Re: Fw: Failing in Verifying CRL

Hi, Yes if I place the CA file in the root directory i.e. where openssl is present, it verifies. If I place in some dir it won't. Thanks for the help Regards, Wahaj - Original Message - From: Olaf Gellert [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 09, 2004 12:00 PM

Re:Random number seed in RSA

You can use these functions: void RAND_seed(const void *buf, int num); void RAND_add(const void *buf, int num, double entropy); int RAND_status(void); int RAND_event(UINT iMsg, WPARAM wParam, LPARAM lParam); void RAND_screen(void); You need to seed PRNG before the function

RE : Random number seed in RSA

You can also use the RAND_status() function that implicitly calls RAND_poll(). RAND_poll() actually uses memory state, processes, handles, screen state... to initialize the PRNG. If it is not sufficiant (it usually is), you can read some entropy from a file using RAND_read() function. Marc.

RE: Random number seed in RSA

Title: Message HI., You can use /dev/random as a seed generator..I belive that cygwin has the support for /dev/random device.. For that u can use RAND_load_file("/dev/random", no_of_bytes) for programming the seed. or otherwise you can use the static character buffer (rnd_seed)as a seed and

New engines.

Hi, I would like to develop a new engine with some crypto functions to with OpenSSL. Wherecan I getinformation about the API? Where should I start? Thank you, Roberto Gallo BEGIN:VCARD VERSION:2.1 N:Gallo;Roberto;;Msc FN:Roberto Gallo NICKNAME:Gallo ORG:kryptus Tecnologias Ltda.

Re: New engines.

man 3 engine --- Juan Segarra Montesinos http://spisa.act.uji.es/~juan/ On Tue, 10 Aug 2004, Roberto Gallo wrote: Hi, I would like to develop a new engine with some crypto functions to with OpenSSL. Where can I get information about the API? Where should I start? Thank you, Roberto

Re: New engines.

Roberto Gallo wrote: Hi, I would like to develop a new engine with some crypto functions to with OpenSSL. Wherecan I getinformation about the API? Where should I start? Thank you, Roberto Gallo look at crypto/engine directory . there several engines in there. Take

Avoiding Certificates for Server/Client approach

Hello list, i am currently trying to get rid of all the certificate stuff, that i've seen often before in many applications using the openssl library. basically my server/client model should only handshake without certificate exchange. the cipher is choosen by the client. after that the two

Re: Avoiding Certificates for Server/Client approach

Try using Diffie Helleman to derive the private key by exchanging public keys. Encrypt/Decrypt with the derived private key at the respective ends. On Tue, 2004-08-10 at 16:47, [EMAIL PROTECTED] wrote: Hello list, i am currently trying to get rid of all the certificate stuff, that i've seen

Re: Avoiding Certificates for Server/Client approach

I know about DH key exchange and its use in the openssl library. But how would i use the private session keys from DH to encrypt and decrypt the data flowing from peer to peer with highlevel hooks like SSL_read and SSL_write? Or is it required to use completely different functions like the EVP_*

OpenSSL function for pure base64 encoding.....

Hi all!! Thanks a lot for your answers!!! they were really useful !!! Now I have another question. Is there an OpenSSL function to perform a pure base64 (not PEM)encoding of a buffer?? I've read in OpenSSL docs that the bio's filterscould be useful but I made a little test and this fails

Re: Avoiding Certificates for Server/Client approach

On Tue, Aug 10, 2004, [EMAIL PROTECTED] wrote: I know about DH key exchange and its use in the openssl library. But how would i use the private session keys from DH to encrypt and decrypt the data flowing from peer to peer with highlevel hooks like SSL_read and SSL_write? Or is it required

creating postfix certs

I am having very much trouble making the correct certs for postfix as i what to become my own CA and sign my own certs. Also i would like to have my clients click a link on my webpage to import the cert. Does anyone know of an easy way to do this i have tried many online howto's and searched

OpenSSL and JAVA

Good day! I'm having problems importing my OpennSSL certificates to my keystore. I created my root certificate in cacert.pem and I'm trying to import this now to my keystore. keytool -import -trustcacerts -file cacert.pem -keystore myKeystore I'm getting keytool error: java.lang.Exception: