[openssl.org #191] 0.9.7-beta3 build procedures

2002-10-11 Thread Richard Levitte via RT
[[EMAIL PROTECTED] - Fri Aug 2 09:22:20 2002]: In message [EMAIL PROTECTED] on Fri, 2 Aug 2002 09:00:55 +0200 (METDST), [EMAIL PROTECTED] via RT [EMAIL PROTECTED] said: rt During the build I get an occasional rt rt %DCL-W-TKNOVF, command element is too long - shorten Thanks,

[openssl.org #220] bug in config (openssl-0.9.6g, Solaris2.6)

2002-10-11 Thread Richard Levitte via RT
This ticket appears to be resolvable, but to be safe, I'll ask: is this still an issue? [guest - Fri Aug 16 11:04:41 2002]: Note that the solaris-sparcv9-cc and solaris-sparcv9-gcc configurations actually use just sparcv8plus code (32 bit); see Configure. I did not know that, since I

[openssl.org #248] bad serial number length

2002-10-11 Thread Richard Levitte via RT
Ticket resolved. I ended up changing ca.c (and ocsp.c in 0.9.7 and up). The change will be visible in the next snapshot. Thanks for the report and your patience. [levitte - Tue Oct 8 12:29:23 2002]: [steve - Fri Aug 30 19:52:43 2002]: [[EMAIL PROTECTED] - Mon Aug 26 10:33:29 2002]:

OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Massimiliano Pala
Hi, I have planned to write some code to implement an ENGINE allowing OpenSSL to use the MUSCLEcard framework so as to use SmartCards just as the other HW tokens (it could be useful in our project to use the CA keys on a Smart Card rather then on the HardDrive and having to protect a whole

RE: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Frederic DONNAT
Hi Richard, I have a question PKCS#11 ENGINE, etc ... As far as i can see some method like RSA_generate_key() are not available in RSA_Method structure, but RSA key generation can be provide by hardaware even if key is not stored on it (for example). On the other hand, according to PKCS#11

[ENHANCEMENT] Support for Oracle Wallet Manager nonstandard private key format

2002-10-11 Thread dom
Dear openssl hackers, Attached is a new applet for /usr/bin/openssl that we developped. It may be used to decode Oracle Wallet Manager 2.1's nonstandard private key exports. For the record, they mimick a PKCS#8 file, except the encrypted ASN.1 payload is not a proper PKCS#8 private key

Re: [ENHANCEMENT] Support for Oracle Wallet Manager nonstandardprivate key format

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 15:54:39 +0200, [EMAIL PROTECTED] said: dom Attached is a new applet for /usr/bin/openssl that we developped. I think you forgot to actually attach it... -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Redakteur@Stacken \ S-168

Re: [ENHANCEMENT] Support for Oracle Wallet Manager nonstandard private key format

2002-10-11 Thread dom
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 15:54:39 +0200, [EMAIL PROTECTED] said: dom Attached is a new applet for /usr/bin/openssl that we developped. I think you forgot to actually attach it... Why of course :-( -- Dominique QUATRAVAUX Ingénieur

RE: [openssl.org #198] Bug Report

2002-10-11 Thread owner via RT
No actually its not, I found that there were some older libs out there that were actually linked as the new ones, Im not exactly sure how that happened but, its now fixed. DP Is this still an issue? [guest - Wed Sep 11 12:46:50 2002]: [levitte - Thu Aug 15 12:53:23 2002]: [[EMAIL

[openssl.org #198] Bug Report

2002-10-11 Thread Richard Levitte via RT
Thanks. I'm now resolving this ticket. [[EMAIL PROTECTED] - Fri Oct 11 16:13:16 2002]: No actually its not, I found that there were some older libs out there that were actually linked as the new ones, Im not exactly sure how that happened but, its now fixed. DP Is this still an

OpenSSL PKCS#11 ENGINE

2002-10-11 Thread afchine madjlessi
Hi, Our PKCS#11 generic engine delivered to openssl provides already RSA_generate_key and is able to store private key in the hardware crypto. It provides also i2d d2i RSA functions to load the stored private keys from the crypto card. These methods are added in RSA_method. This patch is

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 12:07:31 +0200, Massimiliano Pala [EMAIL PROTECTED] said: madwolf Well, I am not sure about the PKCS#11 because I have not worked on it madwolf yet. I guess that if you code an engin that uses a PKCS#11 interface madwolf any PKCS#11 library you

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Massimiliano Pala
Richard Levitte - VMS Whacker wrote: I would suggest, to make it easier, that you go for the MuscleCard API for now. There will be a generic PKCS#11 engine at some point, and that should then be possible to use as well. That is my point of view, either. So I guess I will start studying the

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 11:54:16 +0200, Massimiliano Pala [EMAIL PROTECTED] said: madwolf I am planning to code it for the openssl-0.9.7-beta3 ( is it madwolf better working on latest openssl-0.9.7-stable SNAPs ? ). Better go with a snap, there are a few small bugs in

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 12:29:22 +0200, Massimiliano Pala [EMAIL PROTECTED] said: madwolf If you look at one of the built-in engines, you'll see that they're madwolf [...] madwolf you to include support for having it built as a shared library. madwolf madwolf My

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Massimiliano Pala
Richard Levitte - VMS Whacker wrote: madwolf If you look at one of the built-in engines, you'll see that they're [...] madwolf required, I will build a separate package too... It's good enough to build it in crypto/engine. But note that for 0.9.8-dev, there's a move to having all the

Re: OpenSSL ENGINE, OpenCA MUSCLE

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Fri, 11 Oct 2002 13:36:46 +0200, Massimiliano Pala [EMAIL PROTECTED] said: madwolf Ok, I hope that not much code rewriting will be required for madwolf the 0.9.8 version (if any). I believe there's no difference between the hardware interface in 0.9.7 and

Re: [ENHANCEMENT] Support for Oracle Wallet Manager nonstandard private key format

2002-10-11 Thread Dr. Stephen Henson
On Fri, Oct 11, 2002, [EMAIL PROTECTED] wrote: Dear openssl hackers, Attached is a new applet for /usr/bin/openssl that we developped. It may be used to decode Oracle Wallet Manager 2.1's nonstandard private key exports. For the record, they mimick a PKCS#8 file, except the encrypted

Re: Revisiting AES_ctr128_encrypt() bugs

2002-10-11 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Wed, 9 Oct 2002 22:23:41 -0400, Eric Cronin [EMAIL PROTECTED] said: I've made the change. It will be present in the next snapshot. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47

Re: [ENHANCEMENT] Support for Oracle Wallet Manager nonstandard private key format

2002-10-11 Thread Vadim Fedukovich
On Fri, Oct 11, 2002 at 03:54:39PM +0200, [EMAIL PROTECTED] wrote: Dear openssl hackers, Attached is a new applet for /usr/bin/openssl that we developped. It may be used to decode Oracle Wallet Manager 2.1's nonstandard dear Dominique, is it Secure Electronic Transactions[tm] -aware