Re: gain more randomness in block cipher?!

2001-10-10 Thread Richard Levitte - VMS Whacker
From: [EMAIL PROTECTED] rival I would like to ask a simple question : rival if I block cipher few times the same string and armor rival the result with base64, the output will always look the same, rival is there any way of making it like the same plain text string is rival different each time

engine and without engine

2001-10-10 Thread Rachel
Does anyone know what the different between OpenSSL 0.9.6b and OpenSSL 0.9.6b - engine? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED]

Re: engine and without engine

2001-10-10 Thread Richard Levitte - VMS Whacker
From: Rachel [EMAIL PROTECTED] rachel Does anyone know what the different between OpenSSL 0.9.6b rachel and OpenSSL 0.9.6b - engine? Yes. The engine variant has extra support for external crypto devices like hardware crypto devices. The support is limited to RSA, DSA, DH and RAND operations,

Re: engine and without engine

2001-10-10 Thread Rachel
Does it means... if i install apache + mod_ssl with openssl-engine the result is same to apache + mod_ssl with openssl? (apache + mod_ssl + openssl-engine) = (apache + mod_ssl + openssl) ? - Original Message - From: Richard Levitte - VMS Whacker [EMAIL PROTECTED] To: [EMAIL PROTECTED];

Re:Renew private CA and corresponding certificat ed

2001-10-10 Thread Alper Oezmacun
this link you gave is not valid anymore (unfortunately). what is the difference between a client certificate and a server certificate. is there a difference or is only the way you use it different? and generally do you always have to store a certificate to be able to communicate with those

Re: engine and without engine

2001-10-10 Thread Richard Levitte - VMS Whacker
From: Rachel [EMAIL PROTECTED] rachel Does it means... if i install apache + mod_ssl with openssl-engine the rachel result is same to apache + mod_ssl with openssl? rachel rachel (apache + mod_ssl + openssl-engine) = (apache + mod_ssl + openssl) ? Unless you use a hardware device, the answer

Re:Renew private CA and corresponding certificat ed

2001-10-10 Thread julien Bournelle
On Wed, 10 Oct 2001, Alper Oezmacun wrote: this link you gave is not valid anymore (unfortunately). go to teamware.com and search for OpenSSL there's a document : Inetgrating Stunnel ad OpenSSL with teamware Office what is the difference between a client certificate and a server

CA and TLS

2001-10-10 Thread julien Bournelle
Hi, thanks for all the answer to my first question :-). I have a new stupid question : I want that a client on a computer A in the network A_net communicate with a server on a computer B in the network B_net. I want to use TLS for this TCP/IP communication. Do I need a CA ? where can I

Re: What to use when writing Java-clients?

2001-10-10 Thread Endre Meckelborg Rognerud
* Endre Meckelborg Rognerud | | I'm trying to write a client in Java that should connect to an | OpenSSL server through a SSLConnection. I have tried to write it | with the JSSE package from Sun, but I've had a lot of problems. The | first problem was related to the message 'no cipher suites in |

RE: No Library Found!

2001-10-10 Thread SeshaKalyan Manyam
change ur option to cc -I/home/wenwen/openssl-0.9.6/include -o cli cli.o /home/wenwen/openssl-0.9.6/libssl.a /home/wenwen/openssl-0.9.6/libcrypto.a It should work. U give -L option only to give path for a shared library. and "xxx.a" is a static library. -Original Message-From:

handshake failure?

2001-10-10 Thread Costas Magos
Can someone PLEASE help me with the following error: [debug] apache_ssl.c(1123): Generating 512 bit key [debug] apache_ssl.c(287): SSL_accept returned 0 [debug] apache_ssl.c(291): error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure [debug] apache_ssl.c(379): Random input

Re(2):Renew private CA and corresponding certificat ed

2001-10-10 Thread Sebastian Paul Avarvarei
Hello, There seem to be some confusion about the document, so I will give again the details. The PDF document (StunnelOpenSSLIntegration.pdf) I was mentioning has the title Integrating Stunnel and OpenSSL with Teamware Office. It has two entire chapters (2 and 5) dedicated exclusively to

Re: No Library Found!

2001-10-10 Thread Frdric Viollet
The -L option is to givethe path in which the compiler and the linker should search the libraries you want to link with (you can put more than one if your libraries are scattered around in several directories). It isn't only for shared libraries.You don't give a file to the -L option but a

SSL_accept

2001-10-10 Thread Hylton Tregenza
Hi, I am calling ssl_accept but it is not blocking. This is very new to me but as the design goes, I need the socket to block on accept. The application currently works without SSL. I am trying to add SSL to the routines allowing the user to determine if they want a secure connection to not.

SSL_accept

2001-10-10 Thread Hylton Tregenza
Hi, I am calling ssl_accept but it is not blocking. This is very new to me but as the design goes, I need the socket to block on accept. The application currently works without SSL. I am trying to add SSL to the routines allowing the user to determine if they want a secure connection to not.

Re: engine and without engine

2001-10-10 Thread Richard Koenning
At 14:56 10.10.2001 +0800, you wrote: Does anyone know what the different between OpenSSL 0.9.6b and OpenSSL 0.9.6b - engine? See: http://www.openssl.org/support/faq.html [MISC] 6. What is an 'engine' version? Ciao, Richard -- Dr. Richard W. Könning Fujitsu Siemens Computers GmbH, EP LP COM 5

Re: Better than Sex! Register your .Sex Domain! 58876

2001-10-10 Thread Richard Collins
[EMAIL PROTECTED] wrote: The latest domain name extension is here .SEX!!! It's the fresh ,new, exciting web address that is taking the world by storm. Who wants to be .com when you can now be .SEX Register your .SEX domain name today exclusively at: http://www.dotsex.com

Recall: building OpenSLL

2001-10-10 Thread Eddy Quicksall
Eddy Quicksall would like to recall the message, building OpenSLL. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

building OpenSLL

2001-10-10 Thread Eddy Quicksall
How do I build for Windows 2000? Or, can you give me the name of the document that explains how to build? [EMAIL PROTECTED]

Spam gripe ... day 2 (was: RE: Better than Sex! Register your .Sex Domain! 58876)

2001-10-10 Thread Mark Annal
Title: Spam gripe ... day 2 (was: RE: Better than Sex! Register your .Sex Domain! 58876) The spam the past few days has been getting exponentially worse. It is getting to the point that I am considering dropping off of this list ... something I really don't want to have to do. Somebody

Re: building OpenSLL

2001-10-10 Thread Richard Levitte - VMS Whacker
From: Eddy Quicksall [EMAIL PROTECTED] Eddy_Quicksall How do I build for Windows 2000? Eddy_Quicksall Eddy_Quicksall Or, can you give me the name of the document that explains how to build? Did you actually download the OpenSSL source kit? Did you notice the file README? Did you read it?

Algorithms

2001-10-10 Thread Andrew Finnell
Title: Message Could someone point me to a list of all the algorithms OpenSSL uses so that I can put it in the reportfor the export beauru? Thanks! Btw, I didnt see anything of Openssl.org about this -Andrew T. FinnellSoftware EngineereSecurity Inc(321)

generating certificate using ip address

2001-10-10 Thread Jian Chen
Hi, All, Initially I thought the certificate is based on domain name, but, I tested, if I use an IP address to generate a self-signed certificate, it is still recognized by the browser. So, am I right that without a domain name, I can still use openssl to create certificate? Thanks, Jian Oct.

Re: SSL_set_fd or SSL_set_bio ??

2001-10-10 Thread Lutz Jaenicke
On Wed, Oct 10, 2001 at 01:22:40PM -0700, Ruby Cruiser wrote: Should I use SSL_set_fd or SSL_set_bio?? How do we know? I have a socket generated from accept call, which I can feed to both these APIs and they pass. But not sure what difference it makes... SSL_set_fd() connects the SSL object

FTP over OpenSSL

2001-10-10 Thread Daniel Franks
Hello, I am new to the list and OpenSSL. As the company programmer I have been assigned to setup FTP over SSL and am looking for pointers. From what I have been able to read online I don't think it will be that difficult. The script I will need to modify to go over SSL is as follows:

Re: Kernel port of OpenSSL

2001-10-10 Thread Richard Levitte - VMS Whacker
From: Tom Tang [EMAIL PROTECTED] ttangI was wondering if anyone has ever tried to port OpenSSL or portions ttang of it into the kernel (*nix). I posed this question on the dev mailing ttang list but got no response. Thanks. I haven't heard of OpenSSL being integrated into the kernel. I

Re: FTP over OpenSSL

2001-10-10 Thread Jeffrey Altman
See http://www.kermit-project.org/ftpd.html for a list of FTP Servers that support SSL/TLS. Hello, I am new to the list and OpenSSL. As the company programmer I have been assigned to setup FTP over SSL and am looking for pointers. From what I have been able to read online I don't think

Re: Algorithms

2001-10-10 Thread Edward Jiang
openssl ciphers -v Andrew Finnell wrote: Could someone point me to a list of all the algorithms OpenSSL uses so that I can put it in the report for the export beauru?Thanks! Btw, I didnt see anything of Openssl.org about this- Andrew T. Finnell

Re: Kernel port of OpenSSL

2001-10-10 Thread David Schwartz
On Wed, 10 Oct 2001 22:53:58 +0200 (MET DST), Richard Levitte - VMS Whacker wrote: I haven't heard of OpenSSL being integrated into the kernel. I wonder, what would the purpose be? The idea would be that if two such machines had SSL implemented in their kernel and both