ECC Self-Signed Certificate

2008-02-12 Thread Nabil Ghadiali
Can someone help me with the command to generate a self-signed certificate using openssl? I have used the following steps and when I get a certificate and open up it says "the signature is invalid". Am I missing something? I have created an ECC key pair using the following: openssl ecparam

Re: Openssl FIPS 1.1.2 - make test

2008-02-12 Thread Kyle Hamilton
Actually, the failure is expected. Since it must not be allowed in FIPS mode, it has to be tested to make sure that it doesn't inadvertently fall through and let it happen. The wording in the tests should be interpreted as, "test that SSL3 is forbidden in FIPS mode", "test that SSL2 is forbidden

newer versions of openssl via yum

2008-02-12 Thread Jeff
I have some Fedora 5 systems on which I'd like to upgrade openssl. I'm currently running 0.9.8a-5.4, which is reported by yum as the latest version: > yum list openssl Installed Packages openssl.i686 0.9.8a-5.4 installed Available Packages openssl.i386

Openssl FIPS 1.1.2 - make test

2008-02-12 Thread PS
Hi, One of the tests on the openssl-fips-1.1.2 fails without any warning when I try running "make test". Though the test fails, the command continues to completion. Specifically this is the snippet of the output where the error occurs: Testing cipher RC4(encrypt/decrypt) Key ef 01 23 45 ef 01

i2d_ASN1_INTEGER definition in src code

2008-02-12 Thread Shanku Roy
Hi Folks, Can anyone please point me to the location of function definition of i2d_ASN1_INTEGER () in OpenSSL source code. I could trace only till the following in the header files: file crypto/asn1/asn1.h: #define I2D_OF(type) int (*)(type *,unsigned char **) Thanks -- regards, Shan

Re: Problem with encrypting using ofb

2008-02-12 Thread Marek . Marcola
[EMAIL PROTECTED] wrote on 02/11/2008 10:28:32 PM: > > Im trying to encrypt some test data using CMD line openssl but i keep getting > an error around my key/iv input. > can someone please point me in the correct direction? > > C:\OpenSSL\bin>openssl enc -e -des-ofb -in c:\Openssl\Test_ofb_data

Re: enc-aes-cbc and enc-aes-ecb

2008-02-12 Thread Marek . Marcola
Hello, > 1)Is there a publication for the way the iv and the key are generated from the text > based password? > I assume that enc uses the same method for all modes. > > 2)Is there a publication for how the salt integrates into the cipher, and the > determination of the key and iv? > > I am

Re: key & iv generation?

2008-02-12 Thread Marek . Marcola
Hello, > How is the key and iv generated? I am using enc -aes256 with a text based password. > > Is there an stand alone openssl command that will do this? I need to find the code that > does this step so that I can replicate it in javascript. Look at EVP_BytesToKey() implementation. Best reg

Re: OpenSSL wants to read on connection?

2008-02-12 Thread Marek . Marcola
Hello, > I've just started trying to develop a piece of software with OpenSSL and I > have a rather strange problem I wondered if anyone here might be able to > help explain... > > I've initialised OpenSSL like this: > > SSL_library_init(); > SSL_load_error_strings() > > and created a c

RE: OpenSSL wants to read on connection?

2008-02-12 Thread David Schwartz
> ret = SSL_write( m_ssl, buf, buf_lef ); > > which returns -1, as you'd expect. But (and here's the odd part) when I > call: > > SSL_get_error( m_ssl, ret ) > > it returns SSL_ERROR_WANT_READ, not SSL_ERROR_WANT_WRITE. How can this > be!? The OpenSSL library is setup in client mode, so sh

RE: possible SSL_write bug

2008-02-12 Thread David Schwartz
> I found out that if I keep calling SSL_write, if the connection > is closed remotely (killing stunnel), my application hangs. I thought your problem was crashing. Now I see that it's hanging. These are two totally different problems. > I made some tests, and saw that the error happens only if

OpenSSL wants to read on connection?

2008-02-12 Thread edam
Hi there, I've just started trying to develop a piece of software with OpenSSL and I have a rather strange problem I wondered if anyone here might be able to help explain... I've initialised OpenSSL like this: SSL_library_init(); SSL_load_error_strings() and created a context (error che

Re: OpenSSL FIPS Object Module v1.1.1 patch (v1.1.2) now validated

2008-02-12 Thread Dr. Stephen Henson
On Tue, Feb 12, 2008, Jim Adams wrote: > > Steve, > > The FTP site does not appear to have any of the fips-1.1.2 files available. > The HTTP site has the fips-1.1.2.tar.gz, but does not appear to have any of > the signature files. Can you confirm the availability of these files? > Some browse

Re: OpenSSL encryption

2008-02-12 Thread Patrick Patterson
Hi There; On Tuesday 12 February 2008 09:20:47 calsBoy wrote: > Hi everyone, > > I would like to ask about the encryption technology of openssl. In the > openssl website, it mentioned about strong cryptography. What does this > mean? How many bits its encryption is? Is it alright to distribute

OpenSSL encryption

2008-02-12 Thread calsBoy
Hi everyone, I would like to ask about the encryption technology of openssl. In the openssl website, it mentioned about strong cryptography. What does this mean? How many bits its encryption is? Is it alright to distribute/export openssl (certificates)? Will it not violate any law against st

RE: OpenSSL FIPS Object Module v1.1.1 patch (v1.1.2) now validated

2008-02-12 Thread Jim Adams
Steve, The FTP site does not appear to have any of the fips-1.1.2 files available. The HTTP site has the fips-1.1.2.tar.gz, but does not appear to have any of the signature files. Can you confirm the availability of these files? Jim Adams -Original Message- From: [EMAIL PROTECTED] [ma

Re: possible SSL_write bug

2008-02-12 Thread Alessandro Pivi - GLOBALcom engineering
Hi, I found out that if I keep calling SSL_write, if the connection is closed remotely (killing stunnel), my application hangs. I made some tests, and saw that the error happens only if I keep calling SSL_write. The first SSL_write after closing the connection returns a positive value, as if t

AW: RSA_public_decrypt error

2008-02-12 Thread Wockenfuß , Frank
You're right and I haven't seen it til now. This could be the problem. This means that the OpenSSL check works fine, but the signature generation has sometimes a problem. Thank you very much for now. > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auf

AW: RSA_public_decrypt error

2008-02-12 Thread Wockenfuß , Frank
You're right and I haven't seen it til now. This could be the problem. This means that the OpenSSL check works fine, but the signature generation has sometimes a problem. Thank you very much for now. > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auft

Re: passphrase automatically ?

2008-02-12 Thread Bernhard Fröhlich
DWL / Lenski schrieb: Hello! I work with openssl since a few days. We work on SuSe Linux 9.2 with OpenSSL 0.9.7d 17 Mar 2004. I create some files where signatures are needed. I use the command: openssl dgst -md5 -binary -out .sig -sign xxx.pem After that I have to enter the passphrase. Is i

Problem with encrypting using ofb

2008-02-12 Thread ajb1811
Im trying to encrypt some test data using CMD line openssl but i keep getting an error around my key/iv input. can someone please point me in the correct direction? C:\OpenSSL\bin>openssl enc -e -des-ofb -in c:\Openssl\Test_ofb_data.txt -in c:\o penssl\encrypted_data.enc -k/-iv 0123456789abcdef01

Re: RSA_public_decrypt error

2008-02-12 Thread Kenneth Goldman
[EMAIL PROTECTED] wrote on 02/11/2008 10:22:00 AM: > I'm not that good in OpenSSL. How do I create a RSA file if I only > have a modulus and exponent. Programmatically I have set the 2 > values with BN_bin2bn(), but how do I save this to a file? I use PEM_write_RSAPublicKey() It's interesting th

passphrase automatically ?

2008-02-12 Thread DWL / Lenski
Hello! I work with openssl since a few days. We work on SuSe Linux 9.2 with OpenSSL 0.9.7d 17 Mar 2004. I create some files where signatures are needed. I use the command: openssl dgst -md5 -binary -out .sig -sign xxx.pem After that I have to enter the passphrase. Is it possible to write the