Strange notification

What is this supposed to be? I submitted a message to [EMAIL PROTECTED] and received the following e-mail: Subject line: AutoReply Reminding Message: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> domain changed as @Cathaybk.com.tw Mail body: Original Subject: Small OpenSSL Thanks for send us email. We'

Small OpenSSL

On 2003-11-12 I submitted patches for the 0.9.7c source tree to the request tracker but got a 450 Client host rejected: cannot find your hostname, [194.196.100.238] return. The files which I had attached to my e-mail did not make it into the database but the e-mail text did. Two hours ago I r

Re: Encryption libraries bundled with OpenSSL

You may want to check out the web page at http://www.openssl.org/docs/ where you see the three components spelled out. You will see that there is one crypto library. Regards, Martin __ OpenSSL Project

Re: Exportability of software based on OpenSSL libraries

>Hi, >I have a question about distribution of software which is based on OpenSSL libraries considering US export regulations. >We are planning to use OpenSSL library to develop a program with functionality similar to that of HTTPS client/server. We >will be linking our code (static or dynamic -

Export regulations

Hi, I wonder how OpenSSL users are handling the export regulations. OpenSSL is made of libraries, therefore libssl needs to call libcrypto to perform cryptographic operations with SSL keys which have been derived in libssl. How should libcrypto know whether a 128-bit SSL key contains reconstructa

Re: OpenSSL reduced size

>..but still the i could not achive the size i wanted. Well, I do not know the restrictions you have and whether you are mainly interested to reduce the library siszes or the total size of the libraries plus the openssl executable. >I was wondering if there was a way to get away some of >the stuf

Re: no-err option

>Another option is to abandon no-err instead of trying to make it work ... >some code systematically relies on the error queue being available >(look for ERR_peek_error() and ERR_peek_last_error()). >Do you think that there is a strong reason for keeping (and repairing) >no-err? Yes, indeed, I

Re: Stripping the OpenSSL library

Well, it is not only the makefile issue that you are facing. You will also want to use conditional compile statements to exclude code sections _in_ the source files which are not relevant for your application. I have been looking at that and found it a daunting task if you REALLY want to go down i

OpenSSL documentation for openssl(1) broken?

My browser connects me to the openssl(1) main page each time when I click on one of the sub-commands like asn1parse, ca, etc. of openssl(1). The browser address line displays the presumably correct file name asn1parse.html etc. but I do not see the expected content. Regards, Martin _

Re: documentation / examples X509 cert code

>Is there a (possibly *nix) tool that >converts all the .pod files quickly to e.g. html? I second that motion Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing Lis

Re: Generating keys from password

See PKCS #5, http://www.rsasecurity.com/rsalabs/pkcs/pkcs-5/ Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List

Re: The openssl s_time command

I found the problems, thanks. Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

The openssl s_time command

Hi, I have been trying to get the openssl s_time command to measure the SSL performance despite the non-existing documentation and need some help. All tests from "make test" complete successfully. To set up the test client, I have copied our root cert file from my Apache server to the client si

Re: speed differences between EVP_Sign and EVP_Verify

> Good cryptographic > software should not have different execution times > dependent on a bit value, though. (...) Or are you just saying that the fact that the public key has mostly zeros in the exponent should not matter, and the speed difference can be attributed only to the exponent size?

Re: speed differences between EVP_Sign and EVP_Verify

Signing uses the private key, normally with a longer exponent. Verification uses the public key, normally with a short exponent and with mostly zeros in the exponent. Good cryptographic software should not have different execution times dependent on a bit value, though. Martin icewind <[EMAIL PR

Re: iPlanet/Crypt-SLLeay v.37

Each of the two servers is performing client authentication. One of the servers can verify your client certificate (i.e., it knows and trusts the signer of your client cert). The other server rejects your client certificate, probably because it is unable to verify the client certificate with the

RE: Compiler does not find INT_MAX - thank you!

Thank to all who responeded! Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

OpenSSL interface to crypto functions

Does OpenSSL have an (optional) interface to crypto components with a PKCS #11-conforming API, similar like Netscape does? Regards, Martin Witzel __ OpenSSL Project http://www.openssl.org User

Re: Net::SSLeay .. https-proxy-sniff.pl .. How can I snoop an MSIE browsersession.

Check out ettercap ( ettercap.sourceforge.net ) No personal experience, though. Regards, Martin __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROT

Unexpected tag in client cert, subject's Common Name

I have created a client certificate with the openssl ca command and noticed that a SSL code which I have broke when it parsed the cert data. The reason was that it expected a PrintableString tag 0x13 instead of the T61String (Teletex) tag 0x14 which openssl apparently inserted. The whole field t