Re: client without certificate

2006-05-10 Thread Stefan Walter
On Tue, May 09, 2006, Stefan Walter wrote: I am writing a server without checking the server certificate... the client (written in java) works fine by using s_server as server. i start the s_server by using this command: openssl s_server -accept -cipher ADH-RC4-MD5 i wrote now my own

keyword QUIT

2006-05-10 Thread Stefan Walter
Dear OpenSSL Users, how can i deactivate in OpenSSL to handle the keyword "quit"? i dont want to stop my server connection if a client send the string "quit". if i receive quit then the server give an output "recv: Success"and exit the application. Kind Regards Stefan

Re: Unknown error being generated by openssl-0.9.8a

2006-05-10 Thread Marek Marcola
Hello, We're not sure why right now but we think a piece of network equipment (e.g. a firewall) is detecting an FTP session but gets confused when the encrypted data starts and kills the connection. Cisco routers with IDS enabled do things like that. Best regards, -- Marek Marcola [EMAIL

RE: 0.9.8b windows binaries

2006-05-10 Thread Wai Wu
Excellent. Many Thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hunter Sent: Wednesday, May 10, 2006 1:45 AM To: openssl-users@openssl.org Subject: Re: 0.9.8b windows binaries On 5/8/06, Parind Shah [EMAIL PROTECTED] wrote: Is it possible to

RE: 0.9.8b windows binaries

2006-05-10 Thread Parind Shah
Chris, I really appreciate you taking time to build 64 bit binaries. I'll try to use it and get back to you. Many thanks in advance, Parind. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hunter Sent: Wednesday, May 10, 2006 1:45 AM To:

Regarding the IV in symertric encryption.

2006-05-10 Thread Wai Wu
Do the Initial Vectors on both sides have to be the same? If they have to be the same, we not only have to exchange the key, but also the IV, No? __ OpenSSL Project http://www.openssl.org User

Re: keyword QUIT

2006-05-10 Thread Victor Duchovni
On Wed, May 10, 2006 at 12:59:09PM +0400, Stefan Walter wrote: Dear OpenSSL Users, how can i deactivate in OpenSSL to handle the keyword quit? i dont want to stop my server connection if a client send the string quit. if i receive quit then the server give an output recv: Successand

Re: Regarding the IV in symertric encryption.

2006-05-10 Thread Michael Sierchio
Wai Wu wrote: Do the Initial Vectors on both sides have to be the same? If they have to be the same, we not only have to exchange the key, but also the IV, No? Symmetric block cipher traffic contains the IV at the beginning of the ciphertext.

Re: keyword QUIT

2006-05-10 Thread Stefan Walter
On Wed, May 10, 2006 at 12:59:09PM +0400, Stefan Walter wrote: Dear OpenSSL Users, how can i deactivate in OpenSSL to handle the keyword quit? i dont want to stop my server connection if a client send the string quit. if i receive quit then the server give an output recv: Successand exit

Re: keyword QUIT

2006-05-10 Thread Victor Duchovni
On Wed, May 10, 2006 at 06:23:34PM +0400, Stefan Walter wrote: On Wed, May 10, 2006 at 12:59:09PM +0400, Stefan Walter wrote: Dear OpenSSL Users, how can i deactivate in OpenSSL to handle the keyword quit? i dont want to stop my server connection if a client send the string quit.

ssl3-md5 error

2006-05-10 Thread GaveUp
I'm trying to use TLS smtp options in muttng which uses libesmtp. In libesmtp there is a line: ctx = SSL_CTX_new (TLSv1_client_method ()); The return value is null as a result of this code in SSL_CTX_new if ((ret-md5=EVP_get_digestbyname(ssl3-md5)) == NULL) {

Re: Regarding the IV in symertric encryption.

2006-05-10 Thread Marek Marcola
Hello, Wai Wu wrote: Do the Initial Vectors on both sides have to be the same? If they have to be the same, we not only have to exchange the key, but also the IV, No? Symmetric block cipher traffic contains the IV at the beginning of the ciphertext. IV must be known and the same on

Re: Regarding the IV in symertric encryption.

2006-05-10 Thread Girish Venkatachalam
The IV is used only for decrypting the first block since after that the first block serves as the IV for the second block and so on. To answer ur question, the IV has to be known at both sides along with the key. regards, Girish --- Wai Wu [EMAIL PROTECTED] wrote: Do the Initial Vectors

Re: Regarding the IV in symertric encryption.

2006-05-10 Thread Michael Sierchio
Girish Venkatachalam wrote: The IV is used only for decrypting the first block since after that the first block serves as the IV for the second block and so on. To answer ur question, the IV has to be known at both sides along with the key. There is no sound cryptological argument for not

Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Andy Bontoft
Hello, Could someone please explain what the Kx=RSA denotes (By this I mean the RSA by itself)? It seems straight forward what Kx=RSA(512) and Kx=RSA(1024) mean but I don't understand what RSA without a bit specification would represent, and how it differs. Thanks for your time andy smime.p7s

Re: Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Victor Duchovni
On Wed, May 10, 2006 at 05:10:18PM +0100, Andy Bontoft wrote: Hello, Could someone please explain what the Kx=RSA denotes (By this I mean the RSA by itself)? It seems straight forward what Kx=RSA(512) and Kx=RSA(1024) mean but I don't understand what RSA without a bit specification would

Re: Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Andy Bontoft
Hello Victor, Yes agreed, but I didn't think that the 'export' masking of the encryption algorithms key bits had anything to do with the key exchange algorithms. Was this view in error? If so, do you have an idea what key size the 'normal' key exchange RSA is using? andy Victor Duchovni

Re: Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Dr. Stephen Henson
On Wed, May 10, 2006, Andy Bontoft wrote: Hello Victor, Yes agreed, but I didn't think that the 'export' masking of the encryption algorithms key bits had anything to do with the key exchange algorithms. Was this view in error? If so, do you have an idea what key size the 'normal' key

Re: Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Andy Bontoft
Thanks very much, now I understand :) Dr. Stephen Henson wrote: On Wed, May 10, 2006, Andy Bontoft wrote: Hello Victor, Yes agreed, but I didn't think that the 'export' masking of the encryption algorithms key bits had anything to do with the key exchange algorithms. Was this view in

Re: Kx=RSA vs Kx=RSA(1024)

2006-05-10 Thread Victor Duchovni
On Wed, May 10, 2006 at 06:49:27PM +0200, Dr. Stephen Henson wrote: If the server key size exceeds the key exchange limit then a temporary key of the appopriate size if used which is signed by the certified key. If no restriction is present on the Kx then the servers certified key is always

ECC in Openssl!

2006-05-10 Thread puneet batura
Hi,I am trying to generate a 163 bit key in openssl using ECC but was not been able to do so. I am using openssl-0.9.8a version can anyone show me a example how to do that?Thanks a Ton!-- Regards,Puneet BaturaOpen Source Developer

openssl prime test

2006-05-10 Thread Nagy Zoltán Márk
Hi! Which algorithm is use for test a generated possible prime random number? (openssl rsa) (Atkin-Morain ; Miller-Rabin ...etc) King regards, mark __ OpenSSL Project http://www.openssl.org User

Win32 OpenSSL enhancements...

2006-05-10 Thread Thomas J. Hruska
As of today, Win32 OpenSSL now supports Visual C++ more fully by including .lib files for the following compilation types: /MT /MTd /MD /MDd Both static and dynamic lib files of the default build of OpenSSL are included. This should eliminate the major difficulties people have with

Re: openssl prime test

2006-05-10 Thread Marek Marcola
Hello, Which algorithm is use for test a generated possible prime random number? (openssl rsa) (Atkin-Morain ; Miller-Rabin ...etc) Miller-Rabin. Best regards, -- Marek Marcola [EMAIL PROTECTED] __ OpenSSL Project

OpenSSL-fips-1.0 portability question

2006-05-10 Thread Joe
Hi, Just a quick question with regarding to the OpenSSL-fips-1.0 version: I know in order to use fips validated module, an application has to link with fipscanister.o. But looking at fips_canister.c, I saw a bunch of assembly codes, my question is how portable is this code? If I'm using a

ssl programming reference

2006-05-10 Thread Brad Brock
Hi, I'am a newbie programmer. I want to learn how to build an application that communicate over SSL. Can anyone show me where to find the references? Thank you. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around

Re: openssl prime test

2006-05-10 Thread Dr. Stephen Henson
On Wed, May 10, 2006, Nagy Zoltn Mrk wrote: Hi! Which algorithm is use for test a generated possible prime random number? (openssl rsa) (Atkin-Morain ; Miller-Rabin ...etc) Miller-Rabin after candidates pass a sieve test. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see

Re: OpenSSL-fips-1.0 portability question

2006-05-10 Thread Dr. Stephen Henson
On Wed, May 10, 2006, Joe wrote: Hi, Just a quick question with regarding to the OpenSSL-fips-1.0 version: I know in order to use fips validated module, an application has to link with fipscanister.o. But looking at fips_canister.c, I saw a bunch of assembly codes, my question is how

RE: keyword QUIT

2006-05-10 Thread David Schwartz
i dont use s_client(1). i wrote my own server, but if i send to this server QUIT then the server exit by themself. I'm not sure how we can find a problem in code that you wrote yourself and don't tell us very much about. How exactly are you sending QUIT to the server? DS

Re: ssl programming reference

2006-05-10 Thread Kyle Hamilton
The best documentation is in the s_client and s_server source code. -Kyle H On 5/10/06, Brad Brock [EMAIL PROTECTED] wrote: Hi, I'am a newbie programmer. I want to learn how to build an application that communicate over SSL. Can anyone show me where to find the references? Thank you.

Re: ssl programming reference

2006-05-10 Thread Heikki Toivonen
Brad Brock wrote: Hi, I'am a newbie programmer. I want to learn how to build an application that communicate over SSL. Can anyone show me where to find the references? Thank you. Network Security with OpenSSL by John Viega, Matt Messier and Pravir Chandra, ISBN 059600270X -- Heikki

Generating certificate

2006-05-10 Thread puneet batura
Hi,I am generating a self signed certificate for my application using rsa but i want to generate the certificate using ecc. This is what i am doing: openssl genrsa -out MilitaryGpsKey.pem 2048 openssl req -new -x509 -key MilitaryGpsKey.pem -out