Re: X509_CRL_verify

2002-10-14 Thread Richard Levitte - VMS Whacker
In message <45FCD7CD775DD411B4C100508B691BBB04B61F5D@WARE-MAIL> on Tue, 15 Oct 2002 07:53:14 +0200, Alon Philosoph <[EMAIL PROTECTED]> said: AlonP> I am using apache_1.3.24 with mod_ssl-2.8.8-1.3.24 and openssl-engine- AlonP> 0.9.6g. AlonP> AlonP> When I configure apache to work in SSL with cl

Re: openssl pkcs8 encryptionbug

2002-10-14 Thread Michael Bell
Dr. Stephen Henson wrote: > > If the PKCS#8 key is in PEM format it can be handled directly without any > conversion. This is perhaps correct for the OpenSSL-commandlinetools (I don't know it) but I think mod_ssl is a problem and perhaps other applications which only use the old OpenSSL-format

X509_CRL_verify

2002-10-14 Thread Alon Philosoph
Hi,   I am using apache_1.3.24 with mod_ssl-2.8.8-1.3.24 and openssl-engine- 0.9.6g.   When I configure apache to work in SSL with client authentication and a crl that consist of 50,000 revoked certs I get very poor number of transactions per second. when I looked at the code I have noticed

[openssl.org #303] openssl-engine-0.9.6g bug in apps/rand.c

2002-10-14 Thread Richard Levitte via RT
Thanks for the report. It has recently been fixed as of another ticket, please test one of the snapshots. I'm changing the status of this ticket to "resolved". [[EMAIL PROTECTED] - Mon Oct 14 21:48:49 2002]: > Hello every body. > Thanks a lot for your nice job, meanwhile there a little bug i

[openssl.org #303] openssl-engine-0.9.6g bug in apps/rand.c

2002-10-14 Thread [EMAIL PROTECTED] via RT
Hello every body. Thanks a lot for your nice job, meanwhile there a little bug in 'apps/rand.c' Operating system: ALL OpenSsl: 0.9.6g engine The original code, from line 45 while (!badopt && argv[++i] != NULL) { if (strcmp(argv[i], "-out") == 0)

Re: possible bug in BN_dec2bn()

2002-10-14 Thread Ben Laurie
Bodo Moeller wrote: > On Mon, Oct 14, 2002 at 12:52:30PM +0200, Richard Levitte - VMS Whacker wrote: > > >The problem seems to be manifested in BN_dec2bn() because of >the BN_mul_words and BN_add_words (e.g. line b). Since the >upper parts of d aren't cleared out, those routines end

Re: PKCS#7 problem

2002-10-14 Thread Dr. Stephen Henson
On Mon, Oct 14, 2002, Jan Mikosiñski wrote: > Hi > I try to implement simple message support in compatible with pkcs#7 > standard. > I use OpenSSL ver 0.9.6g. I encrypt data with PKCS7_encrypt and decrypt > with PKCS7_decrypt functions and i've got a little problem. > The length of the data to

Re: openssl pkcs8 encryptionbug

2002-10-14 Thread Dr. Stephen Henson
On Mon, Oct 14, 2002, Michael Bell wrote: > Hi, > > I received some messages that there are problems with the conversion > from PKCS#8 to old SSLeay format and so I checked it. The result is the > following: > > 1. the bug is only present if you convert a PKCS#8-key to the old format > 2. set

Re: possible bug in BN_dec2bn()

2002-10-14 Thread Bodo Moeller
On Mon, Oct 14, 2002 at 12:52:30PM +0200, Richard Levitte - VMS Whacker wrote: The problem seems to be manifested in BN_dec2bn() because of the BN_mul_words and BN_add_words (e.g. line b). Since the upper parts of d aren't cleared out, those routines end up adding to whatever

openssl pkcs8 encryptionbug

2002-10-14 Thread Michael Bell
Hi, I received some messages that there are problems with the conversion from PKCS#8 to old SSLeay format and so I checked it. The result is the following: 1. the bug is only present if you convert a PKCS#8-key to the old format 2. set the option -passout (we use env:outpwd) 3. internally the

Re: possible bug in BN_dec2bn()

2002-10-14 Thread Richard Levitte - VMS Whacker
The final patch is the following (applicable on 0.9.6g and up): Index: crypto/bn/bn_word.c === RCS file: /e/openssl/cvs/openssl/crypto/bn/bn_word.c,v retrieving revision 1.6 diff -u -u -r1.6 bn_word.c --- crypto/bn/bn_word.c 2000/09/

Re: possible bug in BN_dec2bn()

2002-10-14 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sat, 12 Oct 2002 11:04:56 -0700, David Brumley <[EMAIL PROTECTED]> said: dbrumley> > dbrumley> The problem seems to be manifested in BN_dec2bn() because of dbrumley> > dbrumley> the BN_mul_words and BN_add_words (e.g. line b). Since the dbrumley> > dbrumley> up

Re: makedepend warnings

2002-10-14 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 9 Oct 2002 18:30:14 -0400 , Zoran Milojevic <[EMAIL PROTECTED]> said: Zoran.Milojevic> makedepend: warning: ../../include/openssl/asn1.h includes Zoran.Milojevic> ../../include/openssl/e_os2.h more than once! Zoran.Milojevic> makedepend: warning: ../../in

Re: your mail

2002-10-14 Thread Vadim Fedukovich
On Mon, Oct 14, 2002 at 04:14:17PM +0900, Maya wrote: > Hello! > > I am using smime-tool for creating SMIME messages. I found and option which I can >use to extract signer's certificate when verifying the message. > How I can extract encryption Certificates used to encrypt the message? "PKCS7 E

Re: OpenSSL PKCS#11 ENGINE

2002-10-14 Thread afchine madjlessi
Hi Fred, > " Frederic DONNAT" <[EMAIL PROTECTED]> wrote: > Hi, > First of all, thanks for your answer.;) > A few question about your PKCS#11 ENGINE. > When you say that the stored private key can be load: > - do you mean that one can get it from the store? > -or do you mean that one can

[openssl.org #253] [bug] & [patch] openssl 0.9.7-beta3 - vxworks compilation

2002-10-14 Thread Richard Levitte via RT
Applied. Thanks! [[EMAIL PROTECTED] - Thu Oct 10 00:13:19 2002]: > Tried the CVS, and in order to make it compile ok and have no > unresolved symbols, something like this patch is needed: > > (adds a missing RAND_poll, and removes RAND_query_egd_bytes, > since this is not invoked any more b

PKCS#7 problem

2002-10-14 Thread Jan Mikosiński
Hi I try to implement simple message support in compatible with pkcs#7 standard. I use OpenSSL ver 0.9.6g. I encrypt data with PKCS7_encrypt and decrypt with PKCS7_decrypt functions and i've got a little problem. The length of the data to be encrypted is 2951B . I encrypt this data and next dec