Re: CryptoAPI calls failing in rand_win on Windows 7

2009-11-12 Thread William A. Rowe Jr.
James Baker wrote: The problem does occur with full admin privileges. To be 100% clear, this is full admin with no UAC? UAC will drop privilege of an app seemingly running as 'administrator'. __ OpenSSL Project

RE: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread PMHager
Just a suggestion which does not consume much time: The .P12 (or .PFX) formats from OpenSSL and Windows are slightly different. To convert between the two, just import the P12 into the MS CertStore My and locate and export the certificate with its private key from that list:

Re: Memory leak issue in openssl

2009-11-12 Thread Darryl Miles
Please provide a simple testcase program exhibiting the memory leak. Please try with the most recent OpenSSL release. There are no known issue with normal usage, however some recent patches have been added for theoretical failure path memory leaks. It is possible for memory leaks to still

Re: [Q] How to encrypt using DES?

2009-11-12 Thread JongAm Park
Thank you very much. I could figure out how to use functions to cipher/decipher using DES algorithm with the high level function. I rewrote codes written with low level functions. I also found something weird, but reasonable behavour of *Update* functions, and posted a blog entry to my blog.

Re: [Q] Tutorial or Explanation how to use OpenSSL library functions?

2009-11-12 Thread JongAm Park
Hello. Thank you for mentioning the book. However, I could figure out by staring at its MAN page long time and looking up some sample codes in source code distribution of the OpenSSL. However, it would be great if there is a good reference/tutorial book. :) Thank you again, Best regards,

compile errors using mingw32

2009-11-12 Thread Al Kaiser
i had a few problems generating openssl for mingw32. These are the changes i made to util/pl/mingw32.pl to get it working: commented the following two lines: # @ak $cp='copy'; # @ak $rm='del'; changed the following line: # @ak $ret.=\tif exist $target \$(RM) $target\n; $ret.=\t\$(RM)

Re: [Q] Tutorial or Explanation how to use OpenSSL library functions?

2009-11-12 Thread Al Kaiser
i am in the same boat...i just found some c source code samples at: http://www.rtfm.com/openssl-examples/ JongAm Park wrote: Hello. Thank you for mentioning the book. However, I could figure out by staring at its MAN page long time and looking up some sample codes in source code

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Midori Green
On Thu, Nov 12, 2009 at 7:01 AM, PMHager h...@prima.de wrote: Just a suggestion which does not consume much time: The .P12 (or .PFX) formats from OpenSSL and Windows are slightly different. To convert between the two, just import the P12 into the MS CertStore My and locate and export the

Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-12 Thread James Baker
Punchline: The time taken by a call to Heap32Next on 64-bit Windows-7 SCALES (roughly linearly?) with the number of heap entries in the heap list. This seems to be a serious problem that would affect (at least) most 32-bit-compiled OpenSSL users on 64-bit Win7. I've cleared my accusation against

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Michael S. Zick
On Thu November 12 2009, Midori Green wrote: On Thu, Nov 12, 2009 at 7:01 AM, PMHager h...@prima.de wrote: Just a suggestion which does not consume much time: The .P12 (or .PFX) formats from OpenSSL and Windows are slightly different. To convert between the two, just import the P12 into

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Dr. Stephen Henson
On Thu, Nov 12, 2009, Midori Green wrote: I have been trying unsuccessfully to import a PKCS12 file created by openssl into the keychain access application for MacOSX. When I do, I always get the error: CSSMERR_CL_UNKNOWN_FORMAT Please note the following: * 2048 bit rsa private key, PEM

Re: [Q] Tutorial or Explanation how to use OpenSSL library functions?

2009-11-12 Thread Reid Thompson
JongAm Park wrote: Hello. Thank you for mentioning the book. However, I could figure out by staring at its MAN page long time and looking up some sample codes in source code distribution of the OpenSSL. However, it would be great if there is a good reference/tutorial book. :) went ahead

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Lou Picciano
Midori - Have been following this thread with some interest, as we generate PKCS12 certs commonly for use on Macs (work equally well on Windows, without issue). Will be happy to work through it with you, offering any help we can. We also are producing 2048-bit RSA keys to begin with,

Re: Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-12 Thread James Baker
I've confirmed my linear performance conjecture w/r/t heap objects. Click here to see pretty pictures graphing my results: http://thenewjamesbaker.blogspot.com/2009/11/performance-of-heap32next-on-64-bit.html On Thu, Nov 12, 2009 at 11:50 AM, James Baker j...@j-baker.org wrote: Punchline: The

Re: [Q] Tutorial or Explanation how to use OpenSSL library functions?

2009-11-12 Thread Reid Thompson
JongAm Park wrote: Hello. Thank you for mentioning the book. However, I could figure out by staring at its MAN page long time and looking up some sample codes in source code distribution of the OpenSSL. may be of use... from the mailing list and the web note that with a little

Re: Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-12 Thread Ger Hobbelt
Odd question maybe, but does the API call slowdown too when traversing other heaps (which carry fewer items)? I assume not, but since you tested this and I don't see that aspect in your blog. (Pondering what can be done here; when the answer is 'no' to previous it means the only way out is to

Re: PKCS12 import error into MacOSX keychain access

2009-11-12 Thread Midori Green
Deae Lou and Dr. Henson: Thank you again for e-mailing me with your assistance and suggestions, it is greatly appreciated. I have tried both your suggestions, and specifically used the following commands: openssl pkcs12 -export -clcerts -inkey midori.key -in midori.cert \