" broken

On 01/16/2013 03:29 PM, Memmott, Lester wrote: > It appears that the web site went through a few changes recently and some > aren't working quite right yet. Another case is on the FIPS page > (http://www.openssl.org/docs/fips/) the link for the User Guide is also > broken. > > Thanks, > Leste

Re: OpenSSL infrastructure migration

On 01/15/2013 12:50 PM, Lutz Jaenicke wrote: > Hi! > > As you will already have noted, the OpenSSL project is currently moving > its infrastructure to a new server. This migration is combined with a > change and/or upgrade of the tools (CVS -> GIT, RT 3.x -> 4.x, ...) so >

OpenSSL infrastructure migration

Hi! As you will already have noted, the OpenSSL project is currently moving its infrastructure to a new server. This migration is combined with a change and/or upgrade of the tools (CVS -> GIT, RT 3.x -> 4.x, ...) so we have decided to set up the new server first and to perform a step by step migr

OpenSSL RT instance migration

Hi, in the process of upgrading and migrating our server infrastructure I have just put the updated Request Tracker into operation. The request tracker stays reachable via r...@openssl.org (or the alias openssl-b...@openssl.org). While the migration is still in progress, the web interface is tempo

[FWD] Bug report

Forwarded to openssl-users for discussion Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hello There, We are facing an issue with OpenSSL. Please see the following description

[FWD] problem about HW_Rand_Engine

Forwarded to openssl-user for discussion. Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hello, I have a problem about using HW_Rand Engine. Would you please give me some suggestion

[FWD] About SSL_connect error

Forwarded to openssl-users for discussion Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Dear OpenSSL developers About the following source,I have 2 questions: 1.In OpenSSL library

[FWD] BUG: base64

Forwarded to openssl-users for public discussion Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- I found a possible bug with base64 decoding, the following block can't be decoded by op

Re: virus or hoax in test/asn1test.exe ?

On 02/17/2012 12:29 PM, Jakob Bohm wrote: > On 2/16/2012 11:42 PM, David H. Lipman wrote: >> From: "Johan Samyn" >> >> 48 hours later my replies have NOT made it to Gmane. >> Mark: 2/16/12 @ 1742 hrs >> >> > I guess that would be 2012-02-16 17:42 -0500 aka > 2012-02-16 22:42 UTC? > > It arrived

[FWD] bug report

Forwarded to openssl-users Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hi, I can’t seem to run make on my Ubuntu machine. Have been trying with the openssl-1.0.0g.tar.gz I’ve also

[FWD] Crash in SSL_CTX_free() in OpenSSL 0.9.8e

Forwarded to openssl-users for discussion. Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hi, I am using SSL_CTX_free(ctx) call in our OpenHPI application and getting a crash in

openssl.org web site certificate renewed

Hi! I have just installed a new 3 year wildcard "*.openssl.org" certificate to our web site. Thanks to GlobalSign for the new donation. The migration should work more or less unnoted for the users. If you experience any problems please drop me a message. Best regards, Lutz __

[FWD] Request for help in building the open ssl for embedded environment

Forwarded to openssl-users for public discussion. Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hi, We are trying to build the open ssl for the embedded environment on power pc

Re: Client Hello too large ?

Am 21.06.2011 20:38, schrieb Alban Diquet: > Yes, strange isn't it ? > I guess it doesn't matter for 99% of the SSL clients, but for what I'm > doing (a SSL scanner) it's kind of annoying. > Well it's probably not going to change anytime soon, but now I want to > know what's going on. > > > > W

[FWD] RE: [Bug Reports] Encrypt a file text on unix (Aix 5.3, Aix 6.0,SUN5.8,....) to decrypt on Windows Error

on. Any unauthorised use or dissemination is prohibited. E-mails are susceptible to alteration. Neither SOCIETE GENERALE nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified. = - E

[FWD] [Bug Reports] Encrypt a file text on unix (Aix 5.3, Aix 6.0,SUN5.8,....) to decrypt on Windows Error

alsified. ===== - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project

[FWD] some problem in compiling Openssl 1.0.0d for WCE

forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org User Support Mailing List

[FWD] Intermediate certificate chain not included when exporting as pkcs12

tage Highlight the certificate in the Personal Store Click on Export Click 'Yes, export private key' Click Next Put a tick in the first checkbox only, not the other two Finish the wizard Rename the PFX file you create to have a p12 extension Use the new .p12 file in Tomcat - E

OpenSSL server failure

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! unfortunately the OpenSSL project has been hit by a hardware defect (hard disk and power supply). The project hence had to be migrated to a different server using a later version of the operating system and tools. Services are currently being rest

[FWD] Apache 2.2.17 and OpenSSL 1.0.0c - Crash with SSLVirtualHost ServerName set.

+StdEnvVars BrowserMatch ".*MSIE.*" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 CustomLog "Z:/Apache/logs/_MilesMilitusCallidus.com_SSL/ssl_request.log" \ "%t %h %{SSL_PROTOCOL}x %{SSL_CIP

[FWD] problem in privete key

1wy+YeXl4c7zsumQcXOgSuWtiaLiiJw12uZVjFYmEBfdZ4zrJpYW mcaIGD1l4WsXGEesFA859g3ZiK52 -END CERTIFICATE- This is file sent by the server.please any one help me to connect to the server. Thanks®ards K.A.Praveenkumar - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project h

[FWD] OpenSSL error message

ows Server 2003 R2 Standard Edition Service Pack 2, 32 bits. Diogo Monteiro diogo.monte...@arquiconsult.com<mailto:diogo.monte...@arquiconsult.com> TLM +351 96 433 0767 [cid:image002.png@01CBB285.8E61A6F0] - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org

[FWD] "Bug" report: ntdll.mak file is not present

er the *ms*sub-directory the * ntdll.mak* file is not present. Thanks. Best regards, Philippe. - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org

[FWD] OPENSSL - Windows CE

CE that i need to sign the message and verify the signature. I need to compile full OpenSSL? How to compile a short version? Can you help me, please. Thanks, Cerriman. - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org

[FWD] Crash inside libeay32.dll

32.dll. Is there a way we can gather more information where exactly the crash is, and to isolate the problem? Thanks. Regards, Eleanor - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project ht

[FWD] openssl 1.0.0a make FAIL @ multiple missing/redefined header errors, only on Ubuntu 10 LTS

ion ‘memcpy’ cryptlib.c: In function ‘CRYPTO_thread_id’: cryptlib.c:548: warning: implicit declaration of function ‘getpid’ make[1]: *** [cryptlib.o] Error 1 make[1]: Leaving directory `/usr/local/src/openssl/openssl-1.0.0a/crypto' make:

[FWD] default_crl_days= 365

rmation in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at ad...@sifycorp.com - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://w

[FWD] cert problem

/detail?id=18 - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org User

[FWD] Question

ue. Ramon Madera - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org Us

[FWD] help

error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:647:Expecting: TRUSTED CERTIFICATE error in x509 Regards, sujatha - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jae

[FWD] install openssl on a ox 10.6.x

ona mac os x? Thanks José Lourenço - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http

[FWD] How to user Configure with 64 bit compliation option

bit MSB file format. but i require to build openssl using 64 bit option in this machine. how can i achieve that? - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke

[FWD] VeriSign Intermediate Certificate missing

tZQZ -END PGP SIGNATURE- - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project

[FWD] make: don't know how to make /usr/local/ssl/fips-1.0/lib/fipscanister.o. Stop

torate University of Ghana Tel:+233 244 994 020 g-mail:ppom...@gmail.com yahoo-mail: mawua2...@yahoo.com skype:ppomary - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.o

[FWD] error:140773E8:SSL routines:SSL23_GET_SERVER_HELLO:reason(1000)

problem and solution of porblem? Thanks & Regards, --VenkiP - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __

[FWD] Error: SSL: couldn't create a context!

e on how to debug, please share. Thanks, Sumit Sengupta - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project

[FWD] openssl-0.9.8 make error

4 07:25 install-tools -rw-r--r-- 1 root root 75972 Apr 14 07:25 libgcc.a -rw-r--r-- 1 root root 34538 Apr 14 07:25 libgcc_eh.a -rw-r--r-- 1 root root 25166 Apr 14 07:25 libgcov.a and my gcc test when Re-adjusting the Toolchain,the result are all the same ashttp://www.linuxfromscratch.org/lfs

OpenSSL server problems

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! In the past few days we had some problems with the hardware of the OpenSSL server providing the public services (web, mail, etc). We are now closely monitoring the system and preparing to migrate to another server if necessary. Thank you very much

[FWD] Building Win64 0.9.8l on VS2008

% PAUSE SET CONFIG= SET MSBATCH= SET OUTDIR= SET BUILDTYPE= __ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://w

[FWD] enhancement request:tls without sockets

without sockets Hi, I have a quirky app that while connection based is not tcp based. I am looking for some way to usel tls for authentication of both ends of the connection. Is there an example of how to use OpenSSL without it managing the socket? Thanks - End forwarded message - -- Lutz

[FWD] OPENSSL error

k_app.] Error 1 make[2]: Leaving directory `/home/rejoy/Desktop/intel/lat/openssl-0.9.8g/test' make[1]: *** [bntest] Error 2 make[1]: Leaving directory `/home/rejoy/Desktop/intel/lat/openssl-0.9.8g/test' make: *** [tests] Error 2 by REJOY - End forwarded message - -

[FWD] RE: Help Request

do the make without inserting #include the compilation is successfull. Why this include causes the error: implicit declaration of function ‘_’ Is it a bug in the openssl/des.h or in the VLC ? Thank you for your help Vincenzo Giarratana vincenzo.giarrat...@gmail.com - End forwarded

[FWD] Question on SSL_shutdown timeout

noticed that this timeout doesn't have always the same value. I did a search on the web but didn't find anything on this topic. Thank you very much, Xavier ----- End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project

Re: New blackout

Chris Wilson wrote: On Wed, 25 Nov 2009, The Doctor wrote: I was able to see openssl.org last night MST but not at this current time. Works fine for me. We did have "filesystem full" problems in the last days which led to system panics. These issues should be sorted out now (thanks to Ralf

[FWD] SSL_write returned SSL_ERROR_SSL

recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project

[FWD] Build incorrect crypt/decrypt in Win32. x86. MSVC 2003. MinGW.

break; } }while(1); free(buff); BIO_flush(bout); BIO_free_all(cipher); return ret; } - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~

[FWD] Failed for target 'build_crypto'

home/pkchan/openssl-0.9.8k/crypto *** Error code 1 make: Fatal error: Command failed for target `build_crypto' Hope you can help me out. Thanks. - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.

[FWD] crash on aix and win. memory issue ?

' e".., 4096)= 4096 kread(6, "\0 @05 ¹8F 9 ¬ Ä } Ò `\n".., 4096)= 4096 kread(6, "\01F B F ú ó9C E ª s à i".., 4096)= 4096 kread(6, " í @ ø L ­ Á 313 ¸86 Á".., 4096)= 1346 kread(6, " í @ ø L ­ Á 313 ¸86 Á".., 4096)= 0 kread(6, &qu

[FWD] about openssl1.0 performance on linux

support this test without any changes of code? request your replys, Thanks. Best Regards Denny Zhang SBU-I-3 Sercomm(Suzhou) R&D Center EXT 1124 - End forwarded message - -- Lutz Jaen

[FWD] Request support

key privkey.pem > fileinchiaro.msg Thanks for help RegardsCarlo - End forwarded message ----- -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL P

[FWD] Japanese Characters

warded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org User Suppor

[FWD] Query For RT performance enhancement

ards Varun Vyas - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org

Re: Spam on this list

Rob Stradling wrote: > Is it time to divide openssl-users into several lists? > > Maybe something like... > openssl-fips for matters pertaining to OpenSSL/FIPS. > openssl-build for reporting build errors with the OpenSSL sources. > openssl-api for asking questions about how to use the OpenSSL

[FWD] Openssl-0.9.8i build fails with Aix5.3 64 bit

from your computer without copying or disclosing it. ----- End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project

[FWD] Openssl-0.9.8e/i build fails with Aix5.3 64 bit

communication in error, please notify us immediately by replying to this message and deleting it from your computer without copying or disclosing it. - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://w

Re: I want you to do my homework for me.

David Loman wrote: > Mods: Any way there can be some banning happening soon? > Best way to end discussions like this one is to * step back * ignore what was written (annoying or offensive or not) * just do not write any more statements * enjoy doing something more useful Please understand that th

[FWD] Question: using OpenSSL without DLL

personnage à votre image pour votre WL Messenger http://go.microsoft.com/?linkid=9656622 - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/

[FWD] witch version of pkcs can I use?

and pkcs15 that was used for the same aim!! can you please call me what pkcs have I to use? and why this choice? I'll be very greatful for your help.. waiting for your replay! W. - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Proje

[FWD] How to disable SSL

do that. So, please i really appreciate your help, any clue, any link. Thanks! - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke

[FWD] About OpenSSL crashed in 0.9.8g

from /opt/ah/lib/libcrypto.so.0.9.8 Previous frame identical to this frame (corrupt stack?) who can give me the suggestion ? - End forwarded message - -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jae

Re: OpenSSL 0.9.8j build problem on ia64 SuSE 9.2

Mark Lavi wrote: > On Tue, Jan 13, 2009, Dr. Stephen Henson wrote: > > >> In these three lines in crypto/sha/Makefile: >> (cd asm; $(PERL) sha1-ia64.pl ../$@ $(CFLAGS)) >> (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) >> (cd asm; $(PERL) sha512-ia64.pl ../$@ $(CFLAGS)) >> >> Try changing ../$

[FWD] An error appears when run ./CA.sh -sign

fpx8g/8dw7MCbsg1gMHPkzQkhOLFJZBnJX7XuasR7HD63 8P1oYSNMXAuFttUt46z7iK1wBE3sq/u11MUljR0oBHukSw== -END NEW CERTIFICATE REQUEST- --- ??(http://space.sina.com.cn/ ) - End forwarded message - --

[FWD] "Make report error" openssl-fips-1.2 on Linux machine running Centos 4.7

1.0//fipscanister.o make[2]: *** [link_app.] Error 1 make[2]: Leaving directory `/home/kdaciek/Desktop/openssl-fips-1.2/test' make[1]: *** [ssltest] Error 2 make[1]: Leaving directory `/home/kdaciek/Desktop/openssl-fips-1.2/test' make: *** [build_tests] Error 1 - End forwarded mess

[FWD] How to add X509v3 Subject Alternative Name into cert created by openssl

b 04 May 2006   I???d really appreciate your help.   Thanks   Mike - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~jaenicke/ _

[FWD] I have a concatenate certificate problem

s. BR Loubot __ ???Yahoo!??2.0??? http://tw.mg0.mail.yahoo.com/dc/landing - End forwarded message ----- -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.o

[FWD] request for SSL

I am looking SSL Request for my website. Please Let me khow how to implement SSL. I have created SSL Request through IIS Server. What is the next Step? I am using ASP.NET 2.0,C# Technology. Thanks and Regards Pradeep Kumar Tamar +91-9711579560 - End forwarded message ----- -- Lutz Jaenicke

[FWD] Bug report

48, Extn: 20545), Chennai - 600032. India. ) (M) : 91- 93814 08670 , : : [EMAIL PROTECTED], P Save a tree. Please don???t print this email or Documents unless it is really necessary. - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] Op

Re: RAND_egd() blocking -- despite contract that states otherwise?

Ben Sandee wrote: > Hello Lutz and thank you for your informed response. > > Unfortunately I don't know exactly which version of prngd was being > used because I'm not the first-tier responder for this issue. What > I'm doing is preparing a portfolio of information so that we can > analyze exactly

Re: RAND_egd() blocking -- despite contract that states otherwise?

Ben Sandee wrote: > Hi there, > > I'm investigating a case where a customer's prngd service was > blocking, which by itself is not supposed to happen AFAIK. This was > causing a hard-to-diagnose startup hang for our code that uses > OpenSSL. The call to RAND_egd() was blocking in a call to read()

Re: pq_compat.h

Alex Chen wrote: > The header file crypto/pqueue/pq_compat.h does not have the following > directive > > #ifndef HEADER_PQ_COMPAT_H > #define HEADER_PQ_COMPAT_H > > #enedif > > The effect is that we get warnings about PQ_64BIT being redefined > because ssl.h includes ssl3.h, which includes pq_

[FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

hello B ERROR shutting down SSL CONNECTION CLOSED ACCEPT bad gethostbyaddr Thanks & Regards, Byju Joy +91-9902511344, +91-80-67245657, *7098068 - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~jaenicke/

Re: Simple patch to crypto/sha/Makefile avoiding compile crash on IA64

Amadeu A. Barbosa Jr wrote: > Hi all, > > I got a problem on compile of openssl-SNAP-20081003 on IA64 (same on older > versions of 0.9.9 dev source) like this: > ... > The following patch on crypto/sha/Makefile makes all right: > > openssl-SNAP-20081003$ diff -up crypto/sha/Makefile crypto/sha/M

Re: Problem Related to Peer cetificate verification.

Ajeet kumar.S wrote: > > Dear All, > > I want to verify the peer certificate (server > certificate). For that we need CA Certificate, Let me know we required > ROOT CA certificate in PEM format or in any other format, open ssl > will support. > > Actually I called *SSL_CTX_load_verify_l

Re: How to use a hardware RNG with openssl?

F. wrote: > Any way to collect only from HRNG? > This can be a choice or not? > >> e_os.h >> >> #ifndef DEVRANDOM >> /* set this to a comma-separated list of 'random' device files to try out. >> * My default, we will try to read at least one of these files */ >> #define DEVRANDOM "/dev/random

Re: How to use a hardware RNG with openssl?

F. wrote: > If the true random generator is in /dev/random, and I want use only this > device for random data using openssl.cnf: > RANDFILE = /dev/random > > Is this correct? > This is nearly correct. OpenSSL will read 2048 bytes from it (2048 is hardcoded for device files to avoid

Re: How to use a hardware RNG with openssl?

Gerd Schering wrote: > Lutz Jaenicke wrote: >> Gerd Schering wrote: >> >>> Hello, >>> >>> we purchased a hrng for the generation of RSA keys for instance. >>> It is an USB device an shows up as /dev/qrandom. >>> >>&g

Re: How to use a hardware RNG with openssl?

Steffen DETTMER wrote: > * Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 16:46 +0200: > >> OpenSSL's internal PRNG uses a 1024 byte pool mixing entropy with >> SHA-1 so the more bytes a mixed in, the better. At least it cannot hurt >> to add any input to it as the

Re: How to use a hardware RNG with openssl?

Steffen DETTMER wrote: > * Lutz Jaenicke wrote on Fri, Sep 19, 2008 at 14:22 +0200: > >>> we purchased a hrng for the generation of RSA keys for instance. >>> It is an USB device an shows up as /dev/qrandom. >>> >>> >> Note: if /dev/urand

Re: How to use a hardware RNG with openssl?

Gerd Schering wrote: > Hello, > > we purchased a hrng for the generation of RSA keys for instance. > It is an USB device an shows up as /dev/qrandom. > > So, in order to generate rsa keys, is it sufficient to use it as a > replacement for /dev/urandom and to call genrsa as > > openssl genrsa -rand

OpenSSL Web Server Certificate renewed

Hi! I have just installed a new (2048bit) certificate and key to the OpenSSL Project webserver. It is a wildcard certifcate for *.openssl.org catching both www.openssl.org and rt.openssl.org. Many thanks go to Steve Roylance from Globalsign for donating a 3 year wildcard SSL certificate!! Best r

Re: SSL_session_reused api

Krishna M Singh wrote: > Hi All > > I have been using this API to dump in my statistics logs whether the > SSL session is reused or not in a windows openSSL based client. > Everything was good till i was using 9.7e. The session reuse works > fine and the logs were correctly showing session r

Re: Regarding DES_xwhite_in2out() API

Kundile, Gayathri wrote: > HI all, > > > > Anybody tell me about when we upgrading the openssl version from 0-9.8.g > to openssl-0.9.8h, > > how the applications will affect which are using DES_xwhite_in2out() API The application will fail to link with an unresolved reference. This will however

Re: DES-only OpenSSL version

Kyle Hamilton wrote: > Well, the question becomes: Which government are you trying to work > around the restrictions of? > > OpenSSL is open-source. In the United States, while it may fall under > the export class EI on the CCR, it also falls under export exemption > TSU (see http://www.access.gpo

Re: DES-only OpenSSL version: technical aspects

Fred Picher wrote: > Hello, > > Thanks for your reply. > > >> If this is not sufficient you may check out ssl/sslv3.c etc and >> actually remove the ciphers you don't want to support in your >> libssl from the registration tables. >> > > As a test, I've commented out every cipher definiti

Re: DES-only OpenSSL version: technical aspects

Fred Picher wrote: > Hello all, > > I'd like to get all of the ciphers that are tagged 'export' as > well as the 56-bit ones that are not. Eg.: > > (list somewhat shortened in width) > > EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH Enc=DES(56) > EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH Enc=DES(56)

Re: Working with Strings on a SSL Server

Carolin Latze wrote: > Hi everybody, > > I have a very strange problem and hope that somebody is able to help > me. I wrote a simple client and server in C that authenticate each > other mutually using SSL. The SSL connection itself is working and I > was able to exchange messages using SSL_write a

[FWD] Re: Convert a DER certificate to PEM certificate

Lowell, MA 01851 (978) 805-1816 Lutz Jaenicke <[EMAIL PROTECTED]> 08/08/2008 10:05 AM Please respond to [EMAIL PROTECTED] To [EMAIL PROTECTED] cc Subject Re: Convert a DER certificate to PEM certificate Dear Sir or Madam, please direct your question to openssl-users@openss

Re: SSL_get_peer_certificate() failing

>From the mail thread I take it that your problem is visible at the client side of the connection, so a server certificate should always be send as long as you are not using an anonymous cipher (which need to be enabled specifically). Are you using SSL_connect() to explicitly connect to the server?

[FWD] Compiling error

now the reason Raghu - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project http://www.openssl.org Use

Re: Website correction request: only subscribers can post to openssl-users

Frank J. Iannarilli wrote: > Hi, > > On the following page: > > it declares that "anybody" can post to the openssl-users. > > But evidently (from my experience), that's not true; only subscribers > can. Unfortunately, browsing the website doesn't unambiguously > i

[FWD] openssl command propt

ss?. Get the one you really want - millions of new email addresses available now at Yahoo! http://uk.docs.yahoo.com/ymail/new.html - End forwarded message ----- -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.o

[FWD] Not able to use openssl

extra thingy i need to perform? Please help me out Thanks & Regards Satya N Tailor - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~jaenicke/

[FWD] request UP UX openssl A.00.09.07l

telecomitalia.it - End forwarded message - -- Lutz Jaenicke [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~jaenicke/ __ OpenSSL Project

Re: Certificate verification fails on MIPS architecture

Till Elsner wrote: > I tried to track down the problem, but it still seems that , when it > comes to certificate verification, on the OpenWRT fails what works on > a standard linux desktop PC. I wrote a short program that validates > certificates, that I'll append to this mail. If someone has some

Re: No error messages on Linksys Openwrt

Thomas Mangold wrote: > Hello > > calling i2d_RSAPublicKey() I get on a linksys running OpenWrt kamikaze > 7.09 the following errors. > error:0D07207B:lib(13):func(114):reason(123) > error:0D068066:lib(13):func(104):reason(102) > error:0D07803A:lib(13):func(120):reason(58) > > Can anybody please te

  1   2   3   4   5   6   7   8   9   >