Re: How to use a hardware RNG with openssl?

On 2008.09.22 at 16:37:58 +0200, F. wrote: Any way to collect only from HRNG? You can write your own RAND_METHOD and encapsulate it in the engine module. Then you can load this engine via openssl.cnf and set default rand method to this engine. Really, this is not very good idea, because

RE: How to use a hardware RNG with openssl?

On 2008.09.22 at 16:37:58 +0200, F. wrote: Any way to collect only from HRNG? You can write your own RAND_METHOD and encapsulate it in the engine module. Then you can load this engine via openssl.cnf and set default rand method to this engine. Really, this is not very good idea,

Re: RE: How to use a hardware RNG with openssl?

On 2008.11.05 at 00:29:40 -0800, David Schwartz wrote: PRNG. This is better for several reasons: 1) You can rate-limit how much you mix in. Say you mix in 1KB at startup and 128 bytes every 10 seconds after that. This will provide the same quality of randomness for cryptographic purposes,

Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Hi, I'm trying to get OpenSSL to build for Windows Mobile 5 but im not getting anywhere. I think the documentation is out of date. I get to the stage where I run ms\do_ms and it fails because environment variables are not defined (OSVERSION). Im following the instructions in the

Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Hi, I’m trying to get OpenSSL to build for Windows Mobile 5 but im not getting anywhere. I think the documentation is out of date. I get to the stage where I run ms\do_ms and it fails because environment variables are not defined (OSVERSION). Im following the instructions in the

Re: client crash or network issue?

Thank you again David, It seems that now I understand all the crash scenarios and my server can deal with them correctly. Thank you for your guidance. As for the network issue scenarios here are some details about the last case: 1)The server is running on UNIX, the client is running on windows

RE: openssl and threads

Hi, I'm currently using the openssl utilities for computing MD5 sums on files. Until now I have always done these operations in the main thread. Now I want to use the same code in a working thread to be able to update GUI while computing the MD5. The main thread will only update GUI

RE: SSL_ERROR_SYSCALL, errlist: No such file or directory

David, Sorry for the lack of information, let me try to fill in the blanks. We're using Perl (IO::Socket::SSL) on the sending side to establish a secure socket to a C agent on the receiving side. The C agent uses native OpenSSL APIs.On the Perl side, we create a TCP socket and then do a

Re: ASN1_UTCTIME - field 'length' not coherent with field 'data'

On Wed, Nov 05, 2008 at 11:51:44AM +0100, Christophe Mac? wrote: Hi, I noticed a different behaviour between v0.9.8h and v0.9.8i when printing dates of my certificates and crls. for example (I patched file crypto/asn1/t_x509.c to print value of tm-length after the date) : [EMAIL

Key.pem expiration problem - Correction

A correction to my previous post. Only the key.pem files are proding the error in certwatch and being reported as expiring soon. Not the certs. Thanks, Rick __ OpenSSL Project

Re: ASN1_UTCTIME - field 'length' not coherent with field 'data'

On Wed, Nov 05, 2008 at 01:35:08PM -0500, Victor Duchovni wrote: I could volunteer a patch, but perhaps the OpenSSL team wants to solve this in slightly different way. Looks like the specific issue is now fixed in CVS:

Getting application data from the final packet in a handshake.

All - I am using OpenSSL with memory BIOs for the communication. I have everything working just fine, until I came across a server that sends Application data in the final packet of the TLS handshake. Specifically, Wireshark shows the following in its output : Change Cipher Spec,

RE: client crash or network issue?

Thank you again David, You are welcome. As for the network issue scenarios here are some details about the last case: 1)The server is running on UNIX, the client is running on windows or unix. unplug the client or the server. The server does not report anything! Logical, nothing has

RE: Getting application data from the final packet in a handshake.

All - I am using OpenSSL with memory BIOs for the communication. I have everything working just fine, until I came across a server that sends Application data in the final packet of the TLS handshake. Specifically, Wireshark shows the following in its output : Change Cipher Spec,

OpenSSL API which build the chain from a peer certificate

Hi all, Is there any OpenSSL API which will prepare the certificate chain from the peer certificate given as input ? I have only peer certificate.I have to build the cert chain from this Thanks in advance, Aravind.

Re: Compiling OpenSSL 0.9.8i for Windows Mobile 5 With Visual Studio 2005

Hi, ext Steven Harris wrote: Hi, I’m trying to get OpenSSL to build for Windows Mobile 5 but im not getting anywhere. I think the documentation is out of date. It is, last week I send an initial patch, which might need some more care before it's becoming part of OpenSSL. See