Re: Diffie hellman - Open SSL Client and C# Server

2014-04-23 Thread cvishnuid
DH Exchange algorithm has to be negotiated in the SSL handshake . I was assuming that DH has to be implemented out side the SSL. I am wrong I had implemented complete with SSL from starch .As .Net SSL stream don't support Diffie Hellman and it worked i am able to communicated with DH Open SSL cl

RE: Heart bleed with 0.9.8 and 1.0.1

2014-04-14 Thread cvishnuid
Now i understood the concept .. Till now i am assuming that attacker will send only the heart beat request with out performing any SSL handshake messages. I was wrong . Attacker will establish a new connection and send all the handshake messages and then the faked heart beat request . -

RE: Heart bleed with 0.9.8 and 1.0.1

2014-04-14 Thread cvishnuid
In my scenario if the client don't respond for heart beat request then my client is safer ? -- View this message in context: http://openssl.6102.n7.nabble.com/Heart-bleed-with-0-9-8-and-1-0-1-tp49300p49402.html Sent from the OpenSSL - User mailing list archive at Nabble.com. _

Re: Heart bleed with 0.9.8 and 1.0.1

2014-04-14 Thread cvishnuid
day, April 13, 2014, Jin Jiang [via OpenSSL] < ml-node+s6102n49373...@n7.nabble.com> wrote: > Hi, > I think your client is vulnerable, if the attacker can touch your client. > > Regards, > Jin > > > On Fri, Apr 11, 2014 at 5:32 PM, cvishnuid <[hidden > email]<h

Heart bleed with 0.9.8 and 1.0.1

2014-04-11 Thread cvishnuid
HiI am having 0.9.8 open ssl libraries in my server and 1.0.1 in my client.Am I venerable to heart bleed attach?Regards,Vishnu. -- View this message in context: http://openssl.6102.n7.nabble.com/Heart-bleed-with-0-9-8-and-1-0-1-tp49300.html Sent from the OpenSSL - User mailing list archive at N

Re: Diffie hellman - Open SSL Client and C# Server

2014-01-16 Thread cvishnuid
May i know the packet structure openssl uses for exchanging public parameters -- View this message in context: http://openssl.6102.n7.nabble.com/Diffie-hellman-Open-SSL-Client-and-C-Server-tp47524p48157.html Sent from the OpenSSL - User mailing list archive at Nabble.com. _

Re: Diffie hellman - Open SSL Client and C# Server

2013-12-01 Thread cvishnuid
Thanks for reply matt.Yeah your correct I want implement completely from starch as my agenda is to have complete manged code in my server app and i did't find any manged manged crypto library with will is compatable with Open SSL Client. Client will still remain using with Open SSL libraries .There

Diffie hellman - Open SSL Client and C# Server

2013-11-30 Thread cvishnuid
I am newbie to Open SSL . I am already have an application where server and client are using Openssl libraries for Diffie hellman encryption.I wanna convert server to compleatly to C# . I have .pem file in both server and client so i assume we have same DH parameters (g and p) in client and