BN_rand question

Hi all, how can I use BN_randto generatea random integern in the range [0, p-1], where p is a given integer? Thanks

Re: session resumption through new socket

On Tue, Jan 16, 2001 at 04:27:05PM -0700, Chad Woodford wrote: There is not relation whatsoever between the transport channel (TCP, hosts, ports or whatever) and the TLS protocol (being transported in the channel). The case you are describing is not uncommon. I have a dialup

Re: BN_rand question

Marco Russo wrote: I need to generate a random polynomial in Zp, with p very large (1024-2048 bits). Sorry for my math...:-(, but I think that with your method the problem is that the numbers in [0, p-1] are equally likely only if (2^(n - 1))mod p = 0, where n is the number of bits in

Crypt::SSLeay 0.21 Client Cert Patch

Hi Josh, hi all, just before my vacations I wanted to get this thing out. This patch can be found on http://www.progredy.de (Download Section) This Patch provides: * Fixes a (imo) glitch, as the original Crypt::SSLeay it depends on direct host name resulution. Using a proxy just the proxy

des key schedules

reading through the code, i'm a bit lost as to what des_set_key_unchecked() is actually doing. it says it's doing something called PC1 to the key in order to turn the key into an architecture independant schedule. i don't see anything about this in applied cryptography and the code is pretty

Re: [Crypt::SSLeay] dies with no error message?

Do you have some sample code/URL that I can use to reproduce this problem? --Josh Stephen More wrote: Simple GETs and POSTs work fine. I think I figured out how to re-create the bug (not really a bug, Crypt::SSLeay just needs better error handling): 1. I did a https POST to the

mechanical extraction of roots from netscape?

In this document: http://www.kfu.com/~nsayer/encryption/openssl.html it refers to an Apache file, called ca_bundle.crt, which "contains all the roots from Netscape's cert7.db, automatically extracted". What tool did this? Is it in OpenSSL, or in Apache, or what?

Problem with client certificate with IIS 4.0

I have a client program running on Linux Red Hat 7.0 and my web server is MS IIS 4.0. I have generated my own self signed CA certificate unsing openssl and I have imported it successfully into IE in the trusted CA list on the machine running my web server. I have also generated a certificate for

port 12204 ssl

hi the above port is not avilable pls advice osama

Re: Problem with client certificate with IIS 4.0

Daniel, I'm having a little problem reading the code since some of the lines got broken in odd places by your mail client.. However, I would think you would also need to import the CA certificate into the ROOT store of the account under which IIS runs. Perhaps you have and that is what you

RE: Problem with client certificate with IIS 4.0

Hello, To my knowledge, whenever a webserver is configured for SSL Client Authentication, it sends all CA certificates which it (webserver) trust to the client during Handshake. Client can make a connection only if it get its certificate from one of those CAs. In your case it is perfectly