RFC 4279 support

Hi All, I am looking for RFC 4279 support in open ssl. Can you please let me know what version will have this support ? and any idea wehn it is going to be released ? I am specifially looking for cipher *TLS_DHE_PSK_WITH_AES_256_CBC_SHA *and * **TLS_RSA_PSK_WITH_AES_256_CBC_SHA *Thanks

Re: RFC 4279 support

mahendra wrote: Hi All, I am looking for RFC 4279 support in open ssl. Can you please let me know what version will have this support ? and any idea wehn it is going to be released ? I am specifially looking for cipher *TLS_DHE_PSK_WITH_AES_256_CBC_SHA*and * **

Re: RFC 4279 support

Hi Jimmy, Thanks for the quick reply. I checked the latest snpa shot and it says only a minimal support for RFC 4279. I am specifically lookin for DHE_PSK and RSA_PSK as mentioned in RFC 4279. Given here the contents of RFC for quick referemce: TLS_PSK_WITH_RC4_128_SHA PSK

Re: RSA Key Block

Hello, I have a general question about RSA Key Block. Maybe key_material is more precise. The output of PRF with the master_secret to give us many keys. It includes: client_write_MAC_secret, server_wriet_MAC_secret, client_write_key, server_write_key, client_write_IV, server_write_IV.

Cross-building OpenSSL from Intel Linux to others

I need to build OpenSSL on Intel Linux (Fedora Core 4, if it matters) for PowerPC and ARM targets. Someone before me did this for us with 0.9.7 and a bunch of patches to Makefiles but it's not portable or flexible and as I'm revising our build environment somewhat, I'd rather do it the right way

SSL_write and SSL_read

Hi Friends, I've an application which supports TLS communication in which, socket descriptors are handled in threads. Let's take an arbitrary socket descriptor fd and here we go, Can I send data through fd using SSL_write() if I'm in the middle of reading the data from the same fd?

Re: Cross-building OpenSSL from Intel Linux to others

On 4/10/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I need to build OpenSSL on Intel Linux (Fedora Core 4, if it matters) for PowerPC and ARM targets. Someone before me did this for us with 0.9.7 and a bunch of patches to Makefiles but it's not portable or flexible and as I'm revising our

Re: Cross-building OpenSSL from Intel Linux to others

On 4/10/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I need to build OpenSSL on Intel Linux (Fedora Core 4, if it matters) for PowerPC and ARM targets. ... for ARM you can try Scratchbox (http://www.scratchbox.org), it's a complete environment that runs in Linux and it enables you

Re: Cross-building OpenSSL from Intel Linux to others

[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I saw a tantalizing thread from 2006 in the mailing list archives that talked about adding an mingw target to Configure and I wonder if that's not the way to go. Should I add powerpc-linux and arm-linux target lines to Configure to do what I want?

Re: Cross-building OpenSSL from Intel Linux to others

[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I saw a tantalizing thread from 2006 in the mailing list archives that talked about adding an mingw target to Configure and I wonder if that's not the way to go. Should I add powerpc-linux and arm-linux target lines to Configure to do what

Problems building openssl-0.9.8b on RedHat Enterprise

Dear users, I'm having problems installing openssl-0.9.8b on RedHat Enterprise, kernel 2.6.9-11.ELsmp When I type: ./config I get the following output: -- # ./config Operating system: i686-whatever-linux2 Configuring for linux-elf Configuring for linux-elf no-gmp

Re: Problems building openssl-0.9.8b on RedHat Enterprise

Maximo Migliari wrote: Dear users, I'm having problems installing openssl-0.9.8b on RedHat Enterprise, kernel 2.6.9-11.ELsmp When I type: ./config I get the following output: -- # ./config Operating system: i686-whatever-linux2 Configuring for linux-elf Configuring

Re: Problems building openssl-0.9.8b on RedHat Enterprise

My perl was broken. I recompiled it and now everything works. Thanks for the help. On 4/10/07, Ricardo Stella [EMAIL PROTECTED] wrote: Maximo Migliari wrote: Dear users, I'm having problems installing openssl-0.9.8b on RedHat Enterprise, kernel 2.6.9-11.ELsmp When I type: ./config I

retrieve policy constraints

Hi, I need to retrieve the requireExplicitPolicy value from a policy constaints extension. The version of openssl that I am using is old and does not seem to support policy constaint. What is the right way to retrieve the value of that attribute from ASN1_OCTET_STRING* within the X509_EXTENSION

SSL error (138): cipher or hash unavailable

Hi list, I ask for help please. I have an apache server (2.0.59) built with OpenSSL 0.9.8b, it hosts a python (2.4.4) based application (Edgewall's trac) wich access a PostgreSQL SSL-secured server (8.2.3) throught DBI libraries (pyPgSQL/Psycopg2). When I use directly trac (it has a lightweight

howto generate RSA key from components?

Hi, I am trying to replace a legacy system with openssl. The legacy system used RSA keys but stored them in its own format. I can extract the RSA components but I'm not sure how to generate a PEM formatted RSA key. What is the easiest way to do this? Can the command line tools do it, or do I

0.9.8e changes BF cfb encryption

My previous mail doesn't seem to have appeared on the list, so sending again: Hello, As the maintainer of a package which uses OpenSSL, I've received some reports of 0.9.8e failing to decrypt data which was encrypted by previous versions of OpenSSL. Attached is a small bit of C++ code which

a problem while port openssl to mips64 platform

Hi Maillist I met a problem while porting openssl from Linux PC to mips64 platform, the openssl version is 0.9.7i I use openssl to verify a signature(x509), openssl prompt the error info *unhandled critical extension* on mips64 platform But this operation was ok on Linux Pc, I think this may