RE: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Deckers, Rob
If you look in the OpenSSL code (of between the .lib files after build) , you will find 11 so called engines. - Sureware - Padlock - Cswift - 4758cca - Aep - Atalla - Capi - Chil - Nuron - Gmp - Ubsec Does anyone know if these are in the Libeay32.dll of in the Ssleay32.dll ? Rob Deckers This

Makefile in test dir

2010-07-06 Thread kai_yang2008
HI All, I found that that in the Makefile in the test dir , there are lines like: test_aes: #$(AESTEST) # @echo test Rijndael # ../util/shlib_wrap.sh ./$(AESTEST) It seems that it it not going to run the test_aes. so i just want to know why comment these lines on ? Thanks! Kevin,

Huge performance issues using SSL3

2010-07-06 Thread Ludwig Groten
Hi list, In our application we use OpenSSL 0.9.8a in combination with libcurl (7.19.7) for uploading files to a server. On different machines we see a huge performance issue when using SSL3. Using SSL2 does not show this issue. From looking into the network traffic we do see a delayed ACK

Re: Large CRL Handling Problem

2010-07-06 Thread Jakob Bohm
On 06-07-2010 01:03, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Ryan Smith Sent: Friday, 02 July, 2010 18:31 I have written a FIPS-1.1.2 compliant (OpenSSL 0.9.7m) application that validates certificates that are read in from files. It

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Ger Hobbelt
On Tue, Jul 6, 2010 at 9:10 AM, Deckers, Rob rob.deck...@oce.com wrote: If you look in the OpenSSL code (of between the .lib files after build) , you will find 11 so called engines. - Sureware - Padlock - Cswift - 4758cca - Aep - Atalla - Capi - Chil - Nuron - Gmp - Ubsec Does

RE: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Deckers, Rob
Thanks, I am starting to understand the structure. I now made the same structure in my CMake files. 11 engines and the modules crypto and ssl. But the Crypto module has a linker problem. 1-- Build started: Project: openssl.crypto, Configuration: Debug Win32 -- 1Linking... 1

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Dr. Stephen Henson
On Tue, Jul 06, 2010, Ger Hobbelt wrote: On Tue, Jul 6, 2010 at 9:10 AM, Deckers, Rob rob.deck...@oce.com wrote: If you look in the OpenSSL code (of between the .lib files after build) , you will find 11 so called engines. - Sureware - Padlock - Cswift - 4758cca - Aep - Atalla

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Ger Hobbelt
This is off the top of my head, didn't check the sources to make sure, so validity is 'mostly sure but not entirely'. Quite a few bits 'n pieces in OpenSSL are 'template' based. (several crypto methods, a lot of ASN.1 work, an object stack, ...) Think about templates (wider scope than just the

Re: Why 2 DLL's for building OpenSSL

2010-07-06 Thread Kenneth Goldman
An argument against combining the two DLL's with a custom build is that your configuration will be different from everyone else. Whoever maintains your code after you move on will have to learn your non-standard configuration. More likely, they'll waste time undoing your strange setup and going

DER public key - differing keylengths?

2010-07-06 Thread Mark Bishop
When I execute: //Convert public key from PEM to DER openssl rsa -inform PEM -in public_key.pem -out public_key.der -outform DER -pubin -pubout I get a 162 byte file. When I execute: //Create public key in DER format openssl rsa -in private_key.pem -pubout -outform DER -out public_key.der

2 way certificate authentication with apache

2010-07-06 Thread David Tisdell
Hi, I am trying to get 2 way certificate authentication going in Apache. I have installed the certificate into my browser (firefox) but it just times out. Anyone have any ideas? Thanks. Dave Here is the ssl section of my Apache config SSLEngine on SSLOptions +ExportCertData +StrictRequire

Re: Unable to set PSK ciphers for DTLS on Federa 13

2010-07-06 Thread Lindani Phiri
I found the issue with my code was that I was calling the function :   SSL_CTX_set_psk_client_callback() after I had already created my SSL object from the context. I used   SSL_set_psk_client_callback() on my SSL object instead and that fixed it. Lindani --- On Sat, 7/3/10, Lindani Phiri

RE: DER public key - differing keylengths?

2010-07-06 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Mark Bishop Sent: Tuesday, 06 July, 2010 12:09 When I execute: //Convert public key from PEM to DER openssl rsa -inform PEM -in public_key.pem -out public_key.der -outform DER -pubin -pubout I get a 162 byte file. When I execute: