Re: Error with PEM_write_RSAPrivateKey function

2005-04-20 Thread Angel Martinez Gonzalez
Hello: This is the error message that I obtained: The instruction in 0x78468216 refers to memory in 0x0010. Memory can not written. I send you a image with this error message. Thanks. - Original Message - From: Nils Larsch [EMAIL PROTECTED] To: openssl-users@openssl.org Sent:

Re: Error with PEM_write_RSAPrivateKey function

2005-04-20 Thread Nils Larsch
Angel Martinez Gonzalez wrote: Hello: This is the error message that I obtained: The instruction in 0x78468216 refers to memory in 0x0010. Memory can not written. I send you a image with this error message. did you read the FAQ item I've compiled a program under Windows and it crashes: why? ?

Re: Timestamp server and certificate creation

2005-04-20 Thread Sebastiano Zabert
Alle 22:07, martedì 19 aprile 2005, Nils Larsch ha scritto: Sebastiano Zabert wrote: Hi, I'm trying to setup a timestamp server on a linux box with debian. ... The certificate is present and it is world readable, so i think the problem is the certificate, a generic self signed

Multi process Server and openssl

2005-04-20 Thread martin.p.bradley
Folks, We have come up against a problem while trying to integrate the openssl library into our server. The server architecture is multi process where child processes handle requests. Each process attaches to a single shared memory segment which holds common configuration data. Our

Re: Multi process Server and openssl

2005-04-20 Thread Victor Duchovni
On Wed, Apr 20, 2005 at 10:32:20AM +0100, [EMAIL PROTECTED] wrote: During the TLS negotiation and after the secure channel is set up different child processes will handle the request and will need access to the SSL connection. The SSL connections are allocated and freed using openssl library

sk_X509_push vs sk_x509_free

2005-04-20 Thread Calista
Hi, I add certificates to the store using sk_x509_push and then free it later with sk_x509_free, but it doesn't seem to free memory. Should I use sk_x509_pop or something? Thank you for your time. Calista. __ Do You Yahoo!? Tired of spam? Yahoo!

select for timeout work with SSL?

2005-04-20 Thread Schneider John
I found this snippet for implementing a timeout for sockets, although the example had nothing to do with SSL... I put it in some code and it seems to work fine, but was wondering if anybody else has tried it or can comment on the idea. Thanks! /// snippet: int err; fd_set fds; struct

RE: sk_X509_push vs sk_x509_free

2005-04-20 Thread Aftab Alam
Yes you will have to use sk_X509_pop_free I think. Regards Aftab Alam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Calista Sent: Wednesday, April 20, 2005 7:32 PM To: openssl-users@openssl.org Subject: sk_X509_push vs sk_x509_free Hi, I add

Downgrade OpenSSL

2005-04-20 Thread Stefan Müller
Hi, I am running FreeBSD 5.3Beta4 with OpenSSL 0.9.7d installed. For my student research project on timing attacks against SSL, I need to downgrade OpenSSL to version 0.9.7 release Dec 31_2002 (or to OpenSSL = 0.9.6h) since newer versions are already patched against these attacks.

Re: select for timeout work with SSL?

2005-04-20 Thread Dr. Stephen Henson
On Wed, Apr 20, 2005, Schneider John wrote: I found this snippet for implementing a timeout for sockets, although the example had nothing to do with SSL... I put it in some code and it seems to work fine, but was wondering if anybody else has tried it or can comment on the idea. Thanks!

openssl verify conflicts with SSL_connect

2005-04-20 Thread John Hoel
I am testing my implementation of OpenSSL within an existing application by creating certificates using the instructions in the O'Reilly book, chapter 5. When I use the client.pem file with SSL_CTX_set_certificate_chain_file, and the root.pem file with SSL_CTX_load_verify_locations, then

Re: Downgrade OpenSSL

2005-04-20 Thread Nils Larsch
Stefan Müller wrote: Hi, I am running FreeBSD 5.3Beta4 with OpenSSL 0.9.7d installed. For my student research project on timing attacks against SSL, I need to downgrade OpenSSL to version 0.9.7 release Dec 31_2002 (or to OpenSSL = 0.9.6h) since newer versions are already patched against these

Re: Downgrade OpenSSL

2005-04-20 Thread A . L . M . Buxey
Hi, The shared libraries /lib/libcrypto.so.3 and /usr/lib/libssl.so.3 are still from the newer Version. sounds like they are the world version - what lives in /usr/local/lib ? (you did compile with the 'shared' configure option, yes? alan

cygwin

2005-04-20 Thread hao chen
When I use cygwin to run the test of openssl, I got the following error: running bc bc: not found cat: tmp.bctest: No such file or directory bc does not work properly ('SunOStest' failed). Looking for another bc ... No working bc found. Consider installing GNU bc. 0 tests passed I run the

AW: Downgrade OpenSSL

2005-04-20 Thread Stefan Müller
Hi, thanks for your answer! I tried the following: 1.) ./config shared 2.) make But make stops with the following error: + gcc -shared -o libcrypto.so.0.9.7 -Wl,-soname=libcrypto.so.0.9.7 -Wl,-Bsymbolic -Wl,--whole-archive libcrypto.a -Wl,--no-whole-archive -L. -lc

RE: Confusion about SSL_ERROR_WANT_READ/WRITE

2005-04-20 Thread David Schwartz
Thanks for the info. One last question :) So if I am using blocking sockets, than would I ever get a WANT_WRITE error? I'm guessing no? No, it should just block until it gets some application data or can send the application data. But if I am using BIO pairs, and blocking sockets,

RE: sk_X509_push vs sk_x509_free

2005-04-20 Thread Calista
Thanks Aftab. --- Aftab Alam [EMAIL PROTECTED] wrote: Yes you will have to use sk_X509_pop_free I think. Regards Aftab Alam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Calista Sent: Wednesday, April 20, 2005 7:32 PM To:

JNI Problems urgent.

2005-04-20 Thread Pól Ó Riain
Hey guys i'm having trouble with a jni interface to OpenSSL. This is my Java: public class nativeBF { public native void nativeRun(); public void nCall(){ nativeRun(); } static { //Load the

Re: Encrypting binary files with evp symmetric cipher - Error

2005-04-20 Thread Nils Larsch
Rafael Cividanes wrote: Hi, I'm trying to do a program to encrypt and decrypt a file using EVP API. I read the input file (plaintext) in binary mode using a buffer of 100 bytes to encrypt. The function restult_aes is the encryption / decryption funcion. I'm calling the funcions EVP_Encrypt and

what's the default openssl engine

2005-04-20 Thread hao chen
Hi, I always heard that the openssl uses the default openssl engine if the engine is not specified. I would like to know what's the default openssl engine. In another word, how could I tell which is the default openssl engine when I use openssl? thanks hao Best Regard

Certificate Handling APIs

2005-04-20 Thread Ho, Victor
Hi, I'd like to find out whether openssl provides the same certificate handling APIs as RSA does, such as the followings: X509_STORE_CTX_get_ex_data() SSLCERT_STORE_CTX_get_current_cert() SSLCERT_to_binary() Would be great to know if openssl provides similar functionalities with

Re: JNI Problems urgent.

2005-04-20 Thread Takaaki Ishii
Hi, Hey guys i'm having trouble with a jni interface to OpenSSL. /home/mcx/Programming/Eclipse/project/lib/libnativebf.so: undefined symbol: BF_set_key If BF_set_key function is statically linked, you can confirm those symbols in shared object, like: $ nm libnativebf.so U

How to verify when CA certificates in database?

2005-04-20 Thread Heikki Toivonen
If I was using flat files, I could simply do SSL_CTX_load_verify_locations. However, I have the certificates stored in a database. At first I was kind of looking for function SSL_CTX_load_verify_BIO(), but there does not seem to be such a thing... (I could then have written a BIO for loading the