[openssl-users] TLS 1.2 Client hello missing SessionTicket

2016-04-13 Thread Mike Gagnon
Hi Folks, I'm working on an issue where something seems to be going wrong with our internal state after a while, and one of our sessions will have suddenly lost its SessionTicket during the Client Hello. To debug the issue, I'm wondering if someone can point me to the right internal variable i

Re: encryption / decryption not the same debug / release

2005-05-09 Thread Mike Gagnon
I found my problem. My initialization vector was too short. I remembered that it needed to be a multiple of 8 (I think) and that it needed to have a minimum length... Mike Mike Gagnon ([EMAIL PROTECTED]) wrote*: > > Hello Ken, > > Very nice of you to take the time out to write to m

Re: encryption / decryption not the same debug / release

2005-05-09 Thread Mike Gagnon
ation call I was forgetting... Cheers and many thanks, Mike Ken Goldman ([EMAIL PROTECTED]) wrote*: > > > From: "Mike Gagnon" <[EMAIL PROTECTED]> > > Date: Sun, 08 May 2005 21:27:31 + > > > > I'm zeroing in on my problem. > > > > Enc

encryption / decryption not the same debug / release

2005-05-08 Thread Mike Gagnon
Hi list, I'm zeroing in on my problem. Encryption / decryption WORKS in DEBUG in the Visual C++ IDE BUT NOT when run from windows explorer. Also doesn't work at all in release mode. I tried turning off optimization and that didn't help. Any ideas / suggestions? Thanks! Mike // This email is

encryption & decryption not the same?

2005-05-07 Thread Mike Gagnon
Hi list, I've created an encrypter/decrypter object that successfully encrypts and decrypts strings. However, this object doesn't successfully decrypt another instances' encryption. It's obviously something to do with initialization. I'm creating a BIO chain: Cipher, Base64, Memory. I'm using

Re: Trying to convert .pem -key only- to .pkcs12 file.

2004-03-19 Thread Mike Gagnon
w to generate a certificate - you'll see that a key is used to do so... Mike -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 openssl pkcs12 -in key.pem -out key.pkcs12 -export -certfile cert.pem No certificate matches private key On Friday 19 March 2004 12:19 pm, Mike Gagnon wrote: > I ha

Re: Trying to convert .pem -key only- to .pkcs12 file.

2004-03-19 Thread Mike Gagnon
iday 19 March 2004 11:55 am, Mike Gagnon wrote: > You can't place a key without its certificate into a PKCS12. You need > both - they are coupled together in this type of file. You can even store > certificates that were not created with the supplied key, but at least one > o

Re: Trying to convert .pem -key only- to .pkcs12 file.

2004-03-19 Thread Mike Gagnon
You can't place a key without its certificate into a PKCS12. You need both - they are coupled together in this type of file. You can even store certificates that were not created with the supplied key, but at least one of the certificates must "match" the supplied key.. Mike -BEGIN PGP

key fingerprints

2004-02-26 Thread Mike Gagnon
2(pKey->pkey.dsa->pub_key); case RSA: blob->put_cstring("ssh-rsa"); blob->put_bignum2(pKey->pkey.rsa->e); blob->put_bignum2(pKey->pkey.rsa->n); The result is then the MD5 digest on the blob... Thanks for your help! Mike Gagnon _

Re: key fingerprints

2004-02-26 Thread Mike Gagnon
rinted is a private key, are always non-null - so they will always add data to the digest function, drastically changing the result and giving me my unique fingerprint for them.. Thanks, Mike > On Thu, Feb 26, 2004, Mike Gagnon wrote: > > > Hi list, > > > > I need to know

PKI certificate enrollment

2004-01-06 Thread Mike Gagnon
Hi list, Does anyone know of any implementations for certificate enrollment that fit easily and work well with OpenSSL? I'm at the research phase, looking at options... Thanks! Mike Gagnon __ OpenSSL Pr

Re: Documentation

2003-12-12 Thread Mike Gagnon
book: Network Security with OpenSSL by Viega, Messier & Chandra (O'Reilly) -Mike > > > Hello. > > I'm trying to undesrtand OpenSSL API. But documentation on the web seems to be very > incomplete. Could please anybody suggest me where to look for better documentation > or easy to understa

Re: blob from CAPI

2003-12-01 Thread Mike Gagnon
I don't think it's PEM. It's binary (The function is binaryToString)... Mike > On Mon, Dec 01, 2003, Mike Gagnon wrote: > > > Hi Dr. Henson / list, > > > > This is the code that I was using to convert my blob to an OpenSSL certificate > > (the

Re: blob from CAPI

2003-12-01 Thread Mike Gagnon
-- Thanks! Mike Gagnon > On Mon, Dec 01, 2003, Mike Gagnon wrote: > > > Hi list, > > > > Would anyone know how to convert a CAPI certificate blob to an OpenSSL X509 > > certificate? > > > > Thanks very much! > > Mike Gagnon > > > >

blob from CAPI

2003-12-01 Thread Mike Gagnon
Hi list, Would anyone know how to convert a CAPI certificate blob to an OpenSSL X509 certificate? Thanks very much! Mike Gagnon __ OpenSSL Project http://www.openssl.org User Support Mailing

iKey

2003-10-23 Thread Mike Gagnon
Hi list, Does anyone know of a CAPI-only engine for OpenSSL that can do the basic necessary operations for an SSL connection? Thanks! Mike Gagnon __ OpenSSL Project http://www.openssl.org User