problem in TLS in easy_tls demo

2006-01-24 Thread Praveen Jothi
Dear all,   I am new to openSSL and an inexperienced C programmer. After compiling openssl library, I was going through the demos for understanding. In the demo after compilation of easy_tls with few warnings, when I run the server and client, it gets connected and able to write and read. But when

Re: problem in TLS in easy_tls demo

2006-01-24 Thread Bernhard Froehlich
Praveen Jothi wrote: Dear all, I am new to openSSL and an inexperienced C programmer. After compiling openssl library, I was going through the demos for understanding. In the demo after compilation of easy_tls with few warnings, when I run the server and client, it gets connected and able t

Re: Convert C++ to C# OpenSSL app

2006-01-24 Thread Hashim Saleem
One other option is to write a managed wrapper in visual C++ .net using the IJW (It just works) technology. This way, the resulting wrapper (.net assembly) could be called from any .net supported language e.g. C#, VB.net, J# etc. I can provide an example of this if it is required. Regards, Ha

Re: problem in TLS in easy_tls demo

2006-01-24 Thread Praveen Jothi
Dear Bernhard and others,   you are right probably. The CA certificate says a different organization. and the client certificate says its issued by a different organization. Unforuntately my experience in C program is not enough to check out or rather edit the C code. I would like to know, if I cre

Can I have SSL for peer authentication only? (and not for data encryption)

2006-01-24 Thread Urjit Gokhale
Hi all,   I am planning to use SSL for the communication between my client and server. The idea is to use SSL *mainly* for peer authentication and validation (Both server and client authentication by means of certificates). Regarding the data encryption, I would like to have it as an optiona

Re: problem in TLS in easy_tls demo

2006-01-24 Thread Praveen Jothi
The following is in the demo code.   r = SSL_CTX_load_verify_locations(ret,a.ca_file,NULL)   I am wondering if NULL is the right parameter to pass through for CA path ?   thank you very much.   regards, Pjothi  On 1/24/06, Praveen Jothi <[EMAIL PROTECTED]> wrote: Dear Bernhard and others,   you ar

Re: Can I have SSL for peer authentication only? (and not for data encryption)

2006-01-24 Thread Alain Damiral
Hi and welcome, I haven't thought hardly about what you're trying to do but my first intuition tells me that encryption also has some part to play in authentication that you're missing. My knowledge of SSL is limited but I think it is safe to say that private/public key (assymetric) encryption

Re: problem in TLS in easy_tls demo

2006-01-24 Thread Samy Thiyagarajan
The following is in the demo code.   r = SSL_CTX_load_verify_locations(ret,a.ca_file,NULL)   I am wondering if NULL is the right parameter to pass through for CA path ?   -- hi.. yes the third parameter is the CA path and you can pass NULL..(this is simple) .if you sp

Re: Can I have SSL for peer authentication only? (and not for data encryption)

2006-01-24 Thread Bernhard Froehlich
Urjit Gokhale wrote: Hi all, I am planning to use SSL for the communication between my client and server. The idea is to use SSL *mainly* for peer authentication and validation (Both server and client authentication by means of certificates). Regarding the data encryption, I would like to h

RV: Convert C++ to C# OpenSSL app

2006-01-24 Thread Daniel Díaz Sánchez
Hi, There is no problem to use your code with C#. What you need to do is to create a wrapper. First create a dll (a confortable way to do that) with the functions you need to use from C# ( in your case, rename tmain to for example TLS_whatever) and then user platform invocation to access from C#

Re: Can I have SSL for peer authentication only? (and not for data encryption)

2006-01-24 Thread Richard Koenning
Bernhard Froehlich wrote: Maybe this would be possible using the NULL cipher combined with DH authentication... (The official NULL cipher suites use RSA authentication.) The answer to the first question of the OP is yes, use a NULL cipher suite. But if your problem is only performance I don

Re: Engine issue with LUNA CA3 HSM

2006-01-24 Thread Adam Tresch
Yo, [EMAIL PROTECTED] wrote: Hi Adam, Thanks for your answer on the OpenSSL mailing list. Firstly, I'm sorry for contacting you with your personal email address. Currently I can't join the OpenSSL mailing list (my company has problems with its reverse DNS zone). > openssl req -engine Luna

How do I find out manuals for X509 functions

2006-01-24 Thread youyou
Hello, As I mentioned in the subject, I can not find out online manuals for X509 like a X509_STORE_CTX_get_error_depth and so on.. This question might be quite rudimentrary question, but I'm in difficulty not to find online manual X509 function. I did "man X509_STORE_CTX_get_error_depth" from my

Re: problem in TLS in easy_tls demo

2006-01-24 Thread Bernhard Froehlich
Praveen Jothi wrote: The following is in the demo code. r = SSL_CTX_load_verify_locations(ret,a.ca_file,NULL) I am wondering if NULL is the right parameter to pass through for CA path ? Yes, as the comment in my version (0.9.8a) says it just wont use a CA directory but will put all cert