SSL_UNDEFINED_FUNCTION / Handshake fails

2006-08-17 Thread Florian G otter
Hello everybody ! I have a problem witht the SSL_accept / handshake which i could not resolve with the help of the net / colleagues / time. Having written a small server / client, it gives the following output (debug info generated by me with the help of SSL_get_error ): SSL PrivateKey opened

Re: FW: File encryption with smime

2006-08-17 Thread Girish Venkatachalam
--- Buicliu, Ion VSA:EX [EMAIL PROTECTED] wrote: Thank you Girish, I understand now. The combination: encrypt with public key - decrypt with private works. What we are trying to do is to place an encrypted file on our ftp server for a specific user. The ftp server is behind a

Re: SSL_UNDEFINED_FUNCTION / Handshake fails

2006-08-17 Thread Girish Venkatachalam
--- Florian G otter [EMAIL PROTECTED] wrote: Hello everybody ! I have a problem witht the SSL_accept / handshake which i could not resolve with the help of the net / colleagues / time. Having written a small server / client, it gives the following output (debug info generated by me

Re: Problem to start an SSL session

2006-08-17 Thread Frank Büttner
Non blocking is not possible because Qt returns only an non blocking fd. What do you mean with the select() function. In the openSSL doc I can't found something like that. smime.p7s Description: S/MIME Cryptographic Signature

General Questions

2006-08-17 Thread David Irvine
Hi This may be a double post if it is I apologise (I think I may have posted this before I was authorised by majordomo). I have started using encryption and thought I would try this out. My question(s) are as follows - please be gentle 1: How is the IV handled in (AES) encryption - I can see

When to use CRYPTO_set_locking_callback() and CRYPTO_set_id_callback()?

2006-08-17 Thread Joe Flowers
Help please. I have a program/parent thread that launches 4 child threads. It's a Win32 application that has to be linked using the /MT VC compiler option for reasons other than OpenSSL. The parent thread calls the following OpenSSL calls. CRYPTO_malloc_init(); SSL_library_init();

Re: General Questions

2006-08-17 Thread Marek Marcola
Hello, 1: How is the IV handled in (AES) encryption - I can see supplying an initial vector is good but it also appears this should change with every encryption (if you like). So does a user have to know this + key ? IV is used by encryption mode (like CBC) not by encryption algorithm like AES.

Re: When to use CRYPTO_set_locking_callback() and CRYPTO_set_id_callback()?

2006-08-17 Thread Marek Marcola
Hello, In any case, does it hurt anything if I try to implement these two OpenSSL functions anyway? I think that no. And, if it's quick and easy to do, can someone sent code snippets of implementations of these two functions? You may use something like that:

Re: When to use CRYPTO_set_locking_callback() and CRYPTO_set_id_callback()?

2006-08-17 Thread Joe Flowers
Joe Flowers wrote: In any case, does it hurt anything if I try to implement these two OpenSSL functions anyway? And, if it's quick and easy to do, can someone sent code snippets of implementations of these two functions? In my parent thread, should I just call the following two OpenSSL

RE: General Questions

2006-08-17 Thread Ambarish Mitra
1. How is the IV handled in (AES) encryption? --Actually, in AES in CBC mode, the ciphertext is dependent on the already computed ciphertext block. That is, CT for block k is dependent on CT of block k-1 and plain text for block k. (How it is dependent is a complex maths). But how do you know the

Re: General Questions

2006-08-17 Thread David Irvine
Many thanks for a fantastic explanation and for taking the time to help me. I was just reading some docs there pointing me to this but you have saved me a good few hours. I will search out info for python info on PBKDF2 many thanks for that. Just quickly though in point 3 does that mean I

Re: General Questions

2006-08-17 Thread Marek Marcola
Hello, Just quickly though in point 3 does that mean I should use ECB mode or not if I am going to split the file and send two parts to different locations? Of course not, look at: http://en.wikipedia.org/wiki/Block_cipher_modes_of_operation (link posted to that list before). Best

Re: General Questions

2006-08-17 Thread Girish Venkatachalam
--- David Irvine [EMAIL PROTECTED] wrote: - Many thanks for a fantastic explanation and for taking the time tohelp me. I was just reading some docs there pointing me to this but youhave saved me a good few hours. I will search out info for python info on

Re: General Questions

2006-08-17 Thread David Irvine
ohhps :-[ thanks again - I am more educated than I was 10 mins ago. I hope other folk read this and don't repeat my stupid question. CFB mode for me then (we may stream the data back a bit at a time). Again brilliant David Marek Marcola wrote: Hello, Just quickly though in

Re: General Questions

2006-08-17 Thread David Irvine
Girish Venkatachalam wrote: --- David Irvine [EMAIL PROTECTED] wrote: - Many thanks for a fantastic explanation and for taking the time tohelp me. I was just reading some docs there pointing me to this but youhave saved me a good few hours. I will search

Re: SSL_UNDEFINED_FUNCTION / Handshake fails

2006-08-17 Thread Florian G otter
Hello once again, here is my cut-down code as well as output. Basically, the server fails after the line // FAILS!!! without the client even connecting to it. Does anybody have an idea ? Many thanks Florian -- Output from server: SSL PrivateKey opened successfully LOG; Now accepting

AES CFB 256 Encryption method

2006-08-17 Thread David Irvine
Ok I have taken comment so far and this is my plan - if I am way off please let me know create a public salt (anyone can see this and will) of X length (128bits) take sha512 hash of file to be encryted (and keep it) supply a password to the pbkdf2 - to create a 256bit key for my AES256 CFB

Re: Problem to start an SSL session

2006-08-17 Thread Bruno Oliveira Silvestre
Hi, On 8/16/06, David Schwartz [EMAIL PROTECTED] wrote: [...] The SSL engine may have already read the data and your 'select' may block forever. You should only wait for 'select' to give you read hit before calling SSL_read if your last SSL operation returned a WANT_READ indication.

modifying Configure to build for Blackfin 537 DSP using VisualDSP++ compiler

2006-08-17 Thread Ryan Shon
I am attempting to build OpenSSL for the Analog Devices Blackfin 537 digital signal processing chip using the VisualDSP++ compiler, also from Analog Devices. I have been studying the Configure script, and I would be appreciative of any advice you could give. I especially would like help

Re: modifying Configure to build for Blackfin 537 DSP using VisualDSP++ compiler

2006-08-17 Thread Girish Venkatachalam
--- Ryan Shon [EMAIL PROTECTED] wrote: I am attempting to build OpenSSL for the Analog Devices Blackfin 537 digital signal processing chip using the VisualDSP++ compiler, also from Analog Devices. I have been studying the Configure script, and I would be appreciative of any advice you

BIO_free() and custom destroy method

2006-08-17 Thread Jeremy Shapiro
Hello, I have created a custom BIO for my openssl application. Everything is working fine but I appear to have a memory leak with 0.9.8b. My BIO_method only has non-NULL members type, name, bwrite, bread, and ctrl. create and destroy (and the others) are NULL. When I call BIO_new() it does an

how do i escape spaces in -subj (DN) arg to req?

2006-08-17 Thread Richard
if i: ssl req -subj /C=US/ST=CA/L=NewYork ... all's OK. if, however i: ssl req -subj /C=US/ST=NY/L=New York ... ssl req -subj /C=US/ST=NY/L=New\ York ... i get an error of: unknown option York req [options] infile outfile where options are

Re: SSL_UNDEFINED_FUNCTION / Handshake fails

2006-08-17 Thread Lutz Jaenicke
On Thu, Aug 17, 2006 at 03:43:47PM +0200, Florian G otter wrote: Hello once again, here is my cut-down code as well as output. Basically, the server fails after the line // FAILS!!! without the client even connecting to it. Does anybody have an idea ? That seems to be a simple one:

Re: how do i escape spaces in -subj (DN) arg to req?

2006-08-17 Thread Michael Sierchio
Richard wrote: if, however i: ssl req -subj /C=US/ST=NY/L=New York ... ssl req -subj /C=US/ST=NY/L=New\ York ... i get an error of: unknown option York what am i doing wrong? Your problem is with your shell, not OpenSSL. I'm reluctant to say more -- I don't want

Re: how do i escape spaces in -subj (DN) arg to req?

2006-08-17 Thread Richard
On 8/17/06 Michael Sierchio wrote: I'm reluctant to say more -- I don't want to hand you a sharp implement and have you cut yourself if you've got something helpful to say, please say it. __ OpenSSL Project

FW: FW: File encryption with smime

2006-08-17 Thread Buicliu, Ion VSA:EX
What we are trying to do is to place an encrypted file on our ftp server for a specific user. The ftp server is behind a firewall, and the user can access and see only its account, and they are supposed to get the file and decrypt it. As far as we are concerned, we'd like to make

Re: Problem to start an SSL session

2006-08-17 Thread Richard Koenning
Frank Büttner wrote: Non blocking is not possible because Qt returns only an non blocking fd. What is the problem? What do you mean with the select() function. In the openSSL doc I can't found something like that.

3DES Encryption / Decryption using the EVP api

2006-08-17 Thread k b
hi , I want to decrypt using 3DES and want to use the EVP api. Here's what i'm doing, it will be nice someone could validate if my approach is correct. here's the code that i have come up with... int 3desDecrypt(unsigned char * pEncData, int pDataSize) { int dec_data_size = 0;