Re: Decrypting Fragmented packets

2008-06-25 Thread Julian
It's hard to approach this without knowing the mode of operation you are running CBC, OFB, CTR? Also are you using UDP with varying packet sizes? Julian On Jun 24, 2008, at 10:25 PM, Vijay Kotari wrote: Hi, I am using EVP_DecryptUpdate() and EVP_DecryptFinal_ex() to decrypt a SSL packet

Re: Decrypting Fragmented packets

2008-06-25 Thread Vijay Kotari
I am using the traffic obtained from s_server and s_client sample programs and the keys that have been negotiated by both the programs to decrypt the encrypted traffic between the two. That would mean that I am using TCP. Also, I am running them under the CBC mode. Vijay K. On Wed, Jun 25, 2008

Re: Decrypting Fragmented packets

2008-06-25 Thread Vijay Kotari
Hi, I resolved this issue although I am still a little confused about the error that I was getting previously. I am outlining the steps that I did before when I had the error and what I did to overcome it, so that some kind soul here can enlighten me as to why I got the error in the first place.

List of supported CipherSuite and CompressionMethod

2008-06-25 Thread Richard Hartmann
Hi all, I was wondering if there is a list of all CipherSuite[s] and CompressionMethod[s] supported by OpenSSL. At this point, I would prefer not to go through the code to get an answer, but if you guys would point me at a file name, I would gladly take that, as well :) Richard

From RSA to string and compare problem

2008-06-25 Thread Marco Sommella
Hi, i'm creating a little client/server program using C. i need to read a rsa from pem file (so using PEM_read_RSAPublicKey) and then send the key to a server (the message can be only a string type) which reads a rsa public key from another pem file and return, comparing keys, is are egual

RE: List of supported CipherSuite and CompressionMethod

2008-06-25 Thread Bill Colvin
Richard: I suggest you look at http://openssl.hoxt.com/openssl-web/docs/apps/ciphers.html and http://www.openssl.org/docs/ssl/SSL_COMP_add_compression_method.html Bill -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Hartmann Sent: June 25,

Re: From RSA to string and compare problem

2008-06-25 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/25/2008 04:10:45 PM: Hi, i'm creating a little client/server program using C. i need to read a rsa from pem file (so using PEM_read_RSAPublicKey) and then send the key to a server (the message can be only a string type) which reads a rsa public key

Re: From RSA to string and compare problem

2008-06-25 Thread Marco Sommella
[EMAIL PROTECTED] ha scritto: Hello, [EMAIL PROTECTED] wrote on 06/25/2008 04:10:45 PM: Hi, i'm creating a little client/server program using C. i need to read a rsa from pem file (so using PEM_read_RSAPublicKey) and then send the key to a server (the message can be only a string type)

Re: List of supported CipherSuite and CompressionMethod

2008-06-25 Thread Richard Hartmann
On Wed, Jun 25, 2008 at 16:26, Bill Colvin [EMAIL PROTECTED] wrote: http://openssl.hoxt.com/openssl-web/docs/apps/ciphers.html Thanks! From the man page of ciphers, I assume I need to bake my own OpenSSL binaries to enable NULL ciphers? And yes, I know what I am doing and yes, in this stage,

Re: RFC 4130 checksum in SHA1

2008-06-25 Thread javierm
Well, for the moment all succeeded in practical terms, by just parsing the ASN1 structure and getting what is read there as messageDigest. That is what the trading partner expects to see, but I'm not so happy not knowing how this message digest is obtained So I did another test that I would

openssl progress on key creation ?

2008-06-25 Thread zubziro
HI Doe's anybody knows how to see progress of key creation (openssl), there is a bunch of dot's (...) but what does those means ? Thanks. p.s generating a 102400 bit key for one week now, would like to know how much it is left. -- View this message in context:

Re: openssl progress on key creation ?

2008-06-25 Thread Kyle Hamilton
From the 'genrsa' manpage: NOTES RSA private key generation essentially involves the generation of two prime numbers. When generating a private key various symbols will be output to indicate the progress of the generation. A . represents each number which has passed an

SSL/TLS Authentication only

2008-06-25 Thread Patel Dippen-CDP054
Is it possible to use TLS authentication only? If so, how do I do this using OpenSSL?

How-To encrypt using rsautl ??

2008-06-25 Thread Dan_Mitton
I am trying to encrypt a file using rsautl, but its generating an error. What am I doing wrong?? I create a private key - /usr/local/ssl/bin/openssl genrsa -out rsa-priv.pem 2048 Generating RSA private key, 2048 bit long modulus .+++

Re: openssl progress on key creation ?

2008-06-25 Thread Vijay Kotari
Like Kyle said, the process is probabilistic in nature, but this page actually contains a table that suggests the average time taken. http://www.maxim-ic.com/appnotes.cfm/an_pk/4004 Results might vary largely depending on your computer specs, but the ratio of the times taken should be about the

Re: SSL/TLS Authentication only

2008-06-25 Thread Vijay Kotari
What exactly do you mean? What other possible kinds of authentication do you have available? If you just want a TLS-based client and server, then OpenSSL can serve your purpose. Vijay K. On Wed, Jun 25, 2008 at 9:01 PM, Patel Dippen-CDP054 [EMAIL PROTECTED] wrote: Is it possible to use TLS

RE: SSL/TLS Authentication only

2008-06-25 Thread Patel Dippen-CDP054
The way I understand is you can have authentication and encryption with TLS. When you use a cipher suite, you can specify the type of authentication, encryption, hash, etc. So, for example, you could provide TLS_DHE_DSS_WITH_NULL_SHA meaning no encryption. I believe this should work. Question

Re: How-To encrypt using rsautl ??

2008-06-25 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/25/2008 08:59:00 PM: I am trying to encrypt a file using rsautl, but its generating an error. What am I doing wrong?? I create a private key - /usr/local/ssl/bin/openssl genrsa -out rsa-priv.pem 2048 Generating RSA private key, 2048 bit long

Re: From RSA to string and compare problem

2008-06-25 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/25/2008 04:34:07 PM: [EMAIL PROTECTED] ha scritto: Hello, [EMAIL PROTECTED] wrote on 06/25/2008 04:10:45 PM: Hi, i'm creating a little client/server program using C. i need to read a rsa from pem file (so using PEM_read_RSAPublicKey) and

Re: SSL/TLS Authentication only

2008-06-25 Thread Dr. Stephen Henson
On Wed, Jun 25, 2008, Patel Dippen-CDP054 wrote: The way I understand is you can have authentication and encryption with TLS. When you use a cipher suite, you can specify the type of authentication, encryption, hash, etc. So, for example, you could provide TLS_DHE_DSS_WITH_NULL_SHA

R: From RSA to string and compare problem

2008-06-25 Thread Marco Sommella
Tnx for response and your patient. Returning on reading with read() may I ask you about comment header and footer? It's safe to jump lines of file pem starting with - or it's possible that the key contain the char - ? tnx -Messaggio originale- Da: [EMAIL PROTECTED] [mailto:[EMAIL

Bag Attributes Ignored

2008-06-25 Thread Hacker SF
Hello to all, I've been trying to add bag attributes to a PKCS12 certificate using openssl pkcs12 command (eg, openssl pkcs12 -export -in cert1.pem -CSP ... -LMK -out cert1.p12). All my attempts were unsuccessful. I've got openssl 0.9.8e patched and no errors during compiling/building (using

Re: R: From RSA to string and compare problem

2008-06-25 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/26/2008 02:06:47 AM: Returning on reading with read() may I ask you about comment header and footer? It's safe to jump lines of file pem starting with - or it's possible that the key contain the char - ? Data between BEGIN and END header is ASN1 structure

Re: Decrypting Fragmented packets

2008-06-25 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/25/2008 07:25:12 AM: Hi, I am using EVP_DecryptUpdate() and EVP_DecryptFinal_ex() to decrypt a SSL packet that I have captured. The cipher that I am using AES256 and I can read the application data in cleartext as a result. The problem comes if the

Re: SSL/TLS Authentication only

2008-06-25 Thread Victor Duchovni
On Thu, Jun 26, 2008 at 12:50:14AM +0200, Dr. Stephen Henson wrote: On Wed, Jun 25, 2008, Patel Dippen-CDP054 wrote: The way I understand is you can have authentication and encryption with TLS. When you use a cipher suite, you can specify the type of authentication, encryption, hash,