Re: BIO definitions missing in 0.9.8k

2009-08-08 Thread Dr. Stephen Henson
On Fri, Aug 07, 2009, Paul Suhler wrote:

 Hi, all.
 
 I'm trying to upgrade from 0.9.8i to 0.9.8k for an embedded application.
 There are two new files in crypto/bio that are having undefined symbols,
 and I can't find the symbols defined anywhere in the code:
 
 bio_asn1.c:
 BIOC_C_SET_EX_ARG
 BIO_C_SET_PREFIX
 BIO_C_GET_PREFIX
 BIO_C_GET_SUFFIX
 asn1_ps_func
 and others
 
 bio_ndef.c:
 ASN1_STREAM_ARG
 ASN1_F_BIO_NEW_NDEF
 
 I'm apparently skipping some (new?) step in the build process.  Can
 anyone tell me how these symbols are created?
 

I'm not sure what you are doing but those symbols are not in th 0.9.8 source
tree at all, they are part of the streaming ASN1 interface which is only in
1.0.0.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


x509: adding extensions to CSRs

2009-08-08 Thread Matthias Güntert
Hello guys

At the moment I am playing around with M2Crypto the OpenSSL Python
wrapper, and when it came to create a certificate signing request I
stumbled over one question:

Do x509v3 extensions have to be added to a CSR itself and be signed with
the corresponding RSA private key or is it enough adding the extensions
later on while creating a certificate?

BTW: In which RFC is the structure of a CSR described? Couldn't find
anything within 2459, 3280 nor 5280.

Regards,
Matthias Güntert 

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Compiling openssl for linux-mipsel

2009-08-08 Thread hdf sdesdh
I'm not sure how to take the question.  It's a symbol that's normally
found in libcrypto.so.  It's a function that free's an RSA*.  It's
part of the support for RSA public key crypto, which undergirds most
stuff you might want to do with OpenSSL.

If this is the case, then I definately need to keep it as it is.  I 
am trying to compile this for my router, with a third party firmware 
with OpenVPN.


I've attempted to narrow RSA_free down in libssl.so and found two 
instances.  I don't quite know where RSA_free belongs, it is just in 
the middle of a massive block of text with no beginning and no end...


The first instance:

ssl_check_serverhello_tlsext ssl3_comp_find 
EVP_PKEY_missing_parameters ssl_cert_type RSA_free 
tls1_ec_curve_id2nid EC_GROUP_new_by_curve_name EC_GROUP_free 
EC_KEY_set_public_key

Second instance:

SSL_get_ex_data_X509_STORE_CTX_idx ssl_undefined_function SSL_ctrl 
RSA_free d2i_DHparams dtls1_reset_seq_numbers SSL_get_ex_data stderr


Back to the error:

busybox/examples/depmod-t.pl -k 
/root/tomato/release/src/linux/linux/vmlinux -b 
/root/tomato/release/src/router/mipsel-uclibc/target/lib/modules/2.4.20/
---
Unable to resolve RSA_free used by libssl.so
make[1]: *** [install] Error 1
make[1]: Leaving directory `/root/tomato/release/src/router'
make: *** [all] Error 2

I don't understand why such an essential function would cause such an 
error.  Which line of depmod-t.pl is causing this error is also a 
mystery at this point.



-- 
Be Yourself @ mail.com!
Choose From 200+ Email Addresses
Get a Free Account at www.mail.com!
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


RE: BIO definitions missing in 0.9.8k

2009-08-08 Thread Paul Suhler
Hmm.  I just pulled 0.9.8k down again, and they're in the tree.  asn_mime.c 
also contains some of the stream symbols.

Are the streaming ASN.1 interface files included but not supposed to be built?

Thanks,

Paul

-Original Message-
From: owner-openssl-us...@openssl.org on behalf of Dr. Stephen Henson
Sent: Sat 8/8/2009 3:46 AM
To: openssl-users@openssl.org
Subject: Re: BIO definitions missing in 0.9.8k
 
On Fri, Aug 07, 2009, Paul Suhler wrote:

 Hi, all.
 
 I'm trying to upgrade from 0.9.8i to 0.9.8k for an embedded application.
 There are two new files in crypto/bio that are having undefined symbols,
 and I can't find the symbols defined anywhere in the code:
 
 bio_asn1.c:
 BIOC_C_SET_EX_ARG
 BIO_C_SET_PREFIX
 BIO_C_GET_PREFIX
 BIO_C_GET_SUFFIX
 asn1_ps_func
 and others
 
 bio_ndef.c:
 ASN1_STREAM_ARG
 ASN1_F_BIO_NEW_NDEF
 
 I'm apparently skipping some (new?) step in the build process.  Can
 anyone tell me how these symbols are created?
 

I'm not sure what you are doing but those symbols are not in th 0.9.8 source
tree at all, they are part of the streaming ASN1 interface which is only in
1.0.0.

Steve.

--
The information contained in this transmission may be confidential. Any 
disclosure, copying, or further distribution of confidential information is not 
permitted unless such privilege is explicitly granted in writing by Quantum 
Corporation. Furthermore, Quantum Corporation is not responsible for the proper 
and complete transmission of the substance of this communication or for any 
delay in its receipt.


Encryption Algs/Cipher modes supported

2009-08-08 Thread Sudarshan Soma
Hi, We are planning to use openssl libraries in our software. I have
to find all the supported encryption algs supported,  Encryption Mode
Support of each and so on.

I think all this information is available with
openssl list-cipher-commands.
http://www.openssl.org/docs/apps/enc.html

Please let me know if i have to verify this information from any other docs.

Thanks and Regards,
Pavan.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


( beginner ) how to send starttls command in smtp protocol ( as in the s_client )

2009-08-08 Thread Meir Yanovich
Hello all
im trying to find the right code ( c++/c) to connect to smtp server using
starttls
i know it can be done using openssl according this tutorial :
http://qmail.jms1.net/test-auth.shtml
i need to translate it to real code . that is the open ssl part
where can i find examples or tutorial which explains how to do that
Thanks