Re: How do you know you have a full packet

2006-04-24 Thread Rick Jones
george r smith wrote: All, If I have learned anything from socket code it is that you can never be sure if you get a partial or a full packet. While that is true if you are using a socket associated with say a TCP connection, it is not true if you are using a socket associated with UDP, no

How do you know you have a full packet

2006-04-24 Thread george r smith
All,   If I have learned anything from socket code it is that you can never be sure if you get a partial or a full packet. The question is if a packet is encrypted (des3) how do you know you have received the full packet ?   Obviously you can not check for a string or a delimiter that

Creating certificates

2006-04-24 Thread nduval (sent by Nabble.com)
I have installed openssl and am hoping to use it to create a self signed CA and then client certificates to go along with it. I am using everything after a normal install. So far all I have done is a ca -newca, fill in the info. Then I do ca -newreq and then ca -sign. It seems I get what I ne

Re: Apache: modssl SSLRequire

2006-04-24 Thread Olaf Gellert
Dominique Lohez wrote: > You use the directive > Order deny allow > so the deny directives are evaluated before the alow directives > and furthermore every thing which is not denied is allowed > > I suggest you should use the > Order Allow, deny directive > so that everything which is not allo

Re: Apache: modssl SSLRequire

2006-04-24 Thread Dominique Lohez
Olaf Gellert wrote: Hi, somewhat off topic, but as there are so many users of Apache/ModSSL around here (and I already asked on the modssl mailing list): I want an Apache SSL server to request client authentication. This works. Additionally I want to restrict access only to certain users with

Apache: modssl SSLRequire

2006-04-24 Thread Olaf Gellert
Hi, somewhat off topic, but as there are so many users of Apache/ModSSL around here (and I already asked on the modssl mailing list): I want an Apache SSL server to request client authentication. This works. Additionally I want to restrict access only to certain users with a valid certificate. So

Re: Random Number Generation in openssl

2006-04-24 Thread Marek Marcola
Hello, > The man page clearly mentions that. > > Add RAND_seed() or RAND_add() with the required > entropy required before calling RAND_bytes(). In a > pseudorandom number generator the seed uniquely > determines the random sequence. So you might want to > vary the seed somehow using getpid() o

Re: Random Number Generation in openssl

2006-04-24 Thread Girish Venkatachalam
Random number generation always depends on the PRNG being seeded first. The man page clearly mentions that. Add RAND_seed() or RAND_add() with the required entropy required before calling RAND_bytes(). In a pseudorandom number generator the seed uniquely determines the random sequence. So you

RE: Random Number Generation in openssl

2006-04-24 Thread Ambarish Mitra
This worked..Thanks a million. :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Allan E. Johannesen Sent: Monday, April 24, 2006 6:32 PM To: openssl-users@openssl.org Subject: Random Number Generation in openssl > "ambarish_mitra" == Ambarish Mitra

Random Number Generation in openssl

2006-04-24 Thread Allan E. Johannesen
> "ambarish_mitra" == Ambarish Mitra <[EMAIL PROTECTED]> writes: ambarish_mitra> Hi all, I am trying to generate random numbers using openssl. I ambarish_mitra> am not using the ENGINE API, but using only the rand functions. ambarish_mitra> Code snippet: You correctly identify the buffer as

Random Number Generation in openssl

2006-04-24 Thread Ambarish Mitra
Hi all,   I am trying to generate random numbers using openssl. I am not using the ENGINE API, but using only the rand functions.   Code snippet:   int main(int argc, char *argv[]){    RAND_METHOD *rmeth;    int r;    unsigned char buf[16];       rmeth = RAND_SSLeay();

Re: Server Side Certificate to send

2006-04-24 Thread Marek Marcola
Hello, > Thats my problem, the connection from a client to s_server is not working - > thats where i stuck... Run s_server with "-debug -msg -state" options to get more information. Try to add "-bugs" to workaround some SSL compatibility problems. Best regards, -- Marek Marcola <[EMAIL PROTECTE

Re: Server Side Certificate to send

2006-04-24 Thread Stefan Walter
Thats my problem, the connection from a client to s_server is not working - thats where i stuck... maybe i should ask this in a java community... Thanks woigl - Original Message - From: "Bernhard Froehlich" <[EMAIL PROTECTED]> To: Sent: Monday, April 24, 2006 12:41 PM Subject: Re: S

Re: Server Side Certificate to send

2006-04-24 Thread Bernhard Froehlich
Stefan Walter wrote: This is what i want... but now the problem is how i can implement this... do you have an small example of a server? See http://www.opensslbook.com/code.html or (even better) the book itself. Or have a look into the source code of openssl s_client/s_server. is this working pr

Re: Server Side Certificate to send

2006-04-24 Thread Stefan Walter
This is what i want... but now the problem is how i can implement this... do you have an small example of a server? is this working probably if you connect with java clients by using javax.net.ssl? - Original Message - From: "Bernhard Froehlich" <[EMAIL PROTECTED]> To: Sent: Monday

Re: Server Side Certificate to send

2006-04-24 Thread Bernhard Froehlich
Stefan Walter wrote: Hi, i am new to OPENSSL and have a specific question... i want to write a server and client, but the client doesnt have the certificate. how can i start the transfer of the certificate to the client? i think the same is done with webserver and browser? please help..