ldd do not show cygcrypto-1.1.dll and/or cygssl-1.1.dll

Hello, I am trying to setup a lab to Code a program with C++ (g++ (GCC) 11.2.0) and OpenSSL (OpenSSL 1.1.1m 14 Dec 2021) and Cygwin. Below is my basic C++ skeleton to start with ... #ifndef __TLS_HPP__ #define __TLS_HPP__ #include #include #include #include #include #include #include #i

AW: Client-Certificate blocking without conrolling the issuing CA

_ Von: openssl-users im Auftrag von Michael Wojcik Gesendet: Freitag, 4. Dezember 2020 15:07:02 An: openssl-users@openssl.org Betreff: RE: Client-Certificate blocking without conrolling the issuing CA > From: openssl-users On Behalf Of Vincent > Truchsess - rockenstein AG > Sent: Frid

Client-Certificate blocking without conrolling the issuing CA

7;t be a problem but the amount of parallel connections require this to be handled by dedicated hardware which is limited to CRLs and OCSP. Is there any way we simply have overlooked that allows us to generate selfsigned CRLs for certificates issued by another CA using openssl? Thanks you fo

Re: OpenSSL 1.1 result in error: variable has initializer but incomplete type static BIO_METHOD

On Wed, 1 Jul 2020, Vincent Li wrote: > > Hi, > > I am running apache bench (ab) and ported it with OpenSSL 1.0 support on top > of mTCP support > > https://github.com/vincentmli/mtcp/commit/642835f786aa642ea0f20fe8db9b09054639453a#diff-02f7a72f514e6e0543e832d37450c2

OpenSSL 1.1 result in error: variable has initializer but incomplete type static BIO_METHOD

Hi, I am running apache bench (ab) and ported it with OpenSSL 1.0 support on top of mTCP support https://github.com/vincentmli/mtcp/commit/642835f786aa642ea0f20fe8db9b09054639453a#diff-02f7a72f514e6e0543e832d37450c251 but it breaks after I upgraded OpenSSL 1.0 to OpenSSL 1.1, I found there a

[openssl-users] version OPENSSL_1_1_1 not defined in file libcrypto.so.1.1 with link time reference

appreciated! Thanks in advance Vincent -- Vincent Le Bourlot http://vlebourlot.com -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Anyone willing or able to rescue the Ubsec engine?

Thanks Matt, I am pleased that ubsec is still in 1.0.2 and hopefully those systems that I am tied to that are currently using 1.0.1 don't leapfrog 1.0.2 into 1.1.0 before I am ready. I have a couple of busy months ahead but I will try to get a dedicated Jenkins box built on that spare PE840 with

[openssl-users] Anyone willing or able to rescue the Ubsec engine?

I recently started a small business and I can't afford new enterprise hardware just yet. However, I do make good use of older enterprise kit and currently have more than twenty BCM5823 crypto accelerators in use. I think that there may well be a lot of these cards still in use and it's going to be

Disabling SSL renegotiation on server side

Hi! With the release of THC-SSL-DOS tool, a popular work-around is to disable SSL renegotiation. It seems to be a non trivial task with OpenSSL as there is no flag to use to disable renegotiation. Looking at how it is done in Apache and nginx, I have concluded that the only way to disable ren

FECC

What is fundamental EC implementation in SSL? Thanks, Benix.

Tutorial to start with openssl.

All, I am a newbie, any tutorial to start with openssl? Benix.

Extract public key from certificate

in advanced, Vincent

segfault on ssl_test with padlock engine

/root/packages/openssl-0.9.8c/test' make[1]: *** [tests] Error 2 and syslog shows: kernel: ssltest[7655]: segfault at 24 ip 400a6617 sp bffe01f0 error 4 in libcrypto.so.0.9.8[4001a000+113000] Is there a way to get the padlock engine working in a debian stable package ? Thank you

regarding PKCS12

ature private keys and certificates??   I the description of the problem does not sound absurd. =P Thanks   Vincent  

Re: problem with UTF8 encoding

guage) which doing this conversion ? Vincent - Original Message - From: "Victor Duchovni" <[EMAIL PROTECTED]> To: Sent: Monday, September 26, 2005 2:24 PM Subject: Re: problem with UTF8 encoding > On Mon, Sep 26, 2005 at 02:07:40PM +0200, Vincent WYON wrote: > >&g

problem with UTF8 encoding

d asn1parse, the string is encoded to ASN1_T61STRING and not to ASN1_UTF8STRING. So why     I supposed that somebody test UTF8 encoding with stressed characters. So what can I do to use correctly UTF8 encoding ?   Excuse me for my bad english Thanks   vincent   smime.p7s Description: S/MIME cryptographic signature

RE: Compiler does not find INT_MAX

gards, Vincent -Original Message- From: Martin Witzel [mailto:[EMAIL PROTECTED]] Sent: 22 July 2002 10:35 To: [EMAIL PROTECTED] Subject: Compiler does not find INT_MAX Hello, When trying to compile a few routines from th eOpenSSL source, we noticed that the constant (?) INT_MAX is no

OpenSSL issues

Hi all!   I am having an issues installing Bind 9.2.1 on a machine with SSL support!   If I configure with: --with-openssl=/usr/bin/openssl   I get the Error: checking for OpenSSL library... using openssl from /usr/bin/openssl/lib and /usr/bin/openssl/include checking OpenSSL librar

Creating an RSA* from external key

Title: Message I am trying to use the openSSL RSA_public_encrypt() function using an RSA key which is externally loaded from 2 unsigned byte streams (e,n). What is the best way to fill in an RSA struct with values in this form so that I can begin making calls to the crypo functions? I could

force renegociate

Hello, I've got Apache and SSL (openSSL, modSSL) running on W2000server Two virtual host: -on 443, with certificate client require -on 8080, with certificate client optional.   I'd like my server to ask the client's certificate each time he goes from on virtual host to another, but it's not

Re: Cipher questions...

. Vincent T. On Thu, Jan 03, 2002 at 12:58:25AM -0800, David Schwartz wrote: > > On Wed, 2 Jan 2002 22:53:50 -0600, Vincent Toms wrote: > >Hello All, I have a question about what ciphers to use in an export ready > >app. > > >I then watch the connection and it picks one of

Cipher questions...

use one of these ciphers? I was also thinking of doing some stuff on the server, but for now I'll let the client pick until I figure a better way to check client location from the server. Does any one have suggestions as to what I should do? Thank yo

certificate for IPsec & outlook

while configuring IPsec. So is outlook, import was ok but always give me warning while sending secure email. Is there any special option for windows client while generating certificate? Thanks, Vincent Chen __ Do You Yahoo!? Send your FREE holiday gree

Using a proxy to my advantage

Hello all, I have a question I need some guidance on. I have built this app using OpenSSL for transport and a protocol of my design to transfer the data it is similar to HTTP. Any way at the moment I am running it over port 1977. However, in most networks this port is going to be

Password on a cert

ank you in advance Vincent Toms [EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: PGP 7.0 iQA/AwUBO2WNIOjdRDHvPVjREQK4TACgmfeFaH34SznZqIbnAy3Hq3Fed4sAn3Tm mB9T789esR2Dtp7vAHF16sia =lG4F -END PGP SIGNATURE- CONFIDENTIALITY NOTICE This message and any included attachments are f

Export questions.

cally pick a weaker cipher suite for those clients outside the US if that is a necessary measure. Thank you in advance. Vincent T. <[EMAIL PROTECTED]> __ OpenSSL Project http://www.openssl.org U

SSL doc request

At 10:47 AM 4/4/01 +0100, you wrote: >I've written a document as part of my own openSSL notes that describes >how to code an SSL client and server using the openSSL libraries. It's >a bit noddy but it does the job. > >These might be useful for people just starting (I know I was looking for >suc

experimentation questions

Hello all, I am relatively new to openssl, and I was experimenting with the client/server code in the demos/ssl directory, and I am trying to up the cipher that it uses. Can any one direct me where to look. Thank you much. Vincent Toms

Copy RSA key to memory

(sample please ) ? 3/ May seem trivial, but does anyone know about a reference (html, ps, pdf, ...) that would give a better overview of the code ?? Thanks for your help, Vincent __ OpenSSL Project

SSLVerifyClient

work??? Regards, Vincent __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Is there a list of "Objects" usable in certificates with their usage explanation?

ion library. ;) (Netscape, Microsoft, or maybe more...??) Thanks for your help!! Vincent __ OpenSSL Project http://www.openssl.org User Support Mailing List

using ssl with virtual host

how do i set up the ssl using virtual hosts. do you have a httpsd.conf about configuration ssl using virtual hosts. thanks, Vincent Kwandou __ OpenSSL Project http://www.openssl.org User

Re: Using OpenSSL in command line mode for our own CA?

Hi Rodrigo! Thanks for your guiding! I'll have a look!! Best Regards, Vincent Rodrigo Coronado wrote: > > This is a basic way to do that: > > http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html > > And so does this (but more complete): > > http://slww

chain certificates?

's cert) Someone, please help! (prefer also reply by e-mail) Thanks, Vincent __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAI

details about DES-CBC3

ectly the effective key strength is not 168 but 112: are marketing documents usually referring to the strength as 168 bits anyway?   Thanks!   Vincent  

Re: VC6 - conflict with objidl.h - fixed

Hi again,   I found my problem, I was simply including a .h file more than once. Sorry about that...   Vince   - Original Message - From: Vincent Levesque To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, November 09, 1999 6:07 PM Subject: VC6

VC6 - conflict with objidl.h

27;s really a conflict so I thought I'd ask if anyone else has faced that problem. Do you have any suggestions as to how I can work around that problem? Thanks in advance.   Vincent

compiling without rsa under windows

u for your help!   Vincent Levesque [EMAIL PROTECTED]

Using openssl safely...

g else that is not obvious and could reduce the security of openssl? Thanks in advance, Vincent Levesque __ OpenSSL Project http://www.openssl.org User Support Mailing List[E

General questions about Diffie-Hellman

hy is that? Also I'd like to know if the Diffie-Hellman parameters can be safely stored as cleartext in a file. (I'm pretty sure they can but I'd like to be 100% sure.) Finally is hardcoding the Diffie-Hellman parameters into an application safe? I'd appreciate any help you c

Re: Using the OpenSSL WITHOUT doing authentication

ith SSL_ALLOW_ADH (./Configure ... -DSSL_ALLOW_ADH). This enables ADH but doesn't put it into the default cipher list. You then have to set the cipher list to include the ADH ciphers. I think you also need to define DH parameters on the server side and to set the verify policy to SSL_VERIFY_NONE.

Re: ADH ciphers with SSL_ALLOW_ADH - do they work?

L);" to disable certificates. I think you also need to define DH parameters, at least on the server side, if you want to use ADH. I hope this will help... Vincent Levesque Jeffrey Altman wrote: > I am setting the cipher list on both my client and server > > ADH-DES-CBC3-SHA:ADH-DES

Re: Enabling ADH without disabling RSA

quot;) to enable it. With that last modification it works correctly. Thanks for the response. Vincent Bodo Moeller wrote: > Vincent Levesque <[EMAIL PROTECTED]>: > > > I'd like to be able to choose between ADH or RSA in my application > > without recompiling th

Re: Re: Library available outside the USA ?

territory" in those discussions... Thanks in advance... Vincent Levesque (I apologize if this doesn't get included in the correct thread, I replied to this message from the message archive...) From: Paul Preziosi Subject: Re: Library avail

Session ID Caching...

I'm using OpenSSL 0.9.2B and would like to enable/disable session id caching. Is this possible from the command line, or does the software need to be tweaked? Thanks, Vince p.s. sorry if the mailing list got two copies of this. *grin* Please respond to this one, as this is my work address

Session ID caching...

I'm using OpenSSL 0.9.2B and would like to enable/disable session id caching. Is this possible from the command line, or does the software need to be tweaked? Thanks, Vince __ OpenSSL Project ht

No Subject

Full_Name: Vincent J. Troisi Version: openssl-0.9.2b OS: IRIX 5.3 Submission from: iceman.colorado.edu (128.138.135.31) We followed the directions in the INSTALL document for

Re: compiling without rsa under windows

nyway. BTW I was in fact compiling without a number of ciphers (no-rsa, no-rc2, no-rc4, etc.). Thanks again!   Vincent - Original Message - From: Vincent Levesque To: [EMAIL PROTECTED] Sent: Wednesday, November 03, 1999 11:07 PM Subject: compiling without rsa