RE: [STATUS] OpenSSL (Sun 7-May-2000)

2000-05-08 Thread Howard Chu
I have a number of patches against 0.9.4 supporting shared libraries on AIX, Solaris, and NT. I plan to sync up with 0.9.5a and/or 0.9.6 in the next couple days. Let me know if you're interested in seeing the diffs. -- Howard Chu Chief Architect, Symas Corp. Director, Highland Sun

RE: Adding BF to tls WIN32 static linking of ssl libraries.

2000-05-08 Thread Shmuel Siegel
out of curiosity, why do you need msvcrtd.dll. This is a debugging library. As far as I know, you shouldn't need it in a release version. the same applies to msvcirtd.dll. -Original Message- From: Eugene Levy [SMTP:[EMAIL PROTECTED]] Sent: Monday, May 08, 2000 6:20 AM To: [EMAIL

Object Identifiers

2000-05-08 Thread Amit Chopra
Hi, I was going through the openssl.cnf file and there was a directive for Object Identifers section. I went through the openssl docs but didn't get much info. Eventually I found myself reading RFC 2459 (Certificate and CRL Profile).There i found many strings like the following. An algorithm

No Subject

2000-05-08 Thread Phillip Porch
OpenSSL self-test report: OpenSSL version: 0.9.5b-dev Last change: Fix for SSL server purpose checking. Server checking wa... OS (uname): SCO_SV sco 3.2 5.0.5 i386 OS (config): whatever-whatever-sco5 Target (default): sco5-gcc Target: sco5-cc Compiler: Usage:

Re: SSL protocol overhead

2000-05-08 Thread Amit Chopra
The people at Tokyo Institute of Technology have done some performance maesurements. Their document might be of use to you. http://maruyama-www.cs.titech.ac.jp/~maruyama/papers/specwebssl/ Amit. Douglas Lee wrote: Does anyone know what the protocol overhead is or how I can calculate it?

RE: Object Identifiers

2000-05-08 Thread Salz, Rich
Object OID's are intended to be universally unique identifiers. They are distributed hierarchically, just like domain names. For examle, ISO (1) created a group of organizations (3), and within that recognized the US Dept of Defense (6), which recognized the IETF (1), who created a branch for

Error in get client hello

2000-05-08 Thread Amit Chopra
Hi All, I am facing a problem accepting SSL connections. I have a simple multi-threaded SSL web server. For test purposes I have also written a simple SSL client. When I open an instance of IE (5.0) or Navigator(4.7),the browser opens multiple connections with my server (one for each URI)

Send me an example client/server application for Linux using openssl security software

2000-05-08 Thread Pamu Radha
I,Mr.Radhakrishna-presently working in openSSL ,have installed the "openssl" security software on the Linux network.Now i want to send the information from one system(client) to another system(server)using "openssl API functions". It is first time for me to work on "openssl" security

SCO Openserver 5.0.5 problem

2000-05-08 Thread Phillip Porch
I have the 0.7 version of egd.pl installed and running with egd.pl /dev/entropy The self tests work fine. I set the RANDFILE to the /dev/entropy after compiling openssl (CVS version as of 5/7/00.) I have no problems with: openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem

Re: Adding BF to tls WIN32 static linking of ssl libraries.

2000-05-08 Thread Dr Stephen Henson
Eugene Levy wrote: Is there anyway to add the BF (BlowFish) symmetric cipher to TLS, so that within a TLS session, randomly generated BF keys are used? For those paranoid with security, a "BF-SHA1" cipher, with 256-448 bit random keys can be used. The current release of openssl-0.95a

Re: Send me an example client/server application for Linux using openssl security software

2000-05-08 Thread Douglas Lee
You can compile working versions of client/server demos as part of the openssl package. Have a look under the demos/ssl directory. Cheers --Douglas Lee On Mon, 8 May 2000, [iso-8859-1] Pamu Radha wrote: I,Mr.Radhakrishna-presently working in openSSL ,have installed the "openssl" security

Re: SSL protocol overhead

2000-05-08 Thread Douglas Lee
On Mon, 8 May 2000, Amit Chopra wrote: The people at Tokyo Institute of Technology have done some performance maesurements. Their document might be of use to you. http://maruyama-www.cs.titech.ac.jp/~maruyama/papers/specwebssl/ This is a broken link. Anyway what I have done is changed

Re: Adding BF to tls WIN32 static linking of ssl libraries.

2000-05-08 Thread Peter Gutmann
Dr Stephen Henson [EMAIL PROTECTED] writes: It would be possible to add BF cipher suites giving them experimental numbers but ideally some "official" numbers should be used. There's an infintely-delayed informational RFC for BF which I have sitting on a machine somewhere, if it's required (to

Re: SCO Openserver 5.0.5 problem

2000-05-08 Thread Brian Carrier
The author of EGD (Brian Warner) sent the following to the OpenSSH list a few weeks ago when someone there had a similar problem. It was hanging because it was out of entropy. If you run EGD with the --debug-gather switch you can check for the "ran out of sources" that is referred to below.

RE: SSL protocol overhead

2000-05-08 Thread Fletcher Cocquyt
That URL comes up 404 - but the server is OK I am interested in the data - can you forward a working URL? Thanks! -Original Message- From: Amit Chopra [mailto:[EMAIL PROTECTED]] Sent: Monday, May 08, 2000 6:08 AM To: [EMAIL PROTECTED] Subject: Re: SSL protocol overhead The people at

client/server application in C using openssl- API functions

2000-05-08 Thread Pamu Radha
hai, I have installed the"openssl" security software on the Linux network.Now i want to send the information from one system(client) to another system(server) using "openssl API functions". It is first time for me to work on "openssl" security software.So iam asking you to send me the testing

Re: Object Identifiers

2000-05-08 Thread Amit Chopra
Thank you, that was quite informative and interesting. I'll follow it up with some research of my own. Amit. "Salz, Rich" wrote: Object OID's are intended to be universally unique identifiers. They are distributed hierarchically, just like domain names. For examle, ISO (1) created a

Re: Error in get client hello

2000-05-08 Thread Amit Chopra
Hi, I want to add an observation that I have just made. Previously I used to create a new SSL structure for every connection and things worked fine. Then I changed it so that I have a pool of SSL structures (to avoid fragmentation) and I reuse them by calling SSL_clear(ssl);