Re: call for decryption..

2000-09-20 Thread SCH
Set the callback function in PEM_read_bio_RSAPrivateKey(bp,x,cb,u), 'cb' is the callback function. which is defined in pem.h, and the default password gaining function is 'def_callback' in pem_lib.c. - Original Message - From: Shashank [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL

Re: rewriting the ASN1

2000-09-20 Thread Jonathan Cloots
If you are interested maybe you can use the IBM Jonah Implementation? This is an excerpt of a PKCS7 structure implemented in the Jonah ASN1 Framework... class EXPORTCLASS EncryptedContentInfo : public asn_sequence { public: ContentType contentType; AlgorithmIdentifier

Re: rewriting the ASN1

2000-09-20 Thread Richard Levitte - VMS Whacker
From: "SCH" [EMAIL PROTECTED] shichunhui I am to build some PKIX stuff with the current ASN1 routines shichunhui in Openssl.So If the ASN1 routine is to change, I suggest the shichunhui progress should keep updated in maillist. [EMAIL PROTECTED] :-). -- Richard Levitte \ Spannvägen 38, II

Re: RAND_poll() on NT4

2000-09-20 Thread Jeffrey Altman
From: Jeffrey Altman [EMAIL PROTECTED] jaltman At least one independent source submitted the fix jaltman jaltman LMSTR - LPWSTR And that also allows the L"..." syntax? Is that guaranteed to work everywhere or will we have another battle about this after beta3 gets out (should

Re: rewriting the ASN1

2000-09-20 Thread Dr S N Henson
SCH wrote: What is the goal of rewriting the ASN1 code? Will Steve try some ASN1 compiler? As to my vision, The c code generated by ASN1 compiler is dirty. Maybe we can write the ASN1 code in openssl with C++. I am to build some PKIX stuff with the current ASN1 routines in Openssl.So

[Documentation] SSL_get_peer_certificate and friends

2000-09-20 Thread Lutz Jaenicke
Another small chunk of manual pages, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/ Lehrstuhl Allgemeine Elektrotechnik Tel. +49 355 69-4129 Universitaetsplatz 3-4, D-03044

[Documentation] SSL_CTX_new and two typos

2000-09-20 Thread Lutz Jaenicke
Hi! copying pages as skeleton to new ones is not always the best idea... Please find attached two typos and two new pages. Best regards, Lutz -- Lutz Jaenicke [EMAIL PROTECTED] BTU Cottbus http://www.aet.TU-Cottbus.DE/personen/jaenicke/

Is the BN/DSA issue gone

2000-09-20 Thread Richard Levitte - VMS Whacker
I was asked to wait with beta 3 until that issue was solved. I've seen messages that seem to indicate that it is, but I'd like to have that verified, to minimise the possibility for mistake. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \

Re: Is the BN/DSA issue gone

2000-09-20 Thread Bodo Moeller
On Wed, Sep 20, 2000 at 05:19:26PM +0200, Richard Levitte - VMS Whacker wrote: I was asked to wait with beta 3 until that issue was solved. I've seen messages that seem to indicate that it is, but I'd like to have that verified, to minimise the possibility for mistake. It's solved.

Re: rewriting the ASN1

2000-09-20 Thread Michael Sierchio
Dr S N Henson wrote: One goal is to reduce code bloat. As such I want to avoid any option that results in lots of code. I'm planning an "intelligent" encoder and decoder that gets passed a tiny structure describing the ASN1 structure to encode or decode. It will be possible to hand code

Re: Is the BN/DSA issue gone

2000-09-20 Thread Richard Levitte - VMS Whacker
From: Bodo Moeller [EMAIL PROTECTED] moeller It's solved. Thanks. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +46-709-50 36 10 Procurator Odiosus Ex Infernis

Re: rewriting the ASN1

2000-09-20 Thread Dr S N Henson
Michael Sierchio wrote: Dr S N Henson wrote: One goal is to reduce code bloat. As such I want to avoid any option that results in lots of code. I'm planning an "intelligent" encoder and decoder that gets passed a tiny structure describing the ASN1 structure to encode or decode.

Patch to OpenSSL crypto/rand/rand_win.c to solve entropy failures on NT4

2000-09-20 Thread Jeffrey Altman
This patch should solve all of the entropy failures on NT4 as reported to openssl-users. The patch: . corrects prototypes for NET API functions to work with VC6 headers . ensures that Registry Performance Data will not be queried on W2K . provides a conservative non-zero value for the

Re: VMS install 0.9.6-beta2

2000-09-20 Thread Francesco Gennai
Francesco.Gennai Could I hope for such patch ? On my very personal playground, ftp://ftp.stacken.kth.se/pub/random/levitte, you will find the following files: openssl-2920.tar openssl-engine-2920.tar Richard, I can confirm that my scripts that pipe the output

Re: VMS install 0.9.6-beta2

2000-09-20 Thread Richard Levitte - VMS Whacker
From: Francesco Gennai [EMAIL PROTECTED] Francesco.Gennai Richard, Francesco.Gennai I can confirm that my scripts that pipe the output of the Francesco.Gennai openssl "x509", "verify" and "crl" applications Francesco.Gennai are newly successfully working. Perfect. And I assume you had no

Re: Engine Stuff

2000-09-20 Thread Geoff Thorpe
Hi there, On Mon, 18 Sep 2000, Ben Laurie wrote: I've had some time to start looking at the engine code, and the first thing I notice is that the various engines fill in the functions they don't provide by getting hold of the "standard" engine, and copying them across. It seems to me that

[Documentation] some new, some changed

2000-09-20 Thread Lutz Jaenicke
44 Cottbus Fax. +49 355 69-4153 diff -r -u --new-file openssl-SNAP-2920-vanilla/doc/ssl/SSL_CTX_set_ssl_version.pod openssl-SNAP-2920/doc/ssl/SSL_CTX_set_ssl_version.pod --- openssl-SNAP-2920-vanilla/doc/ssl/SSL_CTX_set_ssl_version.pod Thu Jan 1 01:00:00 1970 +++ op

Re: [Documentation] some new, some changed

2000-09-20 Thread Richard Levitte - VMS Whacker
From: Lutz Jaenicke [EMAIL PROTECTED] Lutz.Jaenicke I have further changed some to the "NOTES" style Lutz.Jaenicke recommended by Richard Levitte and added Lutz.Jaenicke SSL_CTX_set_ssl_version. Or rather, put up for discussion. The rest was my opinion. Note also that I reverted the changes I

RE: rewriting the ASN1

2000-09-20 Thread Frank Balluffi
Steve, If the decoder possesses meta data, it would be nice for the decoder to report the location and cause of errors. For example, if the third extension in a certificate contained the illegal object identifier value 1.9.3.4, the decoder could report the equivalent of something like:

[US PATCH] openssl-0.9.6-beta2 for HP MPE/iX OS

2000-09-20 Thread BIXBY,MARK (HP-Cupertino,ex1)
Hi openssl-dev and [EMAIL PROTECTED], Please see attached for a portability patch that enables OpenSSL 0.9.6-beta2 to run on the HP MPE/iX OS. Am I in time to get this incorporated into what will become 0.9.6? I hurried as soon as I saw yesterday's announcement that US contributions would now

Re: rewriting the ASN1

2000-09-20 Thread Dr S N Henson
Frank Balluffi wrote: Steve, If the decoder possesses meta data, it would be nice for the decoder to report the location and cause of errors. For example, if the third extension in a certificate contained the illegal object identifier value 1.9.3.4, the decoder could report the

Re: Patch to OpenSSL crypto/rand/rand_win.c to solve entropy failures onNT4

2000-09-20 Thread zhu qun-ying
Jeffrey Altman wrote: This patch should solve all of the entropy failures on NT4 as reported to openssl-users. The patch: . corrects prototypes for NET API functions to work with VC6 headers . ensures that Registry Performance Data will not be queried on W2K . provides a

Re: rewriting the ASN1

2000-09-20 Thread SCH
To rewrite ASN1 code will change almost everything in openssl. the current nid--oid definig, the signing ,verifing of RSA and DSA, then the cert and request management, PKCS5,7,8,12, then the SSL handshake, the last but necessary, the demos and apps. I haven't look into the S/MIME, but I think it

Re: Patch to OpenSSL crypto/rand/rand_win.c to solve entropy failures onNT4

2000-09-20 Thread Jeffrey Altman
zhu qun-ying, would you please apply this patch and confirm to [EMAIL PROTECTED] that it compiles on VC6 and mwing32 and that it solves the problem on your NT4 SP6 system. If you can confirm this before Richard needs to start building Beta 3 it would be appreciated. - Jeff call me

Re: [US PATCH] openssl-0.9.6-beta2 for HP MPE/iX OS

2000-09-20 Thread Richard Levitte - VMS Whacker
From: "BIXBY,MARK (HP-Cupertino,ex1)" [EMAIL PROTECTED] mark_bixby Please see attached for a portability patch that enables mark_bixby OpenSSL 0.9.6-beta2 to run on the HP MPE/iX OS. OK, I'll put that one in. For everyone else: you have probably noticed that there are some patches that I take

Re: Patch to OpenSSL crypto/rand/rand_win.c to solve entropy failures onNT4

2000-09-20 Thread Richard Levitte - VMS Whacker
From: zhu qun-ying [EMAIL PROTECTED] qyzhu Ya. It works. SNAP-2919 test cases passed for mingw32/VC6 qyzhu under NT-SP6. cygwin built is fine also. Perfect. Thanks for the help and for the unified patch. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \

Re: Patch to OpenSSL crypto/rand/rand_win.c to solve entropy failures onNT4

2000-09-20 Thread Richard Levitte - VMS Whacker
From: Jeffrey Altman [EMAIL PROTECTED] jaltman Richard: jaltman jaltman do you feel comfortable enough to put this in for beta 3? Yes. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN

Re: rewriting the ASN1

2000-09-20 Thread Peter Sylvester
Thanks, the current problem was not to set that attribute, but not to break in the pkcs7 or smime routines when you get a message having this attribute. If you are interested maybe you can use the IBM Jonah Implementation? This is an excerpt of a PKCS7 structure implemented in the Jonah

Re: VMS install 0.9.6-beta2

2000-09-20 Thread Richard Levitte - VMS Whacker
Francesco.Gennai Could I hope for such patch ? On my very personal playground, ftp://ftp.stacken.kth.se/pub/random/levitte, you will find the following files: openssl-2920.tar openssl-engine-2920.tar They contain my changes that add this line-buffering filter. I've done some

call for decryption..

2000-09-20 Thread Shashank
Hi, can anyone tell me which method is called to get access to passphrase encrypted private key...i.e. the method that takes passphrase and uses to decrypt the private keys. I need to know immediately.I have to use in my application. shashank

Re: VMS install 0.9.6-beta2

2000-09-20 Thread Francesco Gennai
From: Francesco Gennai [EMAIL PROTECTED] Francesco.Gennai From: Francesco Gennai [EMAIL PROTECTED] Francesco.Gennai Francesco.Gennai Francesco.Gennai My first problem is the change in the output of X509 command. Francesco.Gennai Francesco.Gennai Francesco.Gennai Francesco.Gennai I had