The Greatest Porn on the New : White girls

2001-03-18 Thread [EMAIL PROTECTED]


The Greatest Porn on the New : White girls blonde blue eyes Pink

#1 http://www.newmember.com/cgi-bin/sexbucks/sexbucks.cgi?5013279

We promise you wont be sorry

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



The Greatest Porn on the New : White girls

2001-03-18 Thread [EMAIL PROTECTED]


The Greatest Porn on the New : White girls blonde blue eyes Pink

#1 http://www.newmember.com/cgi-bin/sexbucks/sexbucks.cgi?5013279

We promise you wont be sorry

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[PATCH] OpenSSL 0.9.6 for Mac OS X

2001-03-18 Thread samalone


I think that I've successfully ported OpenSSL 0.9.6 to Mac OS X. The 
libraries for version 0.9 of OpenSSL are installed in Mac OS X by 
default, but they do not include header files or source code. This patch 
will allow you to perform a complete install of OpenSSL that you can use 
to build other applications.

Note that Apple's version of OpenSSL is built as a pair of dynamic 
shared libraries, and because Apple's linker prefers dynamic libraries 
to static ones, this means that you basically have to build the new 
version of OpenSSL as a dynamic shared library. It also means that you 
must install the new dynamic shared libraries before you can test your 
installation.

My recommendation is to install OpenSSL into /usr/local/lib, which falls 
earlier in the default Mac OS X search path than the /usr/lib that Apple 
uses. This allows you to use your own build of OpenSSL without removing 
Apple's version. I haven't automated the installation of the dynamic 
shared libraries yet, so the installation sequence looks like this:

./config --prefix=/usr/local --openssldir=/usr/local/ssl shared 
threads
make
sudo make install
sudo cp -R *.dylib /usr/local/lib
make test

With a little more work, I'm sure that the installation process could be 
better automated, but I haven't had time to figure out the Makefile 
enough to do this without breaking other platforms.

Please send any comments or questions on this patch to 
[EMAIL PROTECTED].

--Stuart A. Malone
   [EMAIL PROTECTED]

   Llamagraphics, Inc.
   Creators of Life Balance software for Palm OS
   http://www.llamagraphics.com/




 macosx.patch


You have recieved a instant kiss from Amy 3

2001-03-18 Thread [EMAIL PROTECTED]


You have recieved a instant kiss from Amy 3

click here to recieve it

www.xooma.cjb.net

Your Instant Kiss Password is "pup1"
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



You have recieved a instant kiss from Amy 3

2001-03-18 Thread [EMAIL PROTECTED]


You have recieved a instant kiss from Amy 3

click here to recieve it

www.xooma.cjb.net

Your Instant Kiss Password is "pup1"
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



You have recieved a instant kiss from Amy 3

2001-03-18 Thread [EMAIL PROTECTED]


You have recieved a instant kiss from Amy 3

click here to recieve it

www.xooma.cjb.net

Your Instant Kiss Password is "pup1"
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



You have recieved a instant kiss from Amy 3

2001-03-18 Thread [EMAIL PROTECTED]


You have recieved a instant kiss from Amy 3

click here to recieve it

www.xooma.cjb.net

Your Instant Kiss Password is "pup1"
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



You have recieved a instant kiss from Amy 3

2001-03-18 Thread [EMAIL PROTECTED]


You have recieved a instant kiss from Amy 3

click here to recieve it

www.xooma.cjb.net

Your Instant Kiss Password is "pup1"
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[STATUS] OpenSSL (Sun 18-Mar-2001)

2001-03-18 Thread OpenSSL Project


  OpenSSL STATUS   Last modified at
  __   $Date: 2001/02/22 15:10:11 $

  DEVELOPMENT STATE

o  OpenSSL 0.9.7:  Under development...
o  OpenSSL 0.9.6a: Bugfix release -- under development...
o  OpenSSL 0.9.6:  Released on September 24th, 2000
o  OpenSSL 0.9.5a: Released on April  1st, 2000
o  OpenSSL 0.9.5:  Released on February  28th, 2000
o  OpenSSL 0.9.4:  Released on August09th, 1999
o  OpenSSL 0.9.3a: Released on May   29th, 1999
o  OpenSSL 0.9.3:  Released on May   25th, 1999
o  OpenSSL 0.9.2b: Released on March 22th, 1999
o  OpenSSL 0.9.1c: Released on December  23th, 1998

  RELEASE SHOWSTOPPERS

o

  AVAILABLE PATCHES

o

  IN PROGRESS

o Steve is currently working on (in no particular order):
ASN1 code redesign, butchery, replacement.
OCSP
EVP cipher enhancement.
Enhanced certificate chain verification.
Private key, certificate and CRL API and implementation.
Developing and bugfixing PKCS#7 (S/MIME code).
Various X509 issues: character sets, certificate request extensions.
o Geoff and Richard are currently working on:
ENGINE (the new code that gives hardware support among others).
o Richard is currently working on:
UTIL (a new set of library functions to support some higher level
  functionality that is currently missing).
Shared library support for VMS.
OCSP
Kerberos 5 authentication
Constification

  NEEDS PATCH

o  apps/ca.c: "Sign the certificate?" - "n" creates empty certificate file

o  OpenSSL_0_9_6-stable:
   #include openssl/e_os.h in exported header files is illegal since
   e_os.h is suitable only for library-internal use.

o  Whenever strncpy is used, make sure the resulting string is NULL-terminated
   or an error is reported

  OPEN ISSUES

o  crypto/ex_data.c is not really thread-safe and so must be used
   with care (e.g., extra locking where necessary, or don't call
   CRYPTO_get_ex_new_index once multiple threads exist).
   The current API is not suitable for everything that it pretends
   to offer.

o  The Makefile hierarchy and build mechanism is still not a round thing:

   1. The config vs. Configure scripts
  It's the same nasty situation as for Apache with APACI vs.
  src/Configure. It confuses.
  Suggestion: Merge Configure and config into a single configure
  script with a Autoconf style interface ;-) and remove
  Configure and config. Or even let us use GNU Autoconf
  itself. Then we can avoid a lot of those platform checks
  which are currently in Configure.

o  Support for Shared Libraries has to be added at least
   for the major Unix platforms. The details we can rip from the stuff
   Ralf has done for the Apache src/Configure script. Ben wants the
   solution to be really simple.

   Status: Ralf will look how we can easily incorporate the
   compiler PIC and linker DSO flags from Apache
   into the OpenSSL Configure script.

   Ulf: +1 for using GNU autoconf and libtool (but not automake,
which apparently is not flexible enough to generate
libcrypto)


o  The perl/ stuff needs a major overhaul. Currently it's
   totally obsolete. Either we clean it up and enhance it to be up-to-date
   with the C code or we also could replace it with the really nice
   Net::SSLeay package we can find under
   http://www.neuronio.pt/SSLeay.pm.html.  Ralf uses this package for a
   longer time and it works fine and is a nice Perl module. Best would be
   to convince the author to work for the OpenSSL project and create a
   Net::OpenSSL or Crypt::OpenSSL package out of it and maintains it for
   us.

   Status: Ralf thinks we should both contact the author of Net::SSLeay
   and look how much effort it is to bring Eric's perl/ stuff up
   to date.
   Paul +1

  WISHES

o 
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: [PATCH] OpenSSL 0.9.6 for Mac OS X

2001-03-18 Thread Stuart A. Malone

Richard Levitte - VMS Whacker wrote:

 Could you take a look at
 ftp://ftp.openssl.org/snapshot/openssl-SNAP-2001031?.tar.gz?  There
 were some darwin patches inserted there some time ago.

I just downloaded openssl-SNAP-200103117.tar.gz and tried the Darwin support
in it.  Unfortunately, it doesn't build cleanly under Mac OS X release
candidate.  The link of openssl dies with about 50 undefined symbols.

Based on what I'm seeing in the Configure file, I'm guessing that Brad
Dominy (who wrote the Darwin support in the SNAP) was using raw Darwin
rather than full Mac OS X.  In the long run, it may be necessary to
distinguish between the two platforms, although I'd guess that very soon now
(like on March 24) the Mac OS X support is going to become more important
than the raw Darwin support.

I'll contact Brad Dominy by email.  Perhaps the two of us can hash out the
differences and come up with a unified Darwin configuration that works for
everybody -- or at least a way of distinguishing the two cases so that
config selects the right one automatically.

Thanks,

--Stuart A. Malone
  [EMAIL PROTECTED]


__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RSA Key Generation and Entropy

2001-03-18 Thread David Quint
Title: RSA Key Generation and Entropy





This email is to be read subject to the disclaimer below.



Hi,


I'm having trouble generating unique pairs of RSA keys. It seems that no matter how many times and with what kind of data I add using RAND_add, the same keys get generated over and over again. If I generate a particular key set, then 2 or 3 key sets later a memcmp confirms it and the original match.

I currently generate a large number of GUIDs and add them with RAND_add. 


Every call to RAND_status returns 1 (indicating enough entropy) then I call RSA_generate_key and compare the private key to previous only to find they match.

What order of function calls should be made to generate unique keys? Also, what is the best way to ensure enough entropy on a win32 machine without the /dev/random?

Any help or sample key generation code would be extremely helpful.


David




The contents of this message are the views of the Author and do not
necessarily reflect the views of PARKERS' EDGE PTY LIMITED.


__


Unencrypted electronic mail is not secure and may not be authentic.


If you have any doubts as to the contents please telephone to confirm.
This electronic transmission is intended only for those to whom it is
addressed. It may contain information that is confidential, privileged or
exempt from disclosure by law. Any claim to privilege is not waived or lost
by reason of mistaken transmission of this information.


If you are not the intended recipient you must not distribute or copy this
transmission and should please notify the sender. Your costs for doing this
will be reimbursed by the sender.


Parkers' Edge +61 2 9249 8900
__






Re: [PATCH] OpenSSL 0.9.6 for Mac OS X

2001-03-18 Thread Richard Levitte - VMS Whacker

From: "Stuart A. Malone" [EMAIL PROTECTED]

samalone I'll contact Brad Dominy by email.  Perhaps the two of us
samalone can hash out the differences and come up with a unified
samalone Darwin configuration that works for everybody -- or at least
samalone a way of distinguishing the two cases so that config selects
samalone the right one automatically.

That would be really great.  Thank you.

-- 
Richard Levitte   \ Spannvgen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \  SWEDEN   \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See http://www.stacken.kth.se/~levitte/mail/ for more info.

__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



[OFF TOPIC]Data compression

2001-03-18 Thread François Désarménien

Hello you all,

Sorry for the noise, but I'm currently planning
a brief explanation of SSL/TLS for my Master
cryto course and I have a very specific question
to ask you, as I don't want to say anything
wrong.

I know that OpenSSL implements data compression,
and I figure it's done before any cryptographic
operation (compressing mostly noise leads to
almost nothing).

My question is : does compression occurs before
MAC is computed or later on both data-chunks
and their MAC ?

I'l try to find some time to go to the sources,
but having this answered quickly would save me
a lot of time.

Again, sorry for the noise and thank you for
your time,

Sincerly,

Franois
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]