SSL_read, SSL_write confusion

2012-07-02 Thread Doğan Kurt
Hi, i am developing a client app with openssl. I use SSL_read and SSL_write in blocking mode, i just cant figure out something about them, if server sends me 10 kb and i call SSL_read just once, can i assume that i will receive all the data at once. I use simple recv call with that classic

X.509 certificate subject format

2012-07-02 Thread Johannes Bauer
Hi list, I have a rather simple question regarding X.509 subjects that is not entirely clear to me and for which I cannot find the appropriate reference (pointers greatly appreciated). The trouble starts when trying to compare two subjects of *different* certificates for equality and becomes

Re: [openssl-users] X.509 certificate subject format

2012-07-02 Thread Erwann Abalea
Le 02/07/2012 10:34, Johannes Bauer a écrit : I have a rather simple question regarding X.509 subjects that is not entirely clear to me and for which I cannot find the appropriate reference (pointers greatly appreciated). The trouble starts when trying to compare two subjects of *different*

Re: X.509 certificate subject format

2012-07-02 Thread Peter Sylvester
On 07/02/2012 10:34 AM, Johannes Bauer wrote: Hi list, I have a rather simple question regarding X.509 subjects that is not entirely clear to me and for which I cannot find the appropriate reference (pointers greatly appreciated). The trouble starts when trying to compare two subjects of

Re: Convert PKCS7_decrypt output to char*

2012-07-02 Thread Mohammad khodaei
Hello, I want to encrypt and decrypt using PKCS7_encrypt() and PKCS7_decrypt(). I use this procedure to encrypt so that I can retreive the encrypted buffer into a char* (and not into a file). Here is the code:     p7 = PKCS7_encrypt(recips, in, EVP_des_ede3_cbc(), flags);     if (!p7)        

Padding used by the ca command

2012-07-02 Thread Mathias Tausig
Hello! Which padding method does openssl use, when I sign a certificate with the 'ca' command (using an RSA key)? Is there a way to change it? cheers Mathias smime.p7s Description: S/MIME Cryptographic Signature

Re: [openssl-users] Padding used by the ca command

2012-07-02 Thread Erwann Abalea
Bonjour, Le 02/07/2012 16:05, Mathias Tausig a écrit : Which padding method does openssl use, when I sign a certificate with the 'ca' command (using an RSA key)? RSA PKCS#1v1.5 Is there a way to change it? I don't think so. -- Erwann ABALEA

FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-02 Thread Dirk Menstermann
Anybody able to help me (problem posted below some days ago)? Thanks a lot Dirk On 27.06.2012 14:42, Dirk Menstermann wrote: Hello, I tried to build the FIPS version (openssl-fips-2.0.1) on win7 and VS2005 (command line prompt) using the build target debug-VC-WIN64A and option no-asm.

RE: FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-02 Thread Sergio NNX
More than happy to help you Dirk, but we use MinGW here and it works ok. You could check the versions (OpenSSL version and FIPS version). Sergio. Date: Mon, 2 Jul 2012 18:05:54 +0200 From: noadsple...@web.de To: openssl-users@openssl.org Subject: FIPS in 1.0.1 windows 7 64 bit compile /

Re: FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-02 Thread Dirk Menstermann
Hello Sergio, I use openssl-1.0.1c (and a daily snaphost) and openssl-fips-2.0.1. Which combination are you using and which target (debug?) do you build? Will the function FIPS_corrupt_aes be exported and is the include file fips.h available? Thanks Dirk On 02.07.2012 18:30, Sergio NNX wrote:

Re: FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-02 Thread Dr. Stephen Henson
On Mon, Jul 02, 2012, Dirk Menstermann wrote: Hello Sergio, I use openssl-1.0.1c (and a daily snaphost) and openssl-fips-2.0.1. Which combination are you using and which target (debug?) do you build? Will the function FIPS_corrupt_aes be exported and is the include file fips.h available?

Re: [openssl-users] Padding used by the ca command

2012-07-02 Thread Dr. Stephen Henson
On Mon, Jul 02, 2012, Erwann Abalea wrote: Bonjour, Le 02/07/2012 16:05, Mathias Tausig a écrit : Which padding method does openssl use, when I sign a certificate with the 'ca' command (using an RSA key)? RSA PKCS#1v1.5 Is there a way to change it? I don't think so. In openssl

Re: [openssl-users] Padding used by the ca command

2012-07-02 Thread Erwann Abalea
Le 02/07/2012 19:38, Dr. Stephen Henson a écrit : On Mon, Jul 02, 2012, Erwann Abalea wrote: Le 02/07/2012 16:05, Mathias Tausig a écrit : Is there a way to change it? I don't think so. In openssl 1.0.1 and later you can use the -sigopt to change the signature format used. It currently

RE: OCSP proxy support

2012-07-02 Thread Bin Lu
Dr. Stephen others, Could you please shed some light on this? I need to talk to an OCSP responder through a proxy server. I am currently using OCSP_sendreq_nbio(). What is the best solution (including hacking the openssl code) to make it work? Thanks in advance, -binlu From:

RE: Client certificate verification: performance

2012-07-02 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Sukalp Bhople Sent: Friday, 29 June, 2012 19:37 Following is the code I used at server side program. while (1) { SSL *ssl = SSL_new(ctx); SSL_set_fd(ssl, clientserver[1]); if (SSL_accept(ssl) != 1) break;

RE: SSL_read, SSL_write confusion

2012-07-02 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Dogan Kurt Sent: Friday, 29 June, 2012 15:14 Hi, i am developing a client app with openssl. I use SSL_read and SSL_write in blocking mode, i just cant figure out something about them, if server sends me 10 kb and i call SSL_read just once, can

AUTO: Peter Birk pb...@us.ibm.com is out of the office until July 16th, 2012

2012-07-02 Thread Peter Birk
I am out of the office until 07/16/2012. I'm out of the office until July 16th, 2012. I will have limited network access but will likely be checking for urgent emails daily. If you have questions about any of the following projects, please contact those listed below. For all other