Re: SSL algorithms vs. all algorithms...

2010-04-07 Thread Dr. Stephen Henson
On Wed, Apr 07, 2010, Sad Clouds wrote: > On Tue, 6 Apr 2010 21:17:01 +0200 > "Dr. Stephen Henson" wrote: > > > Well that actual manual page is rather old and it still talks about > > PRNG initialisation which dates from the time OpenSSL didn't handle > > that automatically on many platforms. >

Re: SSL algorithms vs. all algorithms...

2010-04-07 Thread Sad Clouds
On Tue, 6 Apr 2010 21:17:01 +0200 "Dr. Stephen Henson" wrote: > Well that actual manual page is rather old and it still talks about > PRNG initialisation which dates from the time OpenSSL didn't handle > that automatically on many platforms. So are you saying there is no need to seed PRNG? Is th

Re: SSL algorithms vs. all algorithms...

2010-04-06 Thread Victor Duchovni
On Tue, Apr 06, 2010 at 09:17:01PM +0200, Dr. Stephen Henson wrote: > > Has the guidance to developers who use OpenSSL for TLS/SSL rather than > > as general-purpose cryptography toolkit changed wrt. library initialization? > > [...] > > I suppose it makes sense to add the SHA2 algorithms to SSL_

Re: SSL algorithms vs. all algorithms...

2010-04-06 Thread Dr. Stephen Henson
On Tue, Apr 06, 2010, Victor Duchovni wrote: > > http://cvs.openssl.org/chngview?cn=19536 > > -SSL_library_init() only registers ciphers. Another important initialization > -is the seeding of the PRNG (Pseudo Random Number Generator), which has to > -be performed separately. > +SSL_libra

SSL algorithms vs. all algorithms...

2010-04-06 Thread Victor Duchovni
http://cvs.openssl.org/chngview?cn=19536 -SSL_library_init() only registers ciphers. Another important initialization -is the seeding of the PRNG (Pseudo Random Number Generator), which has to -be performed separately. +SSL_library_init() mainly adds ciphers and digests used directly by S