Adding extra functionality to openssl

Hello, I want to add some new functionality to the crypto library in openssl and I need some help with the integration of the new code in the build system of openssl. I intend to add some source code, in the crypto directory, as a new subdirectory, say extra. There will be the following files:

renegotiation not working using BIO_set_ssl_renegotiate_timeout() function

Hi all, I am trying to implement renegotiation on server after a certain amount of time using BIO_set_ssl_renegotiate_timeout() function. Renegotiation is not happening after the specified timeout. I have written a small server program to test the renegotiation on timeout. The server merely

Re: TLSv1.2 in openssl

I understand. I know this was intended as a hint, unfortunately I am but a student, so I cannot fund the project. So I suppose the latest version is TLSv1.0? Or is there support for TLSv1.1 also? Regards, Vandra Ákos 2009/7/13 Dr. Stephen Henson st...@openssl.org On Mon, Jul 13, 2009,

renegotiation not working using function BIO_set_ssl_renegotiate_timeout()

Hi all, I am trying to implement renegotiation on server after a certain amount of time using BIO_set_ssl_renegotiate_timeout() function Renegotiation is not happening after the specified timeout. I have written a small server program to test the renegotiation on timeout. The server merely

How to create a non exportable private key certificate using openssl

Hi all , I have used SPKAC format to request a digital certificate from mozilla and signed the request with my master key from open ssl and imported it to my mozilla. I can readily export (backup)the private key + certificate from mozilla and import it to some other system's mozilla browser.I

How to create a non exportable private key certificate using openssl

Hi all , I have used SPKAC format to request a digital certificate from mozilla and signed the request with my master key from open ssl and imported it to my mozilla. I can readily export (backup)the private key + certificate from mozilla and import it to some other system's mozilla browser.I

Tiny Encryption Algorithm and Openssl

Hi allI want to use TEA encryption algorithm with OpenSSL.Is there any engine to provide implementation of TEA  algorithm ?gost engine is an example of adding new cryptoalgorithms into OpenSSL but gost example is a bit complex. Thanks in advance, Siavash TEA source code :

Tiny Encryption Algorithm and Openssl

Hi allI want to use TEA encryption algorithm with OpenSSL.Is there any engine to provide implementation of TEA  algorithm ?gost engine is an example of adding new cryptoalgorithms into OpenSSL but gost example is a bit complex. Thanks in advance, Siavash TEA source code :

Today's error in openssl-1.0.0-stable-SNAP-20090714

-20090714/apps/x509.c:629: undefined reference to `X509_gmtime_adj_ex' *** Error code 1 Stop. *** Error code 1 Stop. *** Error code 1 Stop. -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Beware Anti-Christ rising

Re: TLSv1.2 in openssl

If you just want to study it, gnutls has support TLS1.2, I suppose now most Linux distributions include it by default also. -- qun-ying --- On Tue, 7/14/09, Akos Vandra axo...@gmail.com wrote: From: Akos Vandra axo...@gmail.com Subject: Re: TLSv1.2 in openssl To:

Re: TLSv1.2 in openssl

Yeah thanks, already found it :) Regards, Vandra Ákos 2009/7/14 zhu qun-ying quny...@yahoo.com If you just want to study it, gnutls has support TLS1.2, I suppose now most Linux distributions include it by default also. -- qun-ying --- On Tue, 7/14/09, Akos Vandra axo...@gmail.com

S63 certificate authentication

We're currently working to produce on software to decrypt S-63 maps: http://www.iho.shom.fr/publicat/free/files/S-63_e1.1_EN_2008.pdf We're trying to use OpenSSL to perform the data authentication and integrity checking. However, the descriptions of data formats in the OpenSSL

Re: TLSv1.2 in openssl

Apparently not even wireshark knows TLSv1.2, i'm surprised... is this protocol so new? Regards, Vandra Ákos 2009/7/14 Akos Vandra axo...@gmail.com Yeah thanks, already found it :) Regards, Vandra Ákos 2009/7/14 zhu qun-ying quny...@yahoo.com If you just want to study it, gnutls has

CertificateVerify structure decoding help needed

Hello! I am trying to decode the CertificateVerify structure, but have thus far failed. I have access to both client and server keys, and have sniffed their communication, what I came up with (along the stream) is this CertificateVerify packet sent from the client to the server: 0x16, 0x03,

Hypothetical service questions - certs as credentials?

Hello. I'm considering writing a server program (which provides mostly hypothetical services, for the purpose of this discussion). The server requires users to register an account on the server before use. The service would, I believe, simply bind usernames to one or more user-provided public

Re: Hypothetical service questions - certs as credentials?

hi everyone..can anyone tell me how to disable the export of private key when i generate certificate using openssl.

Re: How to create a non exportable private key certificate using openssl

On Tue, Jul 14, 2009, tito wrote: Hi all , I have used SPKAC format to request a digital certificate from mozilla and signed the request with my master key from open ssl and imported it to my mozilla. I can readily export (backup)the private key + certificate from mozilla and import it to

RE: How to create a non exportable private key certificate using openssl

tito wrote: I have used SPKAC format to request a digital certificate from mozilla and signed the request with my master key from open ssl and imported it to my mozilla. I can readily export (backup)the private key + certificate from mozilla and import it to some other system's mozilla

Re: TLSv1.2 in openssl

Less than a year, August 2008. RFC 5246 is the defining document. -Kyle H On Tue, Jul 14, 2009 at 8:31 AM, Akos Vandraaxo...@gmail.com wrote: Apparently not even wireshark knows TLSv1.2, i'm surprised... is this protocol so new? Regards,   Vandra Ákos 2009/7/14 Akos Vandra