Re: Recommandation related to tools to be used with OpenSSL

From: VictorMitu victorm...@yahoo.com I have the following scenario: i need an application that will do the following: 1. there is an input folder. In this folder, files will be copied/downloaded. 2. An application/script will periodically query this folder (auto-detection is also accepted).

RE: FIPS linked as a shared library

Would you elaborate what is meant by 'strict binding' please. I have tried compiling with '-z now', I have tried RTLD_LAZY and RTLD_NOW as flags to dlopen and the env var LD_BIND_NOW also had no effect. I have reproduced the same issue of the shared lib Failing on both x86 and mips. Has anyone

Getting a pem from a p12

Hi, all. First of all: sorry about my poor SSL skills. I want to create an https connection to a third party https web service and the client must use a certificate to use that web service. I am using PHP (PHP uses libcurl and supports only PEM certificates) in my side (the client side). The

Re: Getting a pem from a p12

(and I have no password!) You should ask the trust.keystore and .p12 file password to the one that sent them to you. Moreover, you should be sure you know what you are trying to get: do you want simply to convert the files from DER to PEM, or you want to extract all the certificates into PEM

Re: Problem with compiling of openSSL

I use windows cmd prompt to compile openssl (0.9.8) on XP. I have found Perl to be a main problem. make sure ActivePerl is the first perl on your path (set path=ActivePerl;%PATH%). And then run $$perl Configure other config option, look in install readme Also, if you want debug symbols you will

recommended rsa api

Hi! I'm new to openssl. I need to encrypt and decrypt approx 1k block of data with rsa. What is recommended api for the case? I've found RSA_public_encrypt() and RSA_private_decrypt(). It looks like a kind of low level api. But here I've got a problem with OAEP padding. Another one is

Re: recommended rsa api

Hi there Alexey Many people will tell you to use the EVP stuff and quite frankly, they're most likely right. However, I've not managed to figure out the EVP stuff so I use the public_encrypt and private_decrypt functions instead. I have written the following functions to encapsulate the

Re: recommended rsa api

EVP is oneway of implementing your solution. Look at Example section of http://openssl.org/docs/crypto/EVP_EncryptInit.html# -Anand On Wed, Jan 20, 2010 at 10:14 AM, Alexey Luchko l...@ank-sia.com wrote: Hi! I'm new to openssl. I need to encrypt and decrypt approx 1k block of data with

Re: recommended rsa api

For RSA API take a look at http://openssl.org/docs/crypto/rsa.html# -Anand On Wed, Jan 20, 2010 at 11:18 AM, Anand Patel anand.apa...@gmail.comwrote: EVP is oneway of implementing your solution. Look at Example section of http://openssl.org/docs/crypto/EVP_EncryptInit.html# -Anand On

error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

Hi, I am new to OpenSSL. I am trying to verify the compressed XML data, signed using PKCS#7. Then a four byte crc is appended to it and the whole data is now base64 encoded. All the above is done using windows libraries. The verification works fine in windows. Now I am trying to verify the

Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

On Tue, Jan 19, 2010, Ujwal Chinthala wrote: Hi, I am new to OpenSSL. I am trying to verify the compressed XML data, signed using PKCS#7. Then a four byte crc is appended to it and the whole data is now base64 encoded. All the above is done using windows libraries. The verification

OpenSSL 1.0.0 beta5 release

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.0 Beta 5 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The fifth beta is now released. This is expected be the final beta

threads the default in openssl 0.9.8K and L

We're making the jump from OpenSSL 0.9.8d to 0.9.8l. I noticed while buiding L (and K for that matter) that HP complains when the Configure option 'threads' is specified but no system-specific compiler options were specified. 0.9.8d does not complain this way. I removed the 'threads'

OpenSSL 0.9.8m-beta1 release

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8m-beta1 released OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.8m-beta1

multithreading question

Our server does a raw socket accept first, and then spawns a thread for each that brings up the ssl connection if applicable. The code flow is like this: int fd; SSL_CTX* ctx; SSL* ssl; BIO* fdbio = BIO_new_socket((int)fd, 0); BIO* bio = BIO_new_ssl(ctx, client); BIO_push(bio,

Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

On Tue, Jan 19, 2010, Ujwal Chinthala wrote: Hi, I am new to OpenSSL. I am trying to verify the compressed XML data, signed using PKCS#7. Then a four byte crc is appended to it and the whole data is now base64 encoded. All the above is done using windows libraries. The verification

Re-negotiation handshake failed: Not accepted by client with OpenSSL 0.98m-beta1

I'm running apache 2.2.14 with mod_ssl using OpenSSL 0.98m-beta1. When renegotiating a client session, I get an error from apache: Re-negotiation handshake failed: Not accepted by client and a fatal unexpected_message alert in OpenSSL s_client. Below you will find log output for the

RE: multithreading question

Wayne Feick wrote: Our server does a raw socket accept first, and then spawns a thread for each that brings up the ssl connection if applicable. The code flow is like this: int fd; SSL_CTX* ctx; SSL* ssl; BIO* fdbio = BIO_new_socket((int)fd, 0); BIO* bio = BIO_new_ssl(ctx,

Re: multithreading question

On Wed, Jan 20, 2010 at 07:55:35PM -0800, David Schwartz wrote: Wayne Feick wrote: Our server does a raw socket accept first, and then spawns a thread for each that brings up the ssl connection if applicable. The code flow is like this: int fd; SSL_CTX* ctx; SSL* ssl;