RE: extern private key, smart cards, RSA_METHOD_FLAG_NO_CHECK

2000-02-25 Thread Reddie, Steven
I create my own RSA_METHOD structure which contains pointers to my RSA public/private encrypt/decrypt functions. It also contains a flags member which is where I set RSA_METHOD_FLAG_NO_CHECK. I have the private key stored on the Hardware Security Module (HSM) and the certificate is available to

0.9.5beta1 config problem on LinuxPPC

2000-02-25 Thread Russell Selph
The linux-ppc entry in Configure currently assumes no thread support, but linuxPPC has had thread support for a while now. In fact, it is safe to use the same thread flags as for linux-elf. Russ Selph - [EMAIL PROTECTED] Architect, TIBCO Software Inc. GnuPG Key Fingerprint: EAFF 6465 B6F9 1E67

0.9.5beta1 build report freebsd, linux, solaris ok

2000-02-25 Thread Sean O Riordain
On the following three platforms I've successfully done a build and test successfully (make install under linux as well) Very clean. Well done everybody. Sean O'Riordain // [EMAIL PROTECTED] -FreeBSD 2.2.8-STABLE (p2-450) OpenSSL 0.9.5beta1 24 Feb 2000 built on: Fri Feb 25 08:05:28 GMT 2000

Re: Current state of PKCS#11 support in OpenSSL?

2000-02-25 Thread Jean-Marc Desperrier
"Reddie, Steven" wrote: Greg, I'm not sure about the state of PKCS#11 support in relation to the latest snapshot, however I can give you some answers in relation to the latest release, OpenSSL 0.9.4. It seems everyone is duplicating this effort in fact. I supected that already. *

First error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Peter 'Luna' Runestig
Hi all! I have just successfully built openssl-0.9.5beta1 on NT 4 with VC++ 6.0 and MASM 6.14. I had to "tweak" two thing to get it through. My setup is this: perl Configure VC-WIN32 ms\do_masm nmake -f ms\ntdll.mak I'm not on this list, so you may CC any comments to me. First one, short

Second error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Peter 'Luna' Runestig
Hi all! I have just successfully built openssl-0.9.5beta1 on NT 4 with VC++ 6.0 and MASM 6.14. I had to "tweak" two thing to get it through. My setup is this: perl Configure VC-WIN32 ms\do_masm nmake -f ms\ntdll.mak I'm not on this list, so you may CC any comments to me. Second one, short

Re: SSLv3 handshake problem is a build problem

2000-02-25 Thread Bodo Moeller
On Wed, Feb 23, 2000 at 03:19:27PM -0500, Rick W. Porter wrote: 6. from crypto, I did a "make all" [...] 7. from apps, I did a "make all" [...] When you are in a sub-directory and don't want to run make from the top directory, you are supposed to just run "make" (which is equivalent to

SubjectAltName not printed by apps/ca.c

2000-02-25 Thread Lutz Jaenicke
Hi, when using apps/ca.c to sign certificate requests, the contents of the certificate is printed. The contents of the X509v3 extension "Subject Alternative Name" is however not printed, so that the information (which is also part of the signed certificate) is not verified by the issuer before

Re: 0.9.5beta1 build report freebsd, linux, solaris ok

2000-02-25 Thread Richard Levitte - VMS Whacker
levitte./config -pthread -D_REENTRANT -D_THREAD_SAFE And that should have been: ./config -pthread -D_REENTRANT -D_THREAD_SAFE threads sorry... -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47

Re: compiling on solaris for intel

2000-02-25 Thread Andy Polyakov
I try to compile (make) OpenSSL for my x86 Solaris platform. Unfortunately without success: -- make fails OpenSSL Details - Version: 0.9.3 (as well as 0.9.4) ^ You should be able to compile 0.9.4 with no-asm. But if you for any particular reason ought to

0.9.5b1 build report - Win32 fails

2000-02-25 Thread Hellan,Kim KHE
Building on WinNT4 SP6 with VC++ 6.0 SP3. Using the NASM compiler. Building using the ntdll.mak makefile (release build) Doing: perl Configure VC-WIN32 ms\do_nasm nmake -f ms\ntdll.mak The Libeay32 LIB/DLL is build without problems, but a little further in the make, it fails with the

Re: error when using make

2000-02-25 Thread Andy Polyakov
I tried to install openssl-0.9.4 on Solaris 7(Sparc) (./config -t Operating system: sun4u-sun-solaris2 Configuring for solaris-sparcv9-gcc /usr/local/bin/perl ./Configure solaris-sparcv9-gcc) but after "config", when I use "make" command, there is one error messeage: make[1]: execvp:

Re: 0.9.5beta1 build report freebsd, linux, solaris ok

2000-02-25 Thread Sean O Riordain
Richard Levitte - VMS Whacker wrote: levitte./config -pthread -D_REENTRANT -D_THREAD_SAFE And that should have been: ./config -pthread -D_REENTRANT -D_THREAD_SAFE threads same machine... no problem... -FreeBSD 2.2.8-STABLE FreeBSD 2.2.8-STABLE #0: Mon Dec 14 17:40:15 GMT

Re: Fatal error using alpha-cc compiler option

2000-02-25 Thread Andy Polyakov
jrfndes using the option alpha-cc. with -O4 ... -O1 the program ~ jrfndes /crypto/sha/sha_dsgt.c stop the jrfndes compiler sending the following the message: jrfndes jrfndes Fatal: Insufficient virtual memory to continue compilation. [...] jrfndes DEC C V5.9-008

Re: First error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Andy Polyakov
I have just successfully built openssl-0.9.5beta1 on NT 4 with VC++ 6.0 and MASM 6.14. ^ my fault, i'll look into it during the day. I had to "tweak" two thing to get it through. My setup is this: perl Configure VC-WIN32 ms\do_masm nmake -f ms\ntdll.mak I'm not on this list, so you

Re: 0.9.5beta1 build report freebsd, linux, solaris ok

2000-02-25 Thread Richard Levitte - VMS Whacker
Thanks for diong those tests. It probably will not make a change in the configuration right now, but in the future. In the mean time, I assembled the info ni http://www.openssl.org/~levitte/ -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \

Build openssl0.9.5beta1 on SunOS 5.6 sun4u sparc SUNW,Ultra-1 OK

2000-02-25 Thread Roberto Lopez Navarro
OpenSSL 0.9.5beta1 24 Feb 2000 built on: Fri Feb 25 12:52:53 MET 2000 platform: solaris-sparcv9-gcc options: bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long) idea(int) blowfish(ptr) compiler: gcc -DTHREADS -D_REENTRANT -mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall - DB_ENDIAN -DBN_DIV2W

[BUG] Snapshot 20000224 EGD problems

2000-02-25 Thread Lutz Jaenicke
Hi, while testing the new EGD support, I found some bugs. crypto/rand_egd.c:98 The first byte returned is the number of bytes granted. This number can be 0, when the egd-pool is drained, so that the following read blocks. To reproduce, run "openssl genrsa -out somekey.pem -rand /var/run/egd-pool

Bug !!!!!

2000-02-25 Thread Emanuele La Cognata
Hello, I compiled the OpenSSL library under Windows NT with : -DNO_IDEA -DNO_RC2 -DNO_RC4 -DNO_RC5 -DNO_RSA -DCIPHER_DEBUG When I run the server and client demos on my PC (localhost) I have this error: ERROR in SERVER 265:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared

0.9.5b1 Win32 Minor fix

2000-02-25 Thread Andrew W. Gray
in ms\test.bat change line 5 PATH=..\ms;%PATH% to reflect output directory for w32 build: PATH=..\out32dll;%PATH% --- I see someone already got the signed/unsigned warning treated as error due to /WX in /ssl/s3_pkt.c line 849 --- Regards, Andrew

Re: Bug !!!!!

2000-02-25 Thread Lutz Jaenicke
On Fri, Feb 25, 2000 at 03:04:14PM +0100, Emanuele La Cognata wrote: Have: 004AA3C0:EDH-DSS-DES-CBC3-SHA 004AA550:EXP1024-DHE-DSS-DES-CBC-SHA 004AA398:EDH-DSS-DES-CBC-SHA 004AA370:EXP-EDH-DSS-DES-CBC-SHA According to the rules, and available ciphers, only 4 items are left; all of them with

Re: Adding new cipher suites to TLS with 256+ bit session keys.

2000-02-25 Thread Gregory Stark
You might want to go to http://www.cryptosavvy.com/suggestions.htm and show your boss that 4096 bit RSA is approximately equivalent in strength to 150-160 bit keysize symmetric ciphers. You need to get use around 13,000 -15,000 bit RSA to get roughly the strength of 256-bit keysize symmetric

Re: 0.9.5b1 Win32 Minor fix

2000-02-25 Thread Ulf Moeller
On Fri, Feb 25, 2000, Andrew W. Gray wrote: change line 5 PATH=..\ms;%PATH% to reflect output directory for w32 build: PATH=..\out32dll;%PATH% That won't work. You should run test.bat in the output directory. (It would make sense to have test.bat change to that directory

Re: compiling on solaris for intel

2000-02-25 Thread Denis Ducamp
On Fri, Feb 25, 2000 at 11:40:39AM +0100, Andy Polyakov wrote: I try to compile (make) OpenSSL for my x86 Solaris platform. Unfortunately without success: -- make fails OpenSSL Details - Version: 0.9.3 (as well as 0.9.4) ^ You should be able to

Re: 0.9.5b1 Win32 Minor fix

2000-02-25 Thread Geoff Thorpe
On Fri, 25 Feb 2000, Andrew W. Gray wrote: --- I see someone already got the signed/unsigned warning treated as error due to /WX in /ssl/s3_pkt.c line 849 --- if you mean line 749: yeah, that was me - for some reason the couple of minor commits I made (based on VC++ testing)

0.9.5-beta1 success on HP-UX 10.20

2000-02-25 Thread Lutz Jaenicke
Hi, i nearly forgot to report success on OpenSSL 0.9.5beta1 24 Feb 2000 built on: Fri Feb 25 15:40:50 MET 2000 platform: hpux-parisc-cc options: bn(64,32) md2(int) rc4(ptr,int) des(ptr,risc1,16,long) idea(int) blowfish(idx) compiler: cc -DTHREADS -D_REENTRANT -Ae +O3 +ESlit -z -DB_ENDIAN

error in make test

2000-02-25 Thread Jonathan Sy
Why do I get an this error in make test test BN_add error make [1]: *** [test_bn} Error 1 make [1]: leaving directory /root/openssl-0.9.4/test make: *** [tests] Error 2 I have tried removing all CFLAG in makefile.ssl according to the instructions in

Decrypting a Privatkey with PKCS12

2000-02-25 Thread Falk Michael
Hello I want to decrypt a Privatkey of a PKCS12 File. The following Function overwrites while the Execution the Values pass and passlen ( see Output Debbugger) /* Decrypt data */ if (!EVP_PBE_ALGOR_CipherInit (algor, pass, passlen, ctx, en_de)) {

Re: [BUG] Snapshot 20000224 EGD problems

2000-02-25 Thread Bodo Moeller
On Fri, Feb 25, 2000 at 01:20:36PM +0100, Lutz Jaenicke wrote: if (read(fd, buf, 1) != 1) goto err; + if (buf[0] == 0) goto err; num = read(fd, buf, 255); Of course, the returned buf[0] value must match the later returned "num" value, but what should we do if it does not

Re: Decrypting a Privatkey with PKCS12

2000-02-25 Thread Dr Stephen Henson
Falk Michael wrote: Hello Dr Henson I have a great problem and hope, you can help me. I want to decrypt a Privatkey of a PKCS12 File. The following Function overwrites while the Execution the Values pass and passlen ( see Output Debbugger) Have you tried the latest OpenSSL? That has

First error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Peter 'Luna' Runestig
Hi all! (sorry about posting to the wrong list, openssl-dev) I have just successfully built openssl-0.9.5beta1 on NT 4 with VC++ 6.0 and MASM 6.14. I had to "tweak" two thing to get it through. My setup is this: perl Configure VC-WIN32 ms\do_masm nmake -f ms\ntdll.mak First one, short

Second error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Peter 'Luna' Runestig
Hi all! (sorry about posting to the wrong list, openssl-dev) I have just successfully built openssl-0.9.5beta1 on NT 4 with VC++ 6.0 and MASM 6.14. I had to "tweak" two thing to get it through. My setup is this: perl Configure VC-WIN32 ms\do_masm nmake -f ms\ntdll.mak Second one, short

Re: Bug !!!!!

2000-02-25 Thread Bodo Moeller
On Fri, Feb 25, 2000 at 03:04:14PM +0100, Emanuele La Cognata wrote: Hello, I compiled the OpenSSL library under Windows NT with : -DNO_IDEA -DNO_RC2 -DNO_RC4 -DNO_RC5 -DNO_RSA -DCIPHER_DEBUG When I run the server and client demos on my PC (localhost) I have this error: ERROR in SERVER

fails to make on ultra-30

2000-02-25 Thread Byron Berglund
Might be a problem with system determination, as I have SC4.2 (as) and SC4.0 (cc). trivium% ./config -t Operating system: sun4u-sun-solaris2 This system (solaris-sparcv9-sc3) is not supported. See file INSTALL for details. trivium% ./Configure solaris-sparcv9-cc --prefix=/safe/opt

Re: Second error compiling openssl-0.9.5beta1 on NT 4

2000-02-25 Thread Jeffrey Altman
Second one, short version = This patch also needed: --- ssl/s3_pkt.c.orig Tue Feb 22 03:59:24 2000 +++ ssl/s3_pkt.cFri Feb 25 10:39:17 2000 @@ -846,7 +846,7 @@ if (dest_maxlen 0) { n =

make errors

2000-02-25 Thread Darrell Daniel
Per INSTALL I am sending this error message. Trying to run make on openssl-0.9.4 This was the second try, so that I could capture the error msg. If you need more information please let me know. Do you have a fix? Thanks, Darrell make[1]: Entering directory `/home/user/darrell/openssl/rsaref'

SSL_CTX_sessions() gone?

2000-02-25 Thread Richard Levitte - VMS Whacker
Is there a rational reason for SSL_CTX_sessions() to have gone byebye? It existed as a macro in ssl.h until revision 1.5 (inclusive), after which it was removed for quite unclear reasons. I've hacked it back as a function that returns ctx-sessions (ctx is a SSL_CTX *), but want to know before I

Re: SSL_CTX_sessions() gone?

2000-02-25 Thread Richard Levitte - VMS Whacker
levitte I've hacked it back as a function that returns ctx-sessions (ctx is a levitte SSL_CTX *), but want to know before I commit. I couldn't see any reason not to have this function, so I commited. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35

compiling problems on RH 6.1

2000-02-25 Thread Lance Ware
Hi Folks, I'm having problems compiling under RH 6.1. Not quite sure what's wrong. Any tips are appreciated. TIA. [root@ns2 openssl-0.9.4]# ./config -t Operating system: i686-whatever-linux2 Configuring for linux-elf /usr/bin/perl ./Configure linux-elf Here's the errors: making all in

build bug

2000-02-25 Thread Yoram Meroz
Can't compile b_print.c (0.9.5b2) on a Mac. 1) ret in BIO_printf should be size_t, not int. 2) sys/types.h doesn't exist on a Mac, so you could use the flag NO_SYS_TYPES_H in e_os.h, if necessary. __ OpenSSL Project

Re: [ANNOUNCE] OpenSSL 0.9.5 beta1 available

2000-02-25 Thread Franz Sirl
At 18:45 24.02.00 , Ulf Moeller wrote: The first beta release of OpenSSL 0.9.5 is now available from the OpenSSL FTP site URL: ftp://ftp.openssl.org/source/. The release of OpenSSL 0.9.5 is scheduled for next Monday. To make sure that it will work correctly, please test this version (especially

SUPPORT

2000-02-25 Thread Osvaldo Brito
Hi, I used this command line, openssl ca -config file -out file -cert file -keyfile file -verbose and i've got this stdout error message: wrong number of fields on line 1 (looking for field 6, got 1, '' left) Anyone? Thanks in advance. Osvaldo Brito [EMAIL PROTECTED] [EMAIL

existencial question

2000-02-25 Thread Osvaldo Brito
Hi, I'm wondering how a user autenticate itself to a apache web server via browser. Do he have to carry a floppy disk with his certificate, import to the browser or will the browser just ask for a password. If it is possible the second option, how safe will be the connection? Thanks in

Re: SUPPORT

2000-02-25 Thread Osvaldo Brito
Hi, Why do a Ca certificate and CA private key do not match, when i'm trying to sign a server.csr file withl a self signed CA. Thanks in advance. Osvaldo Brito [EMAIL PROTECTED] [EMAIL PROTECTED] __ OpenSSL

Re: Need PKI and Encryption Programming Help

2000-02-25 Thread jeffkoch
We are looking for PC, Mac or Unix encryption programmers to help on an internet project on a full-time or consulting basis. We're located in New York City but work can be done off site. If anyone's interested please email me at the above address. Regards, Jeff Koch

Compile Problems With .94

2000-02-25 Thread Tom Schaefer
OK, what am I doing wrong. I've been successful on some systems, but it fails on others, and I really have no clue as to why. I run everything the way you show in the docs, but it fails. Now it seems to be failing more than not, and I don't know what's missing from my system, i.e. some sort of