Re: Looking for an HTTPS client for NT C/C++

2000-12-01 Thread Deepak Taneja

Hello ,
 i'm using Win95,Vc++
I'm getting problem in compiling the RSA,SHA,HMac,DH algo .
Is HMAC is necessary after compuding the digest from md5 .
Have u compiled the openssl library successfully.
If yes then which OS and Which compiler
thanx  regards
Deepak


Vadim Fedukovich wrote:

 On Fri, 24 Nov 2000, Deepak Taneja wrote:

  Hello
   i'm getting problem in compiling Diffle hellman algorithm . please help
  me that what should be done . i mean which file is  to be compiled as there i'm
  tring to compile p1024.c . there is BN_BL_CTX struc is missing . If anyone has
  compile please tell me the procedure . i'll be very thankfull as i need it
  urgntly

 OS? compiler? Any problem building openssl library?

  And also what algo is to use to generate Public and private key

 Good PRNG for DH private key, modulo exponentiation for public one.
 Besides, one need to choose or generate "DH parameters".

 good luck,
 Vadim

 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-30 Thread Geoff Thorpe

Paul,

Thanks for your sage words. :-)

Cheers,
Geoff

On Wed, 29 Nov 2000, Paul Allen wrote:

 I'm starting to get really tired of this useless discussion.
 
 I cannot imagine that it is the intent of the GPL to deny software
 authors acknowledgement for their work.  It is simply not conceivable
 that this was what the FSF had in mind when they crafted the GPL.
 
 The requirement that the OpenSSL Project be credited in any advertising
 for products incorporating OpenSSL is *not* a restriction in any 
 useful sense of the word.  Why would anybody not want to credit the
 OpenSSL Project for their work?  If RMS or anybody else thinks this
 issue
 is worth arguing about, they have way too much time on their hands!
 Ignore them!
 
 There's code to write, people!  Microsoft's legions continue to toil
 away in their dungeons.  You may rest assured that they do not worry
 about obscure license clauses that get trampled underfoot.
 
 What's the goal here?  Is it to produce software that doesn't suck?
 Or is it to prove that somebody's wrong?  I think it's the former.
 Let's get on with it.
 
 'Nuff said.
 
 Paul Allen
 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread Ben Laurie

David Schwartz wrote:
 
  David Schwartz wrote:
 
  That is not a restriction on the right to "copy, distribute or modify",
  now is it?
 
 Yes, it is.
 
  All it restricts is your ability to advertise: i.e. if you
  advertise yourself, you must also advertise us. A bit like a GPL for the
  PR space :-)
 
 Umm, no. That makes no sense.
 
 If I say, "If you wish to do X, you must agree to do Y if you do Z" that is
 a restriction on your ability to do X. If you didn't do X, you could do Y
 without doing Z. If you do X, you cannot do Y without doing Z.

 The restriction on your ability to advertise is one you must accept if you
 wish to distribute the code. So it's a restriction on your ability to
 distribute the code, namely that you must accept the advertising
 restriction.

I've just reread your original post, and I see you are arguing that you
cannot distribute a combined work under the GPL. This is, of course,
true. However, the _question_ was "[is it] possible to include BSD
licensed code in a product, that is released under the GPL." This
question is somewhat ambiguous, but I took it to mean "can I release
some code under GPL that links to OpenSSL and include OpenSSL in the
tarball" - and the answer is "yes", IMO.

I'm not convinced by your argument that accepting the advertising
restriction restricts your ability to distribute the code, since you are
always free to accept the advertising restriction, and hence can always
distribute the code. But this is not relevant to the question, anyway.

Finally, I should point out, once more, that we (that is, the OpenSSL
team) _cannot_ change Eric's licence, so we can _do nothing_ about
advertising clauses. Hence, it would make sense for the community to
find ways to live with this instead of attempting to apply pressure on
us to fix the unfixable.

Cheers,

Ben.


--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread David Schwartz


Ben Laurie wrote:

 I'm not convinced by your argument that accepting the advertising
 restriction restricts your ability to distribute the code, since you are
 always free to accept the advertising restriction, and hence can always
 distribute the code. But this is not relevant to the question, anyway.

That doesn't make sense. That's like saying that if you have to pay me
$1,000 to use your car, that doesn't restrict your ability to use your car,
since you can always pay me the money and hence you can always use it.
Obviously, any restriction (by definition) restricts your ability by
imposing conditions upon you that wouldn't be there without the restriction.

 Finally, I should point out, once more, that we (that is, the OpenSSL
 team) _cannot_ change Eric's licence, so we can _do nothing_ about
 advertising clauses. Hence, it would make sense for the community to
 find ways to live with this instead of attempting to apply pressure on
 us to fix the unfixable.

I appreciate that. I certainly am not trying to put any pressure on
anybody.

If, however, others do wish to apply pressure, they should apply the
pressure to the entity with the ability to remedy this situation. That would
be the FSF, who could release a new version of the GPL that was compatible
with the OpenSSL library's license. The new license would immediately take
affect on all past and future GPLed code and permit the incorporation of
OpenSSL into all past and future GPLed projects.

DS

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread Bernard Dautrevaux

 -Original Message-
 From: David Schwartz [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, November 29, 2000 12:26 PM
 To: [EMAIL PROTECTED]
 Subject: RE: Looking for an HTTPS client for NT C/C++
 
 
 
 Ben Laurie wrote:
 
  I'm not convinced by your argument that accepting the advertising
  restriction restricts your ability to distribute the code, 
 since you are
  always free to accept the advertising restriction, and 
 hence can always
  distribute the code. But this is not relevant to the 
 question, anyway.
 
   That doesn't make sense. That's like saying that if you 
 have to pay me
 $1,000 to use your car, that doesn't restrict your ability to 
 use your car,
 since you can always pay me the money and hence you can always use it.
 Obviously, any restriction (by definition) restricts your ability by
 imposing conditions upon you that wouldn't be there without 
 the restriction.
 
  Finally, I should point out, once more, that we (that is, 
 the OpenSSL
  team) _cannot_ change Eric's licence, so we can _do nothing_ about
  advertising clauses. Hence, it would make sense for the community to
  find ways to live with this instead of attempting to apply 
 pressure on
  us to fix the unfixable.
 
   I appreciate that. I certainly am not trying to put any 
 pressure on
 anybody.
 
   If, however, others do wish to apply pressure, they 
 should apply the
 pressure to the entity with the ability to remedy this 
 situation. That would
 be the FSF, who could release a new version of the GPL that 
 was compatible
 with the OpenSSL library's license. The new license would 
 immediately take
 affect on all past and future GPLed code and permit the 
 incorporation of
 OpenSSL into all past and future GPLed projects.

I'm a bit afraid that FSF (i.e. rms) has already STRONGLY stated that the
GPL is and would remain incompatible with ANY other open source license,
except the GPL :-);

The only solution, wrt GPL, is to structure your application so that it CAN
be used without openSSL; THEN releasing your code under the GPL will not
contaminate openSSL with the GPL.

This is another example of the "better is the ennemy of good" (I don't know
if you say that in English; it's a well-known French saying: "Le mieux est
l'ennemi du bien"). GPL by wanting to force people to stay in the open
source world is in fact restricting people from living in it.

My own NSH opinion is that you probably coudl release your code under the
openSSL, or BSD, license; if you want to , you may then add a clause saying
that people distributing your code should provide the source code used to
create the executable code, with the right to redistribute it, as long as it
can be rebuilt against the standard openSSL code, or distribute th echange
they've made to openSSL to allow building this application.

However IANAL and frankly I would personally NOT go in this direction and
would release my code under the openSSL license :-)

Just my .02$

Bernard

PS: Although always attracting people, I'm not sure this GPL-compatibility
issue should be discussed at length once more. Perhaps a entry in a FAQ
could just summarize the issue (with mention of the definitive and
authoritative optinion of RMS) with indication to people willing to release
their work under an open-source license to try to avoid th eGPL wich is
marginaly NOT open-source.


Bernard Dautrevaux
Microprocess Ingenierie
97 bis, rue de Colombes
92400 COURBEVOIE
FRANCE
Tel:+33 (0) 1 47 68 80 80
Fax:+33 (0) 1 47 88 97 85
e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED]
 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread Ben Laurie

Bernard Dautrevaux wrote:
 
  -Original Message-
  From: David Schwartz [mailto:[EMAIL PROTECTED]]
  Sent: Wednesday, November 29, 2000 12:26 PM
  To: [EMAIL PROTECTED]
  Subject: RE: Looking for an HTTPS client for NT C/C++
 
 
 
  Ben Laurie wrote:
 
   I'm not convinced by your argument that accepting the advertising
   restriction restricts your ability to distribute the code,
  since you are
   always free to accept the advertising restriction, and
  hence can always
   distribute the code. But this is not relevant to the
  question, anyway.
 
That doesn't make sense. That's like saying that if you
  have to pay me
  $1,000 to use your car, that doesn't restrict your ability to
  use your car,
  since you can always pay me the money and hence you can always use it.
  Obviously, any restriction (by definition) restricts your ability by
  imposing conditions upon you that wouldn't be there without
  the restriction.
 
   Finally, I should point out, once more, that we (that is,
  the OpenSSL
   team) _cannot_ change Eric's licence, so we can _do nothing_ about
   advertising clauses. Hence, it would make sense for the community to
   find ways to live with this instead of attempting to apply
  pressure on
   us to fix the unfixable.
 
I appreciate that. I certainly am not trying to put any
  pressure on
  anybody.
 
If, however, others do wish to apply pressure, they
  should apply the
  pressure to the entity with the ability to remedy this
  situation. That would
  be the FSF, who could release a new version of the GPL that
  was compatible
  with the OpenSSL library's license. The new license would
  immediately take
  affect on all past and future GPLed code and permit the
  incorporation of
  OpenSSL into all past and future GPLed projects.
 
 I'm a bit afraid that FSF (i.e. rms) has already STRONGLY stated that the
 GPL is and would remain incompatible with ANY other open source license,
 except the GPL :-);
 
 The only solution, wrt GPL, is to structure your application so that it CAN
 be used without openSSL; THEN releasing your code under the GPL will not
 contaminate openSSL with the GPL.

Surely that doesn't have to be the case - simply packaging it without
OpenSSL will do, won't it?

 This is another example of the "better is the ennemy of good" (I don't know
 if you say that in English; it's a well-known French saying: "Le mieux est
 l'ennemi du bien"). GPL by wanting to force people to stay in the open
 source world is in fact restricting people from living in it.
 
 My own NSH opinion is that you probably coudl release your code under the
 openSSL, or BSD, license; if you want to , you may then add a clause saying
 that people distributing your code should provide the source code used to
 create the executable code, with the right to redistribute it, as long as it
 can be rebuilt against the standard openSSL code, or distribute th echange
 they've made to openSSL to allow building this application.
 
 However IANAL and frankly I would personally NOT go in this direction and
 would release my code under the openSSL license :-)

Quite.

 Just my .02$
 
 Bernard
 
 PS: Although always attracting people, I'm not sure this GPL-compatibility
 issue should be discussed at length once more. Perhaps a entry in a FAQ
 could just summarize the issue (with mention of the definitive and
 authoritative optinion of RMS) with indication to people willing to release
 their work under an open-source license to try to avoid th eGPL wich is
 marginaly NOT open-source.

RMS's opinion is not definitive - the opinion of a court will be, should
it ever come to that. Until then its all just opinion.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread Horst Herb

 now is it? All it restricts is your ability to advertise: i.e. if you
 advertise yourself, you must also advertise us. A bit like a GPL for the
 PR space :-)

 But copying, distributing and modifying are utterly unaffected by this
 clause.

 This seems to me to be not only compatible, but entirely fair.

It is certainly fair enough, but still incompatible. While your advertsing
clause is harmless (and any developer worth his salt would mention the
origin of 3rd party components anyway, regardless of such a clause,
_especially_ when it is free!), there are other advertising clauses which
can be quite blatant and nobody would like to have them incorporated in
their project.

I see it this way: openSSL is a great product, very high in demand. The main
"client" is the free software community. There, the GPL is pretty much the
standard now. Make no mistakes: the GPL is there to protect _your_ efforts,
to make sure that your donation of source will remain a donation for anybody
forever, even if it goes through countless permutations performed by others.
The GPL may force others to go "free" as well, if they are desperate enough
to use the free quality GPL'd code. Most other licensing schemes don't offer
this benefit.

I for my part would love to use openSSL in our medical project - but it
looks as if we can't, due to this licensing problem. We will have to "roll
our own", which is stupid and will cost us several months of development
time. However, we do not want to loose our efforts to commercial vultures -
we need our software and all its descendants to remain free for the sake of
free knowledge access in medicine - and no other licensing scheme but the
GPL gives us that protection.

Horst
coordinator gnumed project

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread David Schwartz


 I for my part would love to use openSSL in our medical project - but it
 looks as if we can't, due to this licensing problem. We will have to "roll
 our own", which is stupid and will cost us several months of development
 time. However, we do not want to loose our efforts to commercial
 vultures -
 we need our software and all its descendants to remain free for
 the sake of
 free knowledge access in medicine - and no other licensing scheme but the
 GPL gives us that protection.

In other words, you are suffering from a problem you could easily solve for
anyone else in the future but (apparently out of spite) you don't choose to.
If you're upset that you're going to have to roll your own to get around a
licensing restriction, why deliberately put other people in the same
position because their needs aren't compatible with _your_ licensing
restrictions?

*sigh* Free software vultures are at least as bad as commercial vultures.

DS

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-29 Thread Paul Allen

David Schwartz wrote:
 
   You would need the FSF's permission to do that. An
   "amended GPL" would be a
   derived work from the GPL itself. The GPL itself is
   copyrighted. Only the
   copyright holder has the right to produce a derived work.
 
  No you don't.
"This program is released under the GPL with the additional
  exemption that
  compiling, linking, and/or using OpenSSL is allowed."
 
 I guess I'm missing something. The problem is that the GPL says you can't
 put additional restrictions on people. The OpenSSL library does that. So the
 clause above doesn't address the problem.
 
 You would have to have something more like:
 
 "This program is released under the GPL, however the GPL's grant of the
 ability to distribute the code free of further restriction is amended to
 permit the placement of an advertising restriction."
 
 However, it really depends upon exactly what you're trying to do. If you
 want to GPL something that can use OpenSSL, I don't see a problem. The
 OpenSSL license places no restrictions on products that just use the OpenSSL
 API.
 
 If you want to actually incorporate OpenSSL code itself into a GPLed
 project, I think you're out of luck. Then OpenSSL library places
 restrictions that conflict with rights the GPL license explicitly grants
 you. I do not believe the FSF will allow you to amend the GPL to take away
 rights granted thereunder.

I'm starting to get really tired of this useless discussion.

I cannot imagine that it is the intent of the GPL to deny software
authors acknowledgement for their work.  It is simply not conceivable
that this was what the FSF had in mind when they crafted the GPL.

The requirement that the OpenSSL Project be credited in any advertising
for products incorporating OpenSSL is *not* a restriction in any 
useful sense of the word.  Why would anybody not want to credit the
OpenSSL Project for their work?  If RMS or anybody else thinks this
issue
is worth arguing about, they have way too much time on their hands!
Ignore them!

There's code to write, people!  Microsoft's legions continue to toil
away in their dungeons.  You may rest assured that they do not worry
about obscure license clauses that get trampled underfoot.

What's the goal here?  Is it to produce software that doesn't suck?
Or is it to prove that somebody's wrong?  I think it's the former.
Let's get on with it.

'Nuff said.

Paul Allen
-- 
Boeing Phantom Works   \ Paul L. Allen, (425) 865-3297
Math  Computing Technology  \ [EMAIL PROTECTED]
POB 3707 M/S 7L-40, Seattle, WA 98124-2207 \ Prototype Systems Group
---
Out from the shadows behind you pounces a bearded pirate!  "Har, har,"
he chortles, "I'll just take all this booty and hide it away with me
chest deep in the maze!" -- Adventure, Crowther  Woods, 1976
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-27 Thread Ben Laurie

Shridhar Bhat wrote:
 
 [EMAIL PROTECTED] wrote:
 
  On 24 Nov, Jean-Marc Desperrier wrote:
 
   Shridhar, a tool that incorporates OpenSSL code can hardly be released as
   GPL, because OpenSSL itself is not GPL.
  As I understand the BSD license, BSD licensed code can be rereleased
  under the GPL. See drivers/scsi/ncr53c8xx.c in the Linux kernel. This
  code was BSD licensed, it originates from FreeBSD, was ported to Linux
  and rereleased under the GPL.

Umm. Changing the licence without the consent of the copyright holder is
illegal.

   It might be a good idea to take the license of the recent release of
   Echohttpd as a model.
  :-) The license text in echohttpd is stolen from NetBSD, my preferred
  operating system. So you can say that the license of echohttpd is the
  BSD license.
  [looking in to the original 4.4BSD-Alpha source code in the TUHS
  archive, finding usr/src/etc/COPYRIGHT]
  Yes. This is _the_ BSD license that was used by the CSRG at Berkley.
 
 I have registered and got the project approved at SourceForge.net.
 While registering the project I chose the License as GPL. Now, after
 recent mails to this thread, I have a question. Can I release my
 code which uses OpenSSL under GPL or not?

Yes.

 And if I can not, then
 is there a way for me to change the license at sourceforge?
 Or, do I need to register my project under a new name and license?
 
 As I understand the OpenSSL license, I can not re-distribute
 *OpenSSL* code under GPL but I don't see any restriction on
 the code which *uses* openssl library.

That's correct.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-27 Thread Ben Laurie

John Casu wrote:
 For example, mod_ssl is released under the GPL, and links
 with openSSL and Apache.

Actually, I believe mod_ssl is BSD-licenced, as is Apache-SSL.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-27 Thread Rich Salz

 Can I release my
 code which uses OpenSSL under GPL or not?

You should, in your LICENSE file, explicitly grant permission to link against
openssl.
/r$
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-27 Thread jkunz

On 27 Nov, Ben Laurie wrote:

  As I understand the BSD license, BSD licensed code can be rereleased
  under the GPL. See drivers/scsi/ncr53c8xx.c in the Linux kernel. This
  code was BSD licensed, it originates from FreeBSD, was ported to Linux
  and rereleased under the GPL.
 Umm. Changing the licence without the consent of the copyright holder is
 illegal.
I choose the wrong words, sorry. I meant it is possible to include BSD
licensed code in a product, that is released under the GPL. 
-- 



tschüß,
 Jochen

Homepage: http://www.unixag-kl.fh-kl.de/~jkunz/

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-24 Thread Jean-Marc Desperrier

Shridhar Bhat wrote:

  ¾G¹ÅÂ×(kevin) wrote:
 
  Hi,
 
  Will you post to this mailing list how and where to download the tool?
 
  kevin
 Yes, I would post it here.

 I've got the permission from management to release it under GPL.
 I have asked to set up a machine from where it could be downloaded.
 Also, I am figuring out the licensing issues. I came across lot of
 discussions which advise releasing a tool under GPL. I may not spend
 too much time on it but if you have some quick words on it, I would
 be happy to have them. Sorry for the delay.

Shridhar, a tool that incorporates OpenSSL code can hardly be released as
GPL, because OpenSSL itself is not GPL.

I think you should release it under a license similar to the one of OpenSSL,
that is BSD like, that both makes the source of the product available to
everyone, and leaves you perfectly free to use the code in any commercial
product you do not want to  release the source code of.

Maybe be you could release it as an external contribution to openssl.

It might be a good idea to take the license of the recent release of
Echohttpd as a model.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-24 Thread Deepak Taneja

Hello
 i'm getting problem in compiling Diffle hellman algorithm . please help
me that what should be done . i mean which file is  to be compiled as there i'm
tring to compile p1024.c . there is BN_BL_CTX struc is missing . If anyone has
compile please tell me the procedure . i'll be very thankfull as i need it
urgntly
And also what algo is to use to generate Public and private key
Regards
 thanx
Deepak

Jean-Marc Desperrier wrote:

 Shridhar Bhat wrote:

   ¾G¹ÅÂ×(kevin) wrote:
  
   Hi,
  
   Will you post to this mailing list how and where to download the tool?
  
   kevin
  Yes, I would post it here.
 
  I've got the permission from management to release it under GPL.
  I have asked to set up a machine from where it could be downloaded.
  Also, I am figuring out the licensing issues. I came across lot of
  discussions which advise releasing a tool under GPL. I may not spend
  too much time on it but if you have some quick words on it, I would
  be happy to have them. Sorry for the delay.

 Shridhar, a tool that incorporates OpenSSL code can hardly be released as
 GPL, because OpenSSL itself is not GPL.

 I think you should release it under a license similar to the one of OpenSSL,
 that is BSD like, that both makes the source of the product available to
 everyone, and leaves you perfectly free to use the code in any commercial
 product you do not want to  release the source code of.

 Maybe be you could release it as an external contribution to openssl.

 It might be a good idea to take the license of the recent release of
 Echohttpd as a model.

 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-24 Thread Vadim Fedukovich



On Fri, 24 Nov 2000, Deepak Taneja wrote:

 Hello
  i'm getting problem in compiling Diffle hellman algorithm . please help
 me that what should be done . i mean which file is  to be compiled as there i'm
 tring to compile p1024.c . there is BN_BL_CTX struc is missing . If anyone has
 compile please tell me the procedure . i'll be very thankfull as i need it
 urgntly

OS? compiler? Any problem building openssl library?

 And also what algo is to use to generate Public and private key

Good PRNG for DH private key, modulo exponentiation for public one.
Besides, one need to choose or generate "DH parameters".

good luck,
Vadim

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-24 Thread jkunz

On 24 Nov, Jean-Marc Desperrier wrote:

 Shridhar, a tool that incorporates OpenSSL code can hardly be released as
 GPL, because OpenSSL itself is not GPL.
As I understand the BSD license, BSD licensed code can be rereleased
under the GPL. See drivers/scsi/ncr53c8xx.c in the Linux kernel. This
code was BSD licensed, it originates from FreeBSD, was ported to Linux
and rereleased under the GPL. 

 It might be a good idea to take the license of the recent release of
 Echohttpd as a model.
:-) The license text in echohttpd is stolen from NetBSD, my preferred
operating system. So you can say that the license of echohttpd is the
BSD license. 
[looking in to the original 4.4BSD-Alpha source code in the TUHS
archive, finding usr/src/etc/COPYRIGHT]
Yes. This is _the_ BSD license that was used by the CSRG at Berkley. 
-- 



tschüß,
 Jochen

Homepage: http://www.unixag-kl.fh-kl.de/~jkunz/

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-24 Thread Jean-Marc Desperrier

[EMAIL PROTECTED] wrote:

 On 24 Nov, Jean-Marc Desperrier wrote:

  Shridhar, a tool that incorporates OpenSSL code can hardly be released as
  GPL, because OpenSSL itself is not GPL.

 As I understand the BSD license, BSD licensed code can be rereleased
 under the GPL. See drivers/scsi/ncr53c8xx.c in the Linux kernel. This
 code was BSD licensed, it originates from FreeBSD, was ported to Linux
 and rereleased under the GPL.

I said "hardly", the exact meaning is "they are problems" and they have been
shown very recently.
Just consut the archive, thread title "Licencing issues", and you'll know
everything you need about it.
This is only 10 days old.

Only the original author can really take the decision to rereleased BSD/BSD
like code under the GPL.
In the case of ncr53c8xx.c, the original author is Stanglmeier, and _he_ is the
one who has rereleased it under GPL if the announcement at start of the file is
correct.
This will not happen with OpenSSL.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-23 Thread Shridhar Bhat

 ¾G¹ÅÂ×(kevin) wrote:
 
 Hi,
 
 Will you post to this mailing list how and where to download the tool?
 
 kevin
Yes, I would post it here.

I've got the permission from management to release it under GPL.
I have asked to set up a machine from where it could be downloaded.
Also, I am figuring out the licensing issues. I came across lot of
discussions which advise releasing a tool under GPL. I may not spend
too much time on it but if you have some quick words on it, I would
be happy to have them. Sorry for the delay.

Bye
Shridhar.

Shridhar Bhat. [EMAIL PROTECTED]
PSPL,"Panini", 2A Senapati Bapat Rd.,Pune -16  Tel: 5676700 #ext 561

Quote for the day:
Don't ask the barber whether you need a haircut or a salesman if his is
a good price
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-23 Thread Shridhar Bhat

 I've got the permission from management to release it under GPL.
 I have asked to set up a machine from where it could be downloaded.
 Also, I am figuring out the licensing issues. I came across lot of
 discussions which advise releasing a tool under GPL. I may not spend
Actually, it should have been "advise *against* releasing a tool under
GPL". Sorry for that.

Bye
Shridhar.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-23 Thread John Casu

[Charset iso-8859-1 unsupported, filtering to ASCII...]
  _G(kevin) wrote:
  
  Hi,
  
  Will you post to this mailing list how and where to download the tool?
  
  kevin
 Yes, I would post it here.
 
 I've got the permission from management to release it under GPL.
 I have asked to set up a machine from where it could be downloaded.
 Also, I am figuring out the licensing issues. I came across lot of
 discussions which advise releasing a tool under GPL. I may not spend
 too much time on it but if you have some quick words on it, I would
 be happy to have them. Sorry for the delay.
 

If you need some help with this, I work in the same office as the
sourceforge people, and I can certainly put you in touch.

That would give you a hosted site, external CVS, and a whole bunch of other 
cool features.  check out http://www.sourceforge.net.

john.
:
 Bye
 Shridhar.
 
 Shridhar Bhat. [EMAIL PROTECTED]
 PSPL,"Panini", 2A Senapati Bapat Rd.,Pune -16  Tel: 5676700 #ext 561
 
 Quote for the day:
 Don't ask the barber whether you need a haircut or a salesman if his is
 a good price
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]
 

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-22 Thread (kevin)
Title: RE: Looking for an HTTPS client for NT C/C++





Hi,


Will you post to this mailing list how and where to download the tool?


kevin


 -Original Message-
 From: Shridhar Bhat [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, November 21, 2000 7:03 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Looking for an HTTPS client for NT C/C++
 
 
 Wirta, Ville wrote:
  
  I would also be interested if THE tool is available 
 somehow/somewhere!
  
  Yours VW
  
  -Original Message-
  From: John Casu [mailto:[EMAIL PROTECTED]]
  Sent: Tuesday, November 21, 2000 12:06 PM
  To: [EMAIL PROTECTED]
  Subject: Re: Looking for an HTTPS client for NT C/C++
  
   John Casu wrote:
   
do you support non-blocking connections with your tool ??
if so, that would be very useful.
   
thanks,
   
john c.
  
   Yes.
  
  That's cool. How can I get a copy of your ssl tool ?
  
  What would it take for your tool to be released under the GPL ?
  
  thanks,
  john c.
 
 I would let you know about how to download the tool very soon. 
 -- 
 
 Bye
 Shridhar.
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List [EMAIL PROTECTED]
 Automated List Manager [EMAIL PROTECTED]
 





Re: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread Shridhar Bhat

John Townsend wrote:
 
 I'm looking for a basic HTTPS client program that will compile and run under NT
 (preferably with VC++).  If it can just GET a page from a named HTTPS server
 with authentication and echo it to standard output, that would be perfect.  I've
 looked at several examples already (including the ssl/cli.cpp and bio/sconnect.c
 examples in the OpenSSL distribution and the SSL gadget at Darkspell), but
 haven't quite found what I'm looking for.  The biggest problem is probably that
 I'm a UNIX programmer, not an NT programmer, and am having various problems
 getting some of these to port.  If someone could send or direct me to a better
 example, I'd be most grateful.  Thanks!

Our group has written an SSL based client which we heavily use
in stress testing HTTPS as well as HTTP servers. This client is
implemented in C on RHLinux 6.1. You may have to modify the part
which uses pthreads and make it use WinThreads. I don't think this
would take lot of time/effort.
This client can simulate any number of test clients which you
want. You need to supply it a file containing all the URLs to be
fetched from the web server. Following options can be provided to
this tool from command line:

-a retries  No. of times connects are retried before giving up
-b buffer_size  I/O buffer size in KB
-c cipher_suite cipher suite to use
-d MIN:MAX  Random delay in milliseconds between successive 
requests with min and max in milliseconds
-e loglevel Logging level : Default -None, 1 - data, 2 - SSL
-f script_file  file containing URLs to be fetched
-h  Prints this help
-i iterations   number of iterations per client
-j  establish sessions without any data transfer
-l log_file file in which logs are to be dumped
-n numClients   Number of concurrent clients to be activated
-p port Port number of the server
-r  reuse the session ID for one set of requests
-s IPAddressIP address of the server
-t bandwidthBandwidth throttling in KBPS
-v  turn the client verification ON
-u  Plain HTTP connection, SSL is not used

Let me know if you are interested in using this tool, we would
be happy to release this tool under GPL.

-- 

Bye
Shridhar.

Shridhar Bhat. [EMAIL PROTECTED]
PSPL,"Panini", 2A Senapati Bapat Rd.,Pune -16  Tel: 5676700 #ext 561

Quote for the day:
McLaughlin's Law
The length of any meeting is inversely proportional to the length of 
the agenda for that meeting.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread John Casu

 John Townsend wrote:
  
  I'm looking for a basic HTTPS client program that will compile and run under NT
  (preferably with VC++).  If it can just GET a page from a named HTTPS server
  with authentication and echo it to standard output, that would be perfect.  I've
  looked at several examples already (including the ssl/cli.cpp and bio/sconnect.c
  examples in the OpenSSL distribution and the SSL gadget at Darkspell), but
  haven't quite found what I'm looking for.  The biggest problem is probably that
  I'm a UNIX programmer, not an NT programmer, and am having various problems
  getting some of these to port.  If someone could send or direct me to a better
  example, I'd be most grateful.  Thanks!
 

The curl library will do the job for you.
see::  http://curl.haxx.se

 Our group has written an SSL based client which we heavily use
 in stress testing HTTPS as well as HTTP servers. This client is
 implemented in C on RHLinux 6.1. You may have to modify the part
 which uses pthreads and make it use WinThreads. I don't think this
 would take lot of time/effort.
 This client can simulate any number of test clients which you
 want. You need to supply it a file containing all the URLs to be
 fetched from the web server. Following options can be provided to
 this tool from command line:
 
 -a retries  No. of times connects are retried before giving up
 -b buffer_size  I/O buffer size in KB
 -c cipher_suite cipher suite to use
 -d MIN:MAX  Random delay in milliseconds between successive 
 requests with min and max in milliseconds
 -e loglevel Logging level : Default -None, 1 - data, 2 - SSL
 -f script_file  file containing URLs to be fetched
 -h  Prints this help
 -i iterations   number of iterations per client
 -j  establish sessions without any data transfer
 -l log_file file in which logs are to be dumped
 -n numClients   Number of concurrent clients to be activated
 -p port Port number of the server
 -r  reuse the session ID for one set of requests
 -s IPAddressIP address of the server
 -t bandwidthBandwidth throttling in KBPS
 -v  turn the client verification ON
 -u  Plain HTTP connection, SSL is not used
 
 Let me know if you are interested in using this tool, we would
 be happy to release this tool under GPL.


do you support non-blocking connections with your tool ?? 
if so, that would be very useful.


thanks,

john c.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread Shridhar Bhat

John Casu wrote:
 
 do you support non-blocking connections with your tool ??
 if so, that would be very useful.
 
 thanks,
 
 john c.

Yes.
-- 
Bye
Shridhar.

Shridhar Bhat. [EMAIL PROTECTED]
PSPL,"Panini", 2A Senapati Bapat Rd.,Pune -16  Tel: 5676700 #ext 561

Quote for the day:
Murphy says...
You can't there from here.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread John Casu

 John Casu wrote:
  
  do you support non-blocking connections with your tool ??
  if so, that would be very useful.
  
  thanks,
  
  john c.
 
 Yes.

That's cool.  How can I get a copy of your ssl tool ?

What would it take for your tool to be released under the GPL ?

thanks, 
john c.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread Wirta, Ville

I would also be interested if THE tool is available somehow/somewhere!

Yours  VW

-Original Message-
From: John Casu [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 21, 2000 12:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Looking for an HTTPS client for NT C/C++


 John Casu wrote:
  
  do you support non-blocking connections with your tool ??
  if so, that would be very useful.
  
  thanks,
  
  john c.
 
 Yes.

That's cool.  How can I get a copy of your ssl tool ?

What would it take for your tool to be released under the GPL ?

thanks, 
john c.

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Looking for an HTTPS client for NT C/C++

2000-11-21 Thread Shridhar Bhat

"Wirta, Ville" wrote:
 
 I would also be interested if THE tool is available somehow/somewhere!
 
 Yours  VW
 
 -Original Message-
 From: John Casu [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, November 21, 2000 12:06 PM
 To: [EMAIL PROTECTED]
 Subject: Re: Looking for an HTTPS client for NT C/C++
 
  John Casu wrote:
  
   do you support non-blocking connections with your tool ??
   if so, that would be very useful.
  
   thanks,
  
   john c.
 
  Yes.
 
 That's cool.  How can I get a copy of your ssl tool ?
 
 What would it take for your tool to be released under the GPL ?
 
 thanks,
 john c.

I would let you know about how to download the tool very soon. 
-- 

Bye
Shridhar.
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Looking for an HTTPS client for NT C/C++

2000-11-20 Thread Harry Whitehouse

John -- Take a look at the WININET.DLL resources on the MS site.  This DLL
is the core of Internet Explorer and the API set is exposed to developers.
The user must have IE installed on their machine (although it needn't be
their default browser) for this to work.

HTH

Harry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of John Townsend
Sent: Sunday, November 19, 2000 5:25 PM
To: [EMAIL PROTECTED]
Subject: Looking for an HTTPS client for NT C/C++


I'm looking for a basic HTTPS client program that will compile and run under
NT
(preferably with VC++).  If it can just GET a page from a named HTTPS server
with authentication and echo it to standard output, that would be perfect.
I've
looked at several examples already (including the ssl/cli.cpp and
bio/sconnect.c
examples in the OpenSSL distribution and the SSL gadget at Darkspell), but
haven't quite found what I'm looking for.  The biggest problem is probably
that
I'm a UNIX programmer, not an NT programmer, and am having various problems
getting some of these to port.  If someone could send or direct me to a
better
example, I'd be most grateful.  Thanks!

--
John E. Townsend
Sr. Software Engineer  "Machines should work;
LEXIS-NEXIS people should think."
Dayton OH, USA-- IBM Pollyanna Principle
[EMAIL PROTECTED]
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]