Re: session key reuse - server side problems

2000-02-27 Thread Bodo Moeller
Raghuram Belur [EMAIL PROTECTED] in ulf.openssl.dev: We have an application for which we are using SSL enabled clients and servers(our own server not a web server). I have been trying to get the session key reuse going for the past several days. [...] Use SSL_CTX_set_session_id_context().

installation problems

2000-02-27 Thread Pino Gargiulo
Hello, I have some problem to compile the openssl-0.9.4. I'll be very glad if you could help me. The Configure script runs without problem (I use the command: ./Configure -L/usr/local/lib linux-elf, cause there are the new version libraries), but make gives this output: /usr/lib/crt1.o: In

Re: ./config on solaris vs. unixware

2000-02-27 Thread Andy Polyakov
appro As result of added support for Unixware 7 ./config believes that even appro Solaris is Unixware 7. Well, as a matter of fact ./config will recognize appro *any* system which implements 'uname -X' and has 5 in release number as appro Unixware. In order to fix the problem I'd really love

Re: ./config on solaris vs. unixware

2000-02-27 Thread Richard Levitte - VMS Whacker
appro Well, it's a way to automatically select between -X and others That was the purpose. That way we ultimately don't need to case statements. appro (and there is shorter way, e.g. `(uname -X | awk appro '/Machine/{print $3;exit 1}' uname -m) 2/dev/null` :-). I bow to the master. appro At

0.9.5 debug-linux-elf test failure

2000-02-27 Thread Andrew W. Gray
fresh install of redhat6.0 [root@enigma openssl-0.9.5beta1]# gcc -v Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/specs gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release) [root@enigma openssl-0.9.5beta1]# ld -v GNU ld version 2.9.1 (with BFD 2.9.1.0.23)

Re: [ANNOUNCE] OpenSSL 0.9.5 beta2 available

2000-02-27 Thread Richard Levitte - VMS Whacker
appro The second beta release of OpenSSL 0.9.5 is now available from the appro OpenSSL FTP site URL: ftp://ftp.openssl.org/source/. This is the appro final beta. If it's all working, the release won't differ appro except for the version number. appro ^^ We ought to fix ./config on

Re: How to build exportable OpenSSL?

2000-02-27 Thread Rich Salz
sure you can -- set the cipherspec. and if you have to suppoer "legacy browsers" you need to. On Thu, 24 Feb 2000, [iso-8859-1] Ulf Möller wrote: On Wed, Feb 23, 2000 at 08:32:05PM -0800, Will wrote: I've looked through the documentation, but I can't seem to find how to build an

About SCO

2000-02-27 Thread Richard Levitte - VMS Whacker
uname -X on SCO OpenServer(TM) Release 5 gives: System = SCO_SV Node = midas Release = 3.2v5.0.4 KernelID = 97/05/07 Machine = Pentium BusType = ISA Serial = 2EI049692 Users = 5-user OEM# = 0 Origin# = 1 NumCPU = 1 The contributor also said "fortunately, that's the only SCO system we

Re: ./config on solaris vs. unixware

2000-02-27 Thread Andy Polyakov
appro At the very least we have to know what does 'uname -s' or appro 'uname -X | awk '/System/{print$2}' return on UnixWare. Yup. I'm currently asking arond in other fora. Hopefully there will be an answer tonight. Check out http://uw7doc.sco.com/cgi-bin/man/man?uname+1, which states

Re: ./config on solaris vs. unixware

2000-02-27 Thread Richard Levitte - VMS Whacker
appro Check out http://uw7doc.sco.com/cgi-bin/man/man?uname+1, which states appro that -X is a *undocumented* legacy option. According to the page 'uname Hmm, yep, looks like they wanna use -f instead... It's quite probable that uname works correctly nowadays, the "braindamage" may be

Re: About SCO

2000-02-27 Thread Richard Levitte - VMS Whacker
As a consequence of what Andy and I have discussed, I asked my friend to try uname with -s, -r, -v and -m: midas# uname -s SCO_SV midas# uname -r 3.2 midas# uname -v 2 midas# uname -m i386 So that's how it's braindamaged. The release number is apparently incomplete (compare with what's given

Re: ./config on solaris vs. unixware

2000-02-27 Thread Rich Salz
Is there a reason why not to just import the guess-system-type stuff from Gnu autoconf? Surely our creativity is better spent elsewhere? __ OpenSSL Project http://www.openssl.org Development

Re: [ANNOUNCE] OpenSSL 0.9.5 beta2 available

2000-02-27 Thread Richard Levitte - VMS Whacker
Lutz.Jaenicke Passes on: Lutz.Jaenicke platform: hpux-parisc-cc Lutz.Jaenicke and (this time also checked): Lutz.Jaenicke platform: hpux-parisc-gcc Thanks. Out of curiosity, which version of HP-UX? -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35

Re: ./config on solaris vs. unixware

2000-02-27 Thread Richard Levitte - VMS Whacker
salzr Is there a reason why not to just import the guess-system-type stuff salzr from Gnu autoconf? Surely our creativity is better spent elsewhere? Got the same comment from a friend just a minute ago. Yes, of course we should look in config.guess. I guess we just didn't think of that. I'll

Ooops!

2000-02-27 Thread Ben Laurie
I know I shouldn't have left this until now, but I'd quite like to commit this change I've accidentally left lying around, which allows a certificate age check: Index: apps/x509.c === RCS file: /e/openssl/cvs/openssl/apps/x509.c,v

Re: ./config on solaris vs. unixware

2000-02-27 Thread Richard Levitte - VMS Whacker
unixware problem hopefulyl solved. I looked at GuessOS in APache 1.3.1 and saw the light :-). -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +46-708-26 53 44 Procurator Odiosus

Re: [ANNOUNCE] OpenSSL 0.9.5 beta2 available

2000-02-27 Thread Lutz Jaenicke
On Sun, Feb 27, 2000 at 05:39:25PM +0100, Richard Levitte - VMS Whacker wrote: Lutz.Jaenicke Passes on: Lutz.Jaenicke platform: hpux-parisc-cc Lutz.Jaenicke and (this time also checked): Lutz.Jaenicke platform: hpux-parisc-gcc Thanks. Out of curiosity, which version of HP-UX? 10.20

./config

2000-02-27 Thread Richard Levitte - VMS Whacker
I wonder, wouldn't config and changes in it be a bit easier if we could just use (import, basically) GuessOS from Apache and replace the currently included GuessOS with something like this: ./GuessOS 2/dev/null | ( followed by the rest of config? It feels a bit clumsy, the way it is

Re: Ooops!

2000-02-27 Thread Richard Levitte - VMS Whacker
ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you what to do, but I'd prefer if you didn't before the release. Your call. -- Richard Levitte \

Re: Ooops!

2000-02-27 Thread Ben Laurie
Richard Levitte - VMS Whacker wrote: ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you what to do, but I'd prefer if you didn't before the release.

Re: 0.9.5 debug-linux-elf test failure

2000-02-27 Thread Dr Stephen Henson
Andrew W. Gray wrote: Electric Fence 2.0.5 Copyright (C) 1987-1998 Bruce Perens. test BN_add test BN_sub test BN_lshift1 test BN_lshift (fixed) test BN_lshift test BN_rshift1 test BN_rshift test BN_sqr test BN_mul ElectricFence Aborting: Allocating 0 bytes, probably a bug.

Re: Ooops!

2000-02-27 Thread Dr Stephen Henson
Ben Laurie wrote: Richard Levitte - VMS Whacker wrote: ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you what to do, but I'd prefer if you

Re: Ooops!

2000-02-27 Thread Richard Levitte - VMS Whacker
ben Ah, but you can - or I wouldn't have asked. :-) In that case, I trust my statement of preference was enough :-) -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +46-708-26 53

Re: Ooops!

2000-02-27 Thread Dr Stephen Henson
Ben Laurie wrote: Richard Levitte - VMS Whacker wrote: ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you what to do, but I'd prefer if you

Re: Ooops!

2000-02-27 Thread Ben Laurie
Dr Stephen Henson wrote: Ben Laurie wrote: Richard Levitte - VMS Whacker wrote: ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you

Re: Adding new cipher suites to TLS with 256+ bit session keys.

2000-02-27 Thread Bodo Moeller
Gregory Stark [EMAIL PROTECTED]: You might want to go to http://www.cryptosavvy.com/suggestions.htm and show your boss that 4096 bit RSA is approximately equivalent in strength to 150-160 bit keysize symmetric ciphers. [...] Their estimate is not that 4096 bit RSA is as strong as 150-160 bit

Re: Ooops!

2000-02-27 Thread Ulf Möller
On Sun, Feb 27, 2000 at 06:37:57PM +0100, Richard Levitte - VMS Whacker wrote: I can't tell you what to do, but I'd prefer if you didn't before the release. Your call. Me too. Or else delay the release for a day or two so it can be tested on all those compilers.

Re: How to build exportable OpenSSL?

2000-02-27 Thread Ulf Möller
On Sun, Feb 27, 2000 at 10:35:16AM -0500, Rich Salz wrote: sure you can -- set the cipherspec. and if you have to suppoer "legacy browsers" you need to. But that wouldn't have made OpenSSL exportable under the old regulations, would it?

Re: ./config on solaris vs. unixware

2000-02-27 Thread Ulf Möller
On Sun, Feb 27, 2000 at 11:33:49AM -0500, Rich Salz wrote: Is there a reason why not to just import the guess-system-type stuff from Gnu autoconf? Surely our creativity is better spent elsewhere? Last time I checked, the license allowed that only if the entire package is configured by

Re: How to build exportable OpenSSL?

2000-02-27 Thread Bodo Moeller
Rich Salz [EMAIL PROTECTED]: I've looked through the documentation, but I can't seem to find how to build an exportable (40 bit) version of OpenSSL? You can't, but the new regulations don't have that limit anyway. sure you can -- set the cipherspec. You cannot build a 40-bit version of

[STATUS] OpenSSL (Sun 27-Feb-2000)

2000-02-27 Thread OpenSSL Project
OpenSSL STATUS Last modified at __ $Date: 2000/02/27 18:55:01 $ DEVELOPMENT STATE o OpenSSL 0.9.5: Under development... 0.9.5-beta1 was available. Debian GNU/Linux 2.1 -

openssl-0.9.5beta2 succes

2000-02-27 Thread mads
I've just compiled openssl-0.9.5beta2 without trouble on solaris-sparcv9-gcc and linux-elf (Redhat 5.2 and 6.1). The solaris had to be told that it wasn't unixware, but I suppose that should be fixed by now. vh. Mads Toftum, MT165-RIPE -- Cynic, n.: A blackguard whose faulty vision

Re: SHOWSTOPPER BUG [ANNOUNCE] OpenSSL 0.9.5 beta2 available

2000-02-27 Thread Franz Sirl
Am Son, 27 Feb 2000 schrieb Richard Levitte: The second beta release of OpenSSL 0.9.5 is now available from the OpenSSL FTP site URL: ftp://ftp.openssl.org/source/. This is the final beta. If it's all working, the release won't differ except for the version number. The release of OpenSSL 0.9.5

Re: Ooops!

2000-02-27 Thread Ben Laurie
Ulf Möller wrote: On Sun, Feb 27, 2000 at 06:37:57PM +0100, Richard Levitte - VMS Whacker wrote: I can't tell you what to do, but I'd prefer if you didn't before the release. Your call. Me too. Or else delay the release for a day or two so it can be tested on all those compilers.

Re: Ooops!

2000-02-27 Thread Ben Laurie
Dr Stephen Henson wrote: Ben Laurie wrote: Richard Levitte - VMS Whacker wrote: ben I know I shouldn't have left this until now, but I'd quite like to ben commit this change I've accidentally left lying around, which allows a ben certificate age check: I can't tell you

Re: How to build exportable OpenSSL?

2000-02-27 Thread Rich Salz
What you are saying ist that OpenSSL is able to interoperate with 40-bit SSL clients and servers. That's true, but it is not what the question was about. Oops. Sorry for the misleading answer. __ OpenSSL Project

Linux/Alpha problems.. (Re: [STATUS] OpenSSL (Sun 27-Feb-2000))

2000-02-27 Thread Matti Aarnio
This is classical VARARGS thing.. With patch below the thing compiles and 'make test' succeeds. $ gcc -v Reading specs from /usr/lib/gcc-lib/alpha-redhat-linux/2.96/specs gcc version 2.96 2125 (experimental) gcc -I.. -I../../include -mcpu=ev56 -O3 -DL_ENDIAN -DTERMIO -c -o b_print.o

Re: Make error in openssl 0.9.4

2000-02-27 Thread Richard Levitte - VMS Whacker
jonessk gcc: Internal compiler error: program cc1 got fatal signal 11 That's a SIGSEGV. What version of gcc was that? There are two things that I can think of that you might need to do: 1. free up memory. that signal could be because it ran out of swap space. 2. upgrade gcc, it

RE: extern private key, smart cards, RSA_METHOD_FLAG_NO_CHECK

2000-02-27 Thread Ramsay, Ron
Steve, Have you looked into the requirements w.r.t. posting code from a US company? Specifically, I think you have to post to BXA as well. Ron. -Original Message- From: Reddie, Steven [mailto:[EMAIL PROTECTED]] Sent: Friday, 25 February 2000 11:32 To: [EMAIL PROTECTED] Cc: Joerg

Success with beta2 on FreeBSD 4.0-RC2

2000-02-27 Thread Kris Kennaway
FreeBSD 4.0-RC2 (release candidate 2) compiles and tests fine (i586). This is semi-significant since OpenSSL 0.9.4 is now included in the FreeBSD base system, so there are no conflicts etc. Nice work, guys! I look forward to integrating 0.9.5 into FreeBSD when it comes out (unfortunately it

Re: extern private key, smart cards, RSA_METHOD_FLAG_NO_CHECK

2000-02-27 Thread Dr Stephen Henson
Reddie, Steven wrote: I create my own RSA_METHOD structure which contains pointers to my RSA public/private encrypt/decrypt functions. It also contains a flags member which is where I set RSA_METHOD_FLAG_NO_CHECK. I have the private key stored on the Hardware Security Module (HSM) and the

Re: Make error in openssl 0.9.4

2000-02-27 Thread Kris Kennaway
On Sun, 27 Feb 2000, Richard Levitte - VMS Whacker wrote: jonessk gcc: Internal compiler error: program cc1 got fatal signal 11 That's a SIGSEGV. What version of gcc was that? There are two things that I can think of that you might need to do: 1. free up memory. that signal could

Intro

2000-02-27 Thread Moritz Designs
Hello, Im Brady Moritz and I just subscribed to the list. Im planning to do some development for my website using OpenSSL but wanted to check with ya'll first to see if something isn't out there already which will do the job I need. Basically Im wanting to build a COM object that can connect