RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
Yes, I use pthreads on Windows. Since you stated "How would you handle TSD, for example? There is no *portable* way to hook the destruction of a thread." I figured you were dismissing pthreads as non-portable due to it not being natively available on Windows, and accepted that you were only intere

RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
I don't understand how the memory could be reused since there is no mechanism that I know of that the runtime library would or could use to track this. For a dynamically linked C runtime library the allocated memory is held in the heap that remains after the library unloads, at which time the poin

RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
Sure, that's a contrived and extreme example, but the best way to illustrate such a leak. For long-running (24x7) servers that may consist of many components and subcomponents this scenario can occur. With large enterprise server applications that are built with processes that value component re-

RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
ect: Re: SSL_library_init - missing 36 bytes after cleanup On Nov 15, 2005, at 9:00 PM, Steven Reddie wrote: > I understand about one-off leaks, but we're talking about a > dynamically loadable library when we're talking about OpenSSL. > > What would happen if an application

RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
unloaded. Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua Juran Sent: Wednesday, 16 November 2005 12:38 PM To: openssl-users@openssl.org Subject: Re: SSL_library_init - missing 36 bytes after cleanup On Nov 15, 2005, at 7:29 PM, Steven Reddie

RE: SSL_library_init - missing 36 bytes after cleanup

2005-11-15 Thread Steven Reddie
David, If 36 bytes are being dynamically allocated and not being freed how is it not a leak? Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz Sent: Wednesday, 16 November 2005 10:09 AM To: openssl-users@openssl.org Subject: RE: SSL_l

RE: Rand_status so slow on windows

2005-10-20 Thread Steven Reddie
Yes, that's right.  The initialized flag is local to the module that it is in and is only set when calling RAND_status and I think one other function (maybe RAND_get_bytes).  If you wish to modify the OpenSSL code directly you could get rid of the "if (!initialized)" test and rely only on th

RE: Rand_status so slow on windows

2005-10-20 Thread Steven Reddie
RAND_status will trigger seeding of the PRNG if it has not been initialised.  On Windows the entropy gathering can take a long time due to the heap walking and performance counter accesses.  Whether it completes in a reasonable time or takes much longer can depend on current system activity

RE: Runnning openssl test

2005-10-20 Thread Steven Reddie
Hi Dharmesh,   The output hasn't been made to facilitate easy parsing.  A pragmatic approach may be to grep for "done" and "ok" (and perhaps "fail" and "err") and save the output from a known good run and compare subsequent runs against that.   Regards,   Steven From: [EMAIL PROTECTED] [m

RE: rsa_publiic_encrypt problem

2005-09-19 Thread Steven Reddie
It sounds like a padding issue. Which padding mode are you specifying, what is the key length, and what is the length of the plaintext? To be clear, the encrypt succeeds all of the time, but the decrypt fails half of the time? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PR

RE: Cross compilation of openSSL for ARM platform fails

2005-09-11 Thread Steven Reddie
Maybe the C files get compiled with the correct compiler, but you probably don't want that x86cpuid-elf file being compiled for ARM since it's for x86.  You seem to have ended up with an x86 configuration (probably linux-elf which although it doesn't explicitly state it is in this case for a

RE: OCSP, Nonce and the requestExtensions

2005-09-08 Thread Steven Reddie
Sure, I'm not discounting the value of being able to do pretty printing. I was just thinking about using the decoded data further than that, and in all situations I can think of knowing the data format is important (and a given). Even with XML, where you could use XPATH/XQUERY to drill down into

RE: OCSP, Nonce and the requestExtensions

2005-09-08 Thread Steven Reddie
I understand you're point. I can imagine some interesting things done with XSLT. I guess I just haven't come across a case in practice (other than pretty printing) where I needed to decode without knowledge of the format of the data. I also feel that there are worse things done with ASN.1, from

RE: OCSP, Nonce and the requestExtensions

2005-09-08 Thread Steven Reddie
ll use implicit tagging. - Sravan Steven Reddie wrote: >By using explicit tagging the underlying object is encoded as it would >be if standalone. Implict tagging avoids adding a wrapper around the >object but results in the underlying object being slightly altered. > >As an example,

RE: OCSP, Nonce and the requestExtensions

2005-09-08 Thread Steven Reddie
Is this a concern for real applications, things other than pretty printers and protocol dumpers? I agree that it makes it difficult to understand the content without a format description, but it's no worse than some proprietary encoding. Is translating into XML without knowing the "language" of t

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
, Nonce and the requestExtensions Hi Steven, I would like to know point 2. - Sravan Steven Reddie wrote: >I'm sure someone will jump in if they see a mismatch in your question >and my answer. In the meantime let's break it down. Are you: >1. Looking at some existing data model

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
help us out... - Sravan Steven Reddie wrote: >I meant to say that I don't know of any specific reason other than not >changing the underlying type. I imagine that not changing the >underlying type can be important/helpful in some situations. An >example being an encoded certifica

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
erlying object is still a standalone certificate. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Reddie Sent: Thursday, 8 September 2005 2:17 PM To: openssl-users@openssl.org Subject: RE: OCSP, Nonce and the requestExtensions When working with enco

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
R' but it seems i didn't get the exact difference b/n the two types of tags - in the sense of exact context in which each of these types of tags are used. bye & thnx - sravan Steven Reddie wrote: >I should clarify that tags aren't blindly used to identify members of >

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
I should clarify that tags aren't blindly used to identify members of structured types, only when there would otherwise be ambiguity such as with optional members in a SEQUENCE, or in a CHOICE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven R

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
@openssl.org Subject: Re: OCSP, Nonce and the requestExtensions ah, okay. thank you! now i know what's the number for! :) Steven Reddie schrieb: >That's the [2] in: > >TBSRequest ::= SEQUENCE { >version [0] EXPLICIT Version DEFAULT v1,

RE: OCSP, Nonce and the requestExtensions

2005-09-07 Thread Steven Reddie
That's the [2] in: TBSRequest ::= SEQUENCE { version [0] EXPLICIT Version DEFAULT v1, requestorName [1] EXPLICIT GeneralName OPTIONAL, requestList SEQUENCE OF Request, requestExtensions [2] EXPLICIT Extensions OPTIONAL }

RE: Reading from standard input

2005-08-29 Thread Steven Reddie
It's the same as your original problem: different end-of-line markers Try this instead: echo -n "1122" | openssl dgst -md5 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Roberto Arias Alegria Sent: Tuesday, 30 August 2005 2:01 PM To: openssl-user

RE: Reading from standard input

2005-08-29 Thread Steven Reddie
Your question doesn't make much sense. A "digest of the file" is exactly the same as "a digest of what is *inside* the file". If you mean that you want a digest of a particular portion of the contents of the file then you'll need to extract that yourself. -Original Message- From: [EMAIL

RE: MD5SUM openssl-0.9.8.tar.gz

2005-08-29 Thread Steven Reddie
fact that I am behind a proxy could be the problem?.. I am going to try it using a machine directly conected to the outside.. Thanks, Rodolfo - Original Message - From: "Steven Reddie" <[EMAIL PROTECTED]> To: openssl-users@openssl.org Subject: RE: MD5SUM openssl-0.9.8.tar

RE: MD5SUM openssl-0.9.8.tar.gz

2005-08-29 Thread Steven Reddie
The copy I downloaded a while back is correct. The copy I downloaded just now is also correct. Seems you have a corrupt download. Does "gunzip -t openssl-0.9.8.tar.gz" report a corruption? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rodolfo Estrada

RE: openssl ciphers

2005-08-29 Thread Steven Reddie
Which version are you using? 0.9.8 does what I'd expect: $ openssl ciphers AES+DES Error in cipher list 3312:error:144020B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl_lib.c:1167: Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROT

RE: Compatibility between RSA_sign and RSA_public_decrypt

2005-08-26 Thread Steven Reddie
RSA_verify calls RSA_public_decrypt to do the actual decryption. The padding aspects of each are the same. The difference in PKCS#1 padding is between RSA_public_encrypt/RSA_private_decrypt and RSA_private_encrypt/RSA_public_decrypt. The pair used for signatures use a form of padding that doesn'

RE: TLS handshake failure: who's right?

2005-08-24 Thread Steven Reddie
The second handshake message in frame 18 (Certificate Request) has an empty certificate_authorities record (shown as "Distinguished Names Length: 0" in the dump). TLS v1.0 specifies that this record must contain at least 3 entries: struct { ClientCertificateType certificate_type

RE: Isolating SHA Algorithm from openssl

2005-08-22 Thread Steven Reddie
If you're trying to extract an implementation of SHA-256 by starting with sha256t.c you're on the wrong track. That file is for testing sha256. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Allen Rintoul Sent: Monday, 22 August 2005 10:07 PM To: openss

RE: What size is this key?

2005-08-17 Thread Steven Reddie
It probably is 1023 bit, but you can think of that as being 1024 bit with the top bit zero. Since the modulus is effectively random (the product or two randomly chosen large primes) then it makes sense that some of the generated moduli will not completely fill the 1024 bits, just as choosing a num

RE: RSA key sizes

2005-08-17 Thread Steven Reddie
I believe it's a matter of efficiency. There are optimisations that can be performed on the math of integers of length power-of-2. It's possible that there are implementations out there that won't work with non-standard sizes. I have seen 4096 bit keys in the wild. In fact, the Microsoft Root C

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-10 Thread Steven Reddie
I've put up a wcecompat-1.2 which addresses #2. ARMV4 is the most common ARM architecture available. Microsoft called this "ARM" in eVC3. Arm defined a Thumb instruction set which is 16-bits to allow more compact code, with the ability to switch between both modes. With eVC4 Microsoft renamed "A

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-09 Thread Steven Reddie
INDLL -D_DLL /Foobj/ -D_MSC_VER=1200 SRC = \ src/args.cpp \ On 8/8/05, Steven Reddie <[EMAIL PROTECTED]> wrote: > Hi Michael, > > I've put a new wcecompat.zip up at essemer.com.au which includes > ENOMEM and EA

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-09 Thread Steven Reddie
Whoops, I missed the memcpy reference in the original post. I added a memcpy prototype to string.h in wcecompat 1.1 to satisfy an OpenSSL 0.9.8 compile problem, so I guess this is the one. The problem with the wcecompat approach is that it overrides/replaces the Microsoft supplied header files. I

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-09 Thread Steven Reddie
The file "C:\Program Files\Microsoft eMbedded C++ 4.0\EVC\wce420\bin\WCEARMV4.BAT" should contain a line like: if "%WCEROOT%"=="" set WCEROOT=C:\Program Files\Microsoft eMbedded C++ 4.0 Which is obviously customised on install since the default is "C:\Microsoft eMbedded C++ 4.0" and I cho

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-09 Thread Steven Reddie
Hi Andy, The first release wasn't numbered. This new release is numbered 1.1. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Polyakov Sent: Wednesday, 10 August 2005 3:29 AM To: openssl-users@openssl.org Subject: Re: openssl-0.9.8-stable-SNAP-2005

RE: openssl-0.9.8-stable-SNAP-20050805 on WinCE5.0

2005-08-08 Thread Steven Reddie
Hi Michael, I've put a new wcecompat.zip up at essemer.com.au which includes ENOMEM and EAGAIN. The remainder of the problems need to be corrected in OpenSSL. Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Wang Sent: Tuesday,

RE: MS VC 5: compilation fails

2005-07-12 Thread Steven Reddie
That error message tends to occur when the code is too complicated for the compiler. You may be able to avoid the error by rearranging the code in that module, but it's a hit and miss approach. Upgrading to a newer compiler should fix the problem (since this builds fine under VC6 and up). -

RE: do_cipher function pointer points to ?????

2005-07-05 Thread Steven Reddie
That depends on which cipher you're talking about.  The definition reveals that it's a member of a structure named evp_cipher_st which is typedef'd as EVP_CIPHER.  Grep for EVP_CIPHER in evp.h and you'll see there are a lot of implementations of this structure.   Steven From: [EMAIL PROTEC

RE: does openssl allocate memory with 16 bit alignment?

2005-07-05 Thread Steven Reddie
ffer to the hardware.   This should solve my problem. I have a question here..does anyone know which functions does the do_cipher function pointer point to ?   Cheers Riaz  On 7/5/05, Steven Reddie <[EMAIL PROTECTED]> wrote: Riaz,   I think you'll find that malloc does do the ri

RE: does openssl allocate memory with 16 bit alignment?

2005-07-04 Thread Steven Reddie
mainly for gcc compiler, so this is a compiler dependent solution. I have to yet check this.     On 7/4/05, Steven Reddie <[EMAIL PROTECTED]> wrote: Riaz, I think I misread/misunderstood your question.  OpenSSL uses malloc to allocate memory.  malloc should return an allocated b

RE: does openssl allocate memory with 16 bit alignment?

2005-07-03 Thread Steven Reddie
Riaz, I think I misread/misunderstood your question.  OpenSSL uses malloc to allocate memory.  malloc should return an allocated buffer which is aligned appropriately for the underlying platform.  Typically this alignment will be greater than you require, such as to a 16-byte boundary. Fro

RE: does openssl allocate memory with 16 bit alignment?

2005-07-03 Thread Steven Reddie
Isn't this the job of the compiler?   I don't believe that OpenSSL goes out of it's way to access values larger than 8-bits on unaligned addresses.  One exception is the hand-optimised crypto routines, such as AES, where 32-bit values may be accessed on arbitrary addresses.  Check out the mac

RE: MSVC Application linked against static openssl libs is crashing

2005-06-06 Thread Steven Reddie
You said it crashes when you call OpenSSL? Which function are you calling, and what sort of crash is it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Qadeer Baig Sent: Tuesday, 7 June 2005 2:53 PM To: openssl-users@openssl.org Subject: Re: MSVC Applic

RE: How to map recv(fd, buffer, SEGMENT_LEN, MSG_PEEK) to SSL_read

2005-05-24 Thread Steven Reddie
Adding to David's response... MSG_PEEK is problematic on some systems. On Windows for example (maybe only the 9x series, but a problem none-the-less) using MSG_PEEK will effectively freeze the contents of the buffered data that can be seen with MSG_PEEK, meaning that any further peeks will not be

RE: Doubt regarding EMSA-PKCS1-v1_5

2005-05-24 Thread Steven Reddie
Ken, think of it this way: 1. To send a message for only a specific person to read you want to make it decryptable with their private key, thus encrypting with their public key. 2. For a signature, the world needs to be able to verify it, so it needs to be decryptable with the public key, and thus

RE: transformation from WinInet

2005-04-21 Thread Steven Reddie
:-O It may have been helpful if you didn't already have a copy. I'm guessing that Mike didn't have intimate knowledge of the content of your bookshelf. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Sent: Friday, 22 April 2005 2:24 AM To: openssl-us

RE: OpenSSL 0.9.7f released

2005-03-26 Thread Steven Reddie
users@openssl.org' Subject: RE: OpenSSL 0.9.7f released Announcement. Is there any other place to provide more information? Thanks, Sharon Zhao -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Reddie Sent: Wednesday, March 23, 2005 6:21 PM T

RE: OpenSSL 0.9.7f released

2005-03-23 Thread Steven Reddie
Where have you looked? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Zhao Sharon-CSC002 Sent: Thursday, 24 March 2005 2:54 AM To: 'openssl-users@openssl.org' Subject: RE: OpenSSL 0.9.7f released Where I can find the release notes of 0.9.7f? Thanks, S

RE: Openssl, FIPS, and WinCE

2005-02-09 Thread Steven Reddie
Thomas, I view GetSystemTimeAsFileTime as a Win32 API function that has been left out of Windows CE. It's still part of the Windows platform though, and wcecompat is about providing the parts of the Windows platform left out of Windows CE. I'm not sure how the accreditation could specifically di

RE: Openssl, FIPS, and WinCE

2005-02-09 Thread Steven Reddie
Hi Oscar, The released wcecompat only works with Windows CE SDK's up to Pocket PC 2002 (eVC3). I am yet to release eVC4 support -- just haven't found time to do so. If you want to make your own local changes you should find that they are quite minor -- the changes that I am yet to release includ

RE: collect2: ld returned 1 exit status

2004-10-21 Thread Steven Reddie
Yes, these errors are during the link stage. Your libcrypto.a should contain the file des_enc.o which should contain DES_encrypt1. If you can't find that symbols then something has gone wrong with your build. I don't think LD_LIBRARY_PATH has any effect on Cygwin, but I'm not positive -- I think

RE: SSL without Key?

2004-10-21 Thread Steven Reddie
Under SSL there are two possible client modes, anonymous and authenticated. You're referring to anonymous connections where the client doesn't provide any credentials to the server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David ARMOUR Sent: Thursda

RE: RE: error while running "make" - No such file or directory

2004-10-21 Thread Steven Reddie
set other environment variables besides of the PATH variable? TIA, Michael Steven Reddie <[EMAIL PROTECTED]> schrieb am 20.10.2004, 16:22:16: > The sys directory refered to is under the system include directory, > probably /usr/include/sys. Do you have a /usr/include/sys/time.h? If

RE: error while running "make" - No such file or directory

2004-10-20 Thread Steven Reddie
The sys directory refered to is under the system include directory, probably /usr/include/sys. Do you have a /usr/include/sys/time.h? If not, you may need to reinstall gcc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday

Re: OpenSSL for ARM

2004-08-15 Thread Steven Reddie
Roberto Gallo wrote: Hi, We are developing a new hardware device based on Atmels ARM based processors. However, RSA sign times for 1024 bits are critical - ideally it should spend less than 3 seconds. I have two questions: does anyone have any performance figure of OpenSSL's RSA or DH implement

RE: Problems compiling 0.9.7d for WCE

2004-04-23 Thread Steven Reddie
Hi Antonio, A patch for this has been submitted and I'll work it into a larger set of changes for supporting newer WCE SDKs. To fix the problem that you're having right now take a look at the source code at the locations listed below and make sure that the closing ')' is included. You'll see tha

RE: Any body doesn't want to help me?!!!!!

2004-04-20 Thread Steven Reddie
NULL,NULL,NULL)). I am sure that "file" is valid.   My program can execute the function RSA_generate_key(512,RSA_F4,NULL,NULL) without any problem.   The Type fo my VC++ project is  MFC AppWizard(dll). The type of my VB project is "EXE STANDARD" .   Steven

RE: Any body doesn't want to help me?!!!!!

2004-04-20 Thread Steven Reddie
Title: Message Have you traced through with a debuuger?  Where does it crash? -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Saladine HachemSent: Tuesday, 20 April 2004 7:40 PMTo: [EMAIL PROTECTED]Subject: Any body doesn't want to hel

RE: FIPS mode

2004-03-24 Thread Steven Reddie
Title: Message Hi Steve,   I take it that dynamically linking the FIPS OpenSSL into an executable means that the FIPS certification is void for that application.  So as you have stated, static linking is required.  However, if I'm producing a security library that uses OpenSSL and I statica

RE: New CA index subfiles (.attr, .attr.new, .attr.old, .new)

2004-03-19 Thread Steven Reddie
t -rw-r--r--1 redst01 None 103 Mar 19 17:42 index.txt drwxr-xr-x+ 2 redst01 None0 Mar 19 17:42 . c:/cygwin/home/redst01/dev/obj/winnt/debug_build/openssl/bin/openssl ocsp -issuer ca1_cert.pem -cert ca1_ee1_cert.pem -reqout ca1_ee1_req_unsigned.der -no_nonce c:/cygwin/

RE: New CA index subfiles (.attr, .attr.new, .attr.old, .new)

2004-03-18 Thread Steven Reddie
own /C=US/O=Root/OU=CA1 V 050319032215Z 02 unknown /C=US/O=Root/OU=CA1/CN=ee1 V 050319032218Z 03 unknown /C=US/O=Root/OU=CA1/CN=ee2 Regards, Steven Reddie Manager, Development - eTrust R&D Computer Associates (Australia) [EMAIL PROTECTED] Phone: +

New CA index subfiles (.attr, .attr.new, .attr.old, .new)

2004-03-18 Thread Steven Reddie
Title: Message Hi Richard,   I'm confused by changes to the "openssl ca" command changes in 0.9.7d that now spit out several CA index files.  Previously we got a single index.txt files, but now are seeing also index.txt.attr, index.txt.attr.new, index.txt.attr.old, and index.txt.new.   We h

RE: BER Format ?

2004-03-01 Thread Steven Reddie
You mean DER which is a subset of BER. The OpenSSL i2d_* functions convert from OpenSSL's internal representation into DER. Load with the PEM routines and i2d the resulting X509 object. Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Su

RE: Installation Trouble VC7 Win32

2004-02-17 Thread Steven Reddie
Title: Message Sorry, spoke too soon.  Not noticing the scrollbar, my window size made the message look like it ended after the "wheels fall off" section.  doh! -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven ReddieSent: Wednesday, 1

RE: Installation Trouble VC7 Win32

2004-02-17 Thread Steven Reddie
Title: Message Elaborating on "wheels fall off" might make the problem easier to diagnose.  If X509_NAME is mentioned then it's probably a clash with the Microsoft Platform SDK.  With VC6 the Platform SDK was a seperate optional package and it was simply a matter of removing the Platform SDK

RE: Randomness in encrypted text

2004-02-03 Thread Steven Reddie
Brian, Please refrain from sending the same message four times in a row. It doesn't get you an answer any faster. The openssl enc command by default adds a salt to the start of the message to be encrypted and removes it on decryption. This salt is of the form "Salted__" followed by some binary

RE: unresolved symbol error on HP

2003-12-17 Thread Steven Reddie
Your libcrypto has been built with gcc so you need to link your application against the gcc runtime library. Either use gcc to invoke the linker, or link against the library printed when you run "gcc -print-libgcc-file-name". Regards, Steven -Original Message- From: [EMAIL PROTECTED] [m

RE: Win CE 3.0 with OpenSSL

2003-11-30 Thread Steven Reddie
It seems that you do have an INCLUDE variable set by WCEARM.BAT, so you shouldn't been to tweak it yourself. The value is: INCLUDE=C:\Windows CE Tools\WCE300\ms pocket pc\include; C:\Windows CE Tools\WCE300\ms pocket pc\MFC\include; C:\Windows CE Tools\W

RE: Win CE 3.0 with OpenSSL

2003-11-26 Thread Steven Reddie
Title: Message The code listed in the error below shouldn't be compiled for WINCE due to the #ifdef at the top of that module.  What has most likely happened is that OPENSSL_SYS_WINCE is not being defined.  I haven't tried building OpenSSL on WINCE since 0.9.7 or 0.9.7a but it doesn't look l

RE: Win CE 3.0 with OpenSSL

2003-11-26 Thread Steven Reddie
Title: Message The first instruction listed in OpenSSL's INSTALL.WCE file, executing eVC's WCEARM.BAT file (or similar), should result in setting the INCLUDE environment variable.  Have you run that command?  If so, can you open a fresh command prompt window, execute the following commands,

RE: Win CE 3.0 with OpenSSL

2003-11-26 Thread Steven Reddie
There should be a windows.h in your PPC SDK include directory. Has the INCLUDE environment variable been set properly? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mahabhashyam Anupama Sent: Wednesday, 26 November 2003 6:11 PM To: [EMAIL PROTECTED] Sub

RE: Win CE 3.0 with OpenSSL

2003-11-25 Thread Steven Reddie
eVC is a free download from Microsoft that runs on the desktop as a cross-compiler. Take a look at the developer FAQ's and articles on Microsoft's www.pocketpc.com site. Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mahabhashyam Anupam

RE: Ordering of components of subject/issuer DN

2003-11-17 Thread Steven Reddie
inal Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Monday, 17 November 2003 11:42 PM To: [EMAIL PROTECTED] Subject: Re: Ordering of components of subject/issuer DN On Mon, Nov 17, 2003, Steven Reddie wrote: > > I have come across a

Ordering of components of subject/issuer DN

2003-11-17 Thread Steven Reddie
Title: Message Hi all,   I have come across a certificate that chokes our software which uses OpenSSL.  I haven't dug very deep yet, but was hoping that someone could tell me about any ordering rules for the DN's.   openssl asn1parse on the cert produces the dump below which has the order o

RE: Problem with time.h in wcecompat

2003-10-03 Thread Steven Reddie
I presume that you're trying the Pocket PC 2003 SDK. I haven't upgraded to that myself but I've just checked the header files and Microsoft do now include a time.h that includes a struct tm. Wcecompat will need work which I don't currently have time for. If you wish to contribute patches I can i

RE: Creating Certificates for Pocket PC

2003-10-01 Thread Steven Reddie
Title: Message You are trying to run the openssl.exe built for the Pocket PC.  It wont run on the desktop.  You would probably be better off using a desktop build of openssl, creating the certificates with that, and transferring them to the PPC.  If you really want to use the PPC version, ge

RE: Building problems with Embedded VC++

2003-09-29 Thread Steven Reddie
Title: Message Hi, the pthread.h and unistd.h headers included by your project aren't available under Windows CE.  The unresolved symbols would appear to indicate that you haven't included the built OpenSSL libraries when linking your application.  The WinMainCRTStartup unresolved symbol mea

RE: pocket pc 2002 client

2003-09-28 Thread Steven Reddie
Title: Message The code for using OpenSSL on the Pocket PC should be the same as the code for using it on other platforms.  Try the openssl apps directory for examples of how to use various OpenSSL features.   Regards,   Steven -Original Message-From: [EMAIL PROTECTED] [mailt

RE: Ipaq h3800

2003-09-25 Thread Steven Reddie
Are you clicking on it on the iPAQ? If so, it wont work since it is a console based program and CE doesn't support consoles. I was sure I included details in INSTALL.WCE about how to run it via your desktop, but I don't seem them there so I must be mistaken. If you grab the ceutils from my websi

RE: OpenSSL Thread-safe Issue ?

2003-09-24 Thread Steven Reddie
Have you used the following functions to register OpenSSL thread-safety callbacks: CRYPTO_set_locking_callback(locking_function); CRYPTO_set_id_callback(id_function); You need to supply your own locking_function() and id_function(), samples of which can be found in OpenSSL's mt/mt

RE: ARM and Xscale processor

2003-09-24 Thread Steven Reddie
Title: Message Yes, the XScale is an ARM v5.   Regards,   Steven -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kambourakis GeorgiosSent: Wednesday, 24 September 2003 6:15 PMTo: [EMAIL PROTECTED]Subject: ARM and Xscale processor Hi,

RE: more spam

2003-07-17 Thread Steven Reddie
Yeah, I get the same. I've added this user to my spam list. Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Aleix Conchillo Flaque Sent: Thursday, 17 July 2003 6:06 PM To: [EMAIL PROTECTED] Subject: more spam hi, i have sent a message t

RE: ASN.1 Question...

2003-07-09 Thread Steven Reddie
Title: RE: ASN.1 Question... I can't think of anything myself, but it should only take a programmer a few minutes to write one. -Original Message-From: Daniel Gómez [mailto:[EMAIL PROTECTED]On Behalf Of Daniel GómezSent: Thursday, 10 July 2003 12:24 PMTo: [EMAIL PROTECTED]S

RE: ASN.1 Question...

2003-07-09 Thread Steven Reddie
That command will work if the data is stored as binary in the file. Is the data below the way it is stored in the file, as the characters "308201"...? If so, you will need to convert this to binary yourself and then use the command below. Regards, Steven -Original Message- From: [EMAIL

RE: RSA_private_decrypt take too long time:(

2003-07-01 Thread Steven Reddie
RSA does take a lot of time compared to, say, DES, but they're used for completely different things. To understand the difference you should read a book such as Applied Cryptography by Bruce Schneier, or a better place to start might be the RSA Crypto FAQ at http://www.rsasecurity.com/rsalabs/faq/

RE: RSA_private_decrypt take too long time:(

2003-07-01 Thread Steven Reddie
I don't think anyone on this list is going to be able to tell you if you have enough memory. Unless you can provide more information such as how long it is taking you are not likely to get any help. That function can take considerable time to complete and of course it will depend on the speed of

RE: openssl for windows ce "tchar" problem

2003-06-19 Thread Steven Reddie
rds, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Steven Reddie Sent: Friday, 20 June 2003 12:22 AM To: [EMAIL PROTECTED] Subject: RE: openssl for windows ce "tchar" problem Can you give me an example of an OpenSSL function that uses a c

RE: openssl for windows ce "tchar" problem

2003-06-19 Thread Steven Reddie
Can you give me an example of an OpenSSL function that uses a char type where you expect to be able to use a TCHAR type? Regards, Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Antonio d'Errico Sent: Thursday, 19 June 2003 7:48 PM To: [EMAIL PROTECT

RE: something maybe out of topic

2003-06-17 Thread Steven Reddie
For ASN.1, start with "A Layman's Guide to a Subset of ASN.1, BER, and DER".  You will find a copy at http://security.polito.it/asn1/layman.pdf.  A search on google for "distinguished name" should return you some useful information. -Original Message-From: [EMAIL PROTECTED] [ma

RE: SSL protocol packet format

2003-06-10 Thread Steven Reddie
mewhere has developed software that interacts directly with the layer 3 protocol datagrams themselves, this information should be available. Thanks, DCL On Tue, 2003-06-10 at 17:25, Steven Reddie wrote: > The fourth result returned by google.com for "SSL" is the "SSL 3.0 > Specifica

RE: Multithreaded; how to abort during read?

2003-02-18 Thread Steven Reddie
The only way I know of to solve this problem is to use non-blocking sockets, create a second socket pair to deliver the terminate message, and select() on the SSL socket and the terminate socket. When thread#2 wants to terminate thread#1 it sends a message down the terminate socket which causes th

RE: SOLVED: Using pcAnyhwere with public-key encryption and self-signed certificates

2002-12-29 Thread Steven Reddie
I haven't been following this thread. While there may be people on this list who highly value the documents that you've posted please remember that there are probably thousands of people on this list, and many of them don't know anything of, or care about, pcAnywhere. Posting only the link would

RE: Openssl-0.9.7-beta6/wcecompat on Pocket PC 2002 -- problem with time.h

2002-12-23 Thread Steven Reddie
Thanks Atul, I'll incorporate this into the next wcecompat release. Steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Atul Prakash Sent: Monday, 23 December 2002 6:41 AM To: [EMAIL PROTECTED] Subject: Openssl-0.9.7-beta6/wcecompat on Pocket PC 2002 -

RE: W2K Installation

2002-12-06 Thread Steven Reddie
The problem is that you've run nmake from the VC++ bin directory. Change to the c:\openssl-0.9.6g\directory and execute "nmake -f ms\ntdll.mak" from there. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Saturday, 7 December 2002 8

RE: SSL in windows CE

2002-12-02 Thread Steven Reddie
It was added in 0.9.7 beta 4. beta 5 will be out shortly and fixes a few build issues. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bala Kanagasabai Sent: Tuesday, 3 December 2002 5:46 PM To: [EMAIL PROTECTED] Subject: SSL in windows CE Can anyone te

RE: How to make in Visual C++ 6.0

2002-12-02 Thread Steven Reddie
That's odd. stdio_extras.h is only included if OPENSSL_SYS_WINCE is defined which is only defined if OPENSSL_SYSNAME_WINCE is defined which should only be defined if you ran "perl Configure VC-CE". Do you have any idea how stdio_extras.h is being included when it's wrapped with an "#ifdef OPENSSL

RE: How to make in Visual C++ 6.0

2002-12-02 Thread Steven Reddie
That file is only used for the Windows CE build. Are you building for Windows CE? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Desmond Ling Sent: Tuesday, 3 December 2002 11:02 AM To: [EMAIL PROTECTED] Subject: Re: How to make in Visual C++ 6.0 hi, s

RE: Visual Studio

2002-12-02 Thread Steven Reddie
Do you have an INCLUDE environment variable set with a path that includes the directory where your stdio.h lives? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Desmond Ling Sent: Tuesday, 3 December 2002 9:21 AM To: [EMAIL PROTECTED] Subject: Re: Visual

  1   2   >