[PATCH] P7 Verification of Non-Data Types

2001-12-19 Thread Leonard Janke


Right now verification only seem to be supported if
the signed data is of type DATA. According to
the standard other types can be signed, however. Here
is a patch to allow verification of data types
which are octet strings but not necessarily
of type DATA.

Leonard Janke


 p7doit.patch 



p7doit.patch
Description: Binary data


Re: OFB mode for AES

2001-12-19 Thread Stephen Sprunk

Thus spake Ken Murchison:
 Are there any plans to add OFB mode support to AES?  Most, if not all of
 the other ciphers have support for OFB, but AES does not.

I'll add CFB and OFB as soon as my other patches make it into the
snapshots.  Do you need 64-bit, or will 128-bit work?

S

-- 
Stephen Sprunk  So long as they don't get violent, I want to
CCIE #3723 let everyone say what they wish, for I myself have
K5SSSalways said exactly what pleased me.  --Albert Einstein
__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: EAP-TLS

2001-12-19 Thread Raghu

  Questions:
  1. Is BIO interface suitable for the above scenario
  and can it be used to handle both handshaking  data.
  2. What are the different TLS/SSL APIs that can provide the following
  functionality
  A. Plain text message to TLS-message.
  B. TLS-message to Plain text message.
  C. TLS Handshaking APIs.
 
  Please provide any sort of information in this regard.

 Look at demos/state_machine and demos/tunala.

Thankyou for the information. I was seeing Openssl 0.9.6b.
It doesnot contain the above demos.

I have been looking ssl source code, tunala 
mail archives for the past one week
and still have some questions.

1. In state_machine_churn(), we loop twice because
there might be some incomplete data in
any one of the i/p buffers. Is this is right? If not,
please help me in understanding this.
( I did read all the mails related to churn()
with subject GSS-API Interface )

2. Since EAP server can have multiple SSL connections,
how can I associate the received data with/belongs to a
specific SSL connection.

3. How to identify, if data contained handshake message
or the actual data ?

4. I am thinking that SSL_read()  SSL_write() handles
even handshakes, please correct me if I am wrong.


Please help me.

-Raghu




__
OpenSSL Project http://www.openssl.org
Development Mailing List   [EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]