Re: Embedded OpenSSL

2004-01-15 Thread Mathias Brossard 
On Tue, 2004-01-13 at 14:44, Alexis Lefort wrote:
 Because of the very limited storage capacity of the flash memory, I'd 
 like to reduce the size of libraries. In order to do that, I tried:
[...]
 (I only need RSA, DES, 3DES, AES, SHA and MD5)
[...]
 libcrypto.a was only 300ko less big than if I did not use any of those 
 options (exept no-asm).
 Is there a way to more reduce the size of libraries?

Maybe you can use parts of Martin Witzel's work:
http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=533
and in a lesser extent:
http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=569

Sincerely,
-- 
Mathias Brossard [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Embedded OpenSSL

2004-01-15 Thread Alexis Lefort 




Thanks a lot!
It seems to be what I was looking for.
:)

Mathias Brossard a crit:

  On Tue, 2004-01-13 at 14:44, Alexis Lefort wrote:
  
  
Because of the very limited storage capacity of the flash memory, I'd 
like to reduce the size of libraries. In order to do that, I tried:

  
  [...]
  
  
(I only need RSA, DES, 3DES, AES, SHA and MD5)

  
  [...]
  
  
libcrypto.a was only 300ko less big than if I did not use any of those 
options (exept no-asm).
Is there a way to more reduce the size of libraries?

  
  
Maybe you can use parts of Martin Witzel's work:
http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=533
and in a lesser extent:
http://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=569

Sincerely,
  




__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Embedded OpenSSL

2004-01-13 Thread Alexis Lefort 
Hi all,

I am a newbie in OpenSSL and my job is to build a secured server 
embedded on an ARM processor. The OS I am using is RTEMS and OpenSSL is 
0.9.7c.
I have two questions.
Because of the very limited storage capacity of the flash memory, I'd 
like to reduce the size of libraries. In order to do that, I tried:

./Configure arm-rtems --prefix=/opt/openssl-0.9.7c 
--openssldir=/opt/openssl-0.9.7c/openssl no-asm no-dso no-krb5 no-hw 
no-idea no-rc4 no-rc2 no-bf no-cast no-cast5 no-ede no-cbc no-cfb no-ofb 
no-ede3 no-ecb no-base64 no-md2 no-md4 no-rmd160 no-engine no-zlib
make depend
make

(I only need RSA, DES, 3DES, AES, SHA and MD5)
I also had to add a line to the Configure file:
arm-rtems,arm-rtems-gcc:-DL_ENDIAN 
-idirafter/opt/rtems-4.6.0pre5/arm-rtems/lib/include 
-idirafter/usr/lib/bcc/include -O5::(unknown):::BN_LLONG:::,

libcrypto.a was only 300ko less big than if I did not use any of those 
options (exept no-asm).
Is there a way to more reduce the size of libraries?

The second question I have (and the more important for me) is:
I took the examples of Eric Rescola on his web site and it works fine on 
my computer. It even seemed to work fine on my target but when the 
server (wserver2 on the target) requires a certificate from the client 
(wclient2 on the computer), I just have this message from the server:
1:error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate 
returned:s3_srvr.c:1993:

Of course I first uploaded to the server the certificates it needs 
(those given with the examples).
I also used ssldump0.9b3 and saw that the client certificate seems to be 
well sent.

I don't know what to do, any help would be welcome.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]