DH_check() claims that RFC 3526 groups have DH_NOT_SUITABLE_GENERATOR

2011-11-21 Thread Maxim Kammerer
, and 8192) are congruent to 23 modulo 24, not 11. Is this some kind of oversight, or is RFC 3526 not suitable for DH secrets derivation using OpenSSL, or is DH_check() supposed to be only used for checking parameters generated with DH_generate_parameters()? Thanks, Maxim [1] http://tools.ietf.org

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2011-05-24 Thread Maxim Kammerer
On Tue, Dec 7, 2010 at 01:50, Dr. Stephen Henson wrote: > On Tue, Dec 07, 2010, Maxim Kammerer wrote: >> > The command-line argument "-md" to "openssl cms -sign_receipt" is >> > apparently ignored, and the default digest algorithm (SHA-1 in my >> >

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2011-05-24 Thread Maxim Kammerer
On Tue, Dec 7, 2010 at 01:50, Dr. Stephen Henson wrote: > On Tue, Dec 07, 2010, Maxim Kammerer wrote: >> > The command-line argument "-md" to "openssl cms -sign_receipt" is >> > apparently ignored, and the default digest algorithm (SHA-1 in my >> >

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-06 Thread Maxim Kammerer
ge digest algorithm (visible with openssl cms -cmsout -noout -print -in receipt.sig). Not so sure about -noattr/-nosmimecap, though. Maxim __ OpenSSL Project http://www.openssl.org User Support Mailing

CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-03 Thread Maxim Kammerer
/liberte/doc/cable.txt * Certificates generation is performed in https://liberte.svn.sourceforge.net/svnroot/liberte/trunk/liberte/src/home/anon/bin/gen-anon-username . Thanks, Maxim __ OpenSSL Project

ssl cert and stunnel with haproxy

2009-08-03 Thread Maxim
Hello dear community I faced some troubles for iphone and ssl cert: I moved separate server from hardware to AWS Cloud with SSL certificate from Register.com. It moved well, and phone application continue work with new server without any problems. Then I installed LoadBalancer (HAProxy and Stunnel