Problems with OpenSSL Engine and hashing.

Hello everybody, I have a problem in making our OpenSSL Engine that drives our HW accelerator work fine for hash (SHA1 in particular). The problem seems to be related to my Digest_Copy or (less likely) Digest_Cleanup implementation (I'll explain this further on). The Engine works fine for the

Re: calling SSL_library_init multiple times

Jagannadha Bhattu G wrote: Hi, Can I call SSL_library_init multiple times in my code under different threads? as SSL_library_init() initializes global tables it should only be called from one thread a time and of course no other thread should use the global data while SSL_library_init() is

remove

- Original Message - From: Marco GRELLA [EMAIL PROTECTED] Date: Monday, February 27, 2006 2:29 pm Subject: Problems with OpenSSL Engine and hashing. Hello everybody, I have a problem in making our OpenSSL Engine that drives our HW accelerator work fine for hash (SHA1 in particular).

AES key length selection bug in OpenSSL 0.9.8a

Dear OpenSSL users, OpenSSL 0.9.8a does not allow to properly select AES key length. It selects both 128-bit and 256-bit AES no matter which one was specified: [EMAIL PROTECTED]:~$ /usr/local/ssl/bin/openssl version OpenSSL 0.9.8a 11 Oct 2005 [EMAIL PROTECTED]:~$ /usr/local/ssl/bin/openssl

RE: First posting NEWBEE

MySQL would have to implement this. I believe there is some support of SSL encrypted connections in MySQL. Try here first: http://dev.mysql.com/doc/refman/5.0/en/secure-connections.html and if you still have questions, try the MySQL mailing lists. Otherwise I'm sure you can

Installing a certificate chain

I'm trying to get a client to verify a server certificate signed by a sub-CA when the client has only the root CA certificate. I'm using TinyCA (GUI wrapper around OpenSSL) as the CA. Here's what I've done: 1. Created a root CA (CN=root.ca.linnet.org) 2. Created a sub CA under this

Re: build non-bsafe version of Openssl

You are mistaken. OpenSSL does not use BSafe. /r$ -- SOA Appliance Group IBM Application Integration Middleware __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: calling SSL_library_init multiple times

Jagannadha Bhattu G [EMAIL PROTECTED]: Hi, Can I call SSL_library_init multiple times in my code under different threads? From the documented return values, I conclude that it should be possible. Can some one confirm it? Thanks JB Yes it's possible. I'm doing like this for now... ,

Re: build non-bsafe version of Openssl

Hi Richard,Thanks a lot for that clarification. Actually i was a bit confused about this since in some places I read that there is a patch that can be installed to enable BSAFE. In some other place I read that BSAFE is now available as part of Openssl currently. coz of this, I thought I had to

Re: Installing a certificate chain

On Mon, Feb 27, 2006, Brian Candler wrote: I'm trying to get a client to verify a server certificate signed by a sub-CA when the client has only the root CA certificate. I'm using TinyCA (GUI wrapper around OpenSSL) as the CA. Here's what I've done: 1. Created a root CA

Re: AES key length selection bug in OpenSSL 0.9.8a

Hi Michal, OpenSSL 0.9.8a does not allow to properly select AES key length. It selects both 128-bit and 256-bit AES no matter which one was specified: I reported this same bug in February 17th, and Dr. Steven Henson has confirmed it is a bug so hopefully it will be fixed soon. If you find any

ld.so.1

Hi, Does somebody has an idea about the following error message.ld.so.1: /usr/local/ssl/bin/openssl: fatal: libssl.so.0.9.7: open failed: No such file or directoryI don't understand 'cause openssl is correctly installed and my $PATH and $LD-LIBRARY_PATH seem to be correct.HOST:user1%

Re: ld.so.1

Salut, i suppose you have installed an SMC package, have you done a pkgchk SMCosslxx ? do libso have execute bit set ? what Solaris is it ? John Doe a crit: Hi, Does somebody has an idea about the following error message. ld.so.1: /usr/local/ssl/bin/openssl: fatal:

Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: Since you didn't include the root CA it isn't possible to say why it isn't excluded. I notice the small serial numbers in the certificates and some invalid extensions in there. I'd suggest using the CA.pl script (if you use

Re: ld.so.1

On Mon, Feb 27, 2006 at 07:24:56AM -0800, John Doe wrote: ld.so.1: /usr/local/ssl/bin/openssl: fatal: libssl.so.0.9.7: open failed: No such file or directory I don't understand 'cause openssl is correctly installed and my $PATH and $LD-LIBRARY_PATH seem to be correct.

Re: Installing a certificate chain

On Mon, Feb 27, 2006, Brian Candler wrote: On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: Since you didn't include the root CA it isn't possible to say why it isn't excluded. I notice the small serial numbers in the certificates and some invalid extensions in

Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 08:05:59PM +0100, Dr. Stephen Henson wrote: On Mon, Feb 27, 2006, Brian Candler wrote: On Mon, Feb 27, 2006 at 01:41:33PM +0100, Dr. Stephen Henson wrote: Since you didn't include the root CA it isn't possible to say why it isn't excluded. I notice the

Re: Installing a certificate chain

On Mon, Feb 27, 2006 at 07:36:16PM +, Brian Candler wrote: Ah. I had just used -cert ../server.example.com-cert.pem (where this file contains all the certificates). So now I've added -CAfile as well, pointing to the same file: #!/bin/sh cd content openssl s_server -cert