AES-256 - aes-586.pl - align 64?

2009-04-14 Thread Roi Kolan
Hi, We are trying to deploy AES-256 in assembly, and of course we ran into your code in aes-586.pl. In the code we saw that you use 64 byte alignment: set_label(AES_Te,64);# Yes! I keep it in the code segment! Which is something that gives us a headache in other modules that use openssl

Re: openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-14 Thread Kyle Hamilton
S/MIME requires that all native line endings be converted to \r\n before signing. -Kyle H On Mon, Apr 13, 2009 at 8:32 PM, xh xiangshu...@gmail.com wrote: Hi everyone, I find the output of the openssl smime -decrypt is not the same with the original one. My OS is Fedora 10 and the openssl

RE: Query on OpenSSL for Certificate verification

2009-04-14 Thread Vijay Kothamasu (vikotham)
Hi Kyle, Sorry for the delayed response, I am just back form my Vacation. Thank you so much for your response and the information provided. But even with the SSL_CTX_set_verify() callback invocation, the result of the certificate validation need to be returned in the context of the callback

Re: openssl smime problem: the output of smime -decrypt is not the same to the original one

2009-04-14 Thread xh
Kyle Hamilton wrote: S/MIME requires that all native line endings be converted to \r\n before signing. My understanding is that s/mime is only focused on email related, so I think it's ok using \r\n replace \r. thanks, -Derek

RFC 4680 implementation

2009-04-14 Thread nhack
Hy, I want to know if there is any library that provides support for the RFC 4680, I have found this http://tlsext-general.blogspot.com/ but my problem with this library is that the client can send the supplemental data only after the server done state, and i need that data after the server

OpenSSL cryptography fails in release mode, but no in debug

2009-04-14 Thread Atti
Hy, I'm using an older version of OpenSSL (the new one has errors in X509.h), on a Win32 machine, installed as binaries. I'm using the EVP_Encrypt/Decrypt functions and a generated key to encrypt my data, and everything works fine in debug mode. When I try to run the release mode, it still runs

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-14 Thread Atti
Sorry, I made a mistake when I wrote the first text, I'm using libeay32MDd.lib - /MDd for debug and libeay32MD.lib - /MD for release. I only made the mistake writing this, I'm linking against the correct .libs in my project. On Tue, Apr 14, 2009 at 2:03 PM, Atti att...@gmail.com wrote: Hy, I'm

Re: RFC 4680 implementation

2009-04-14 Thread Emanuele Cesena
Hi, On Tue, 2009-04-14 at 02:16 -0700, nhack wrote: I want to know if there is any library that provides support for the RFC 4680, I have found this http://tlsext-general.blogspot.com/ but my problem with this library is that the client can send the supplemental data only after the server

Open SSL via dyndns.org

2009-04-14 Thread Tobias . Semmet
Hi, we tried to create a ssl certification via openssl. Our problem is that we have in intern server called SVR02. This server could be reached via name.dyndns.org:443. If we create a certification with the CO SVR02 the server accept this and install the certification. But if we try it from

Re: Query on OpenSSL for Certificate verification

2009-04-14 Thread Kyle Hamilton
I'd be happy to, if you engage me as a contractor. -Kyle H On Tue, Apr 14, 2009 at 12:26 PM, Vijay Kothamasu (vikotham) vikot...@cisco.com wrote: Hi Kyle, Thanks for your valuable inputs, find my response inline. Then don't return from the original SSL_CTX_set_verify callback until you

Re: Query on OpenSSL for Certificate verification

2009-04-14 Thread Victor Duchovni
On Mon, Apr 06, 2009 at 11:56:15PM -0700, Kyle Hamilton wrote: Third, the entire point of X.509 is to allow for clients to have all the information they need to verify certificates in the absence of an online authority. This said, it is now widely understood that this particular entire point

RE: Open SSL via dyndns.org

2009-04-14 Thread David Schwartz
we tried to create a ssl certification via openssl. Our problem is that we have in intern server called SVR02. This server could be reached via name.dyndns.org:443. If we create a certification with the CO SVR02 the server accept this and install the certification. But if we try it from www

RE: Resource temporarily unavailable error with SSL_connect

2009-04-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Dan Maartens Sent: Monday, 13 April, 2009 20:31 Thanks for your response Dave. With -state and -msg enabled, [s_server] seems to be hanging after SSL_accept:SSLv3 flush data. When I abort the client at this point

RE: X509_get_serialNumber

2009-04-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of sarym binome Sent: Monday, 13 April, 2009 15:19 i want to extract the the serial number or the subject name from an X509 certificate i used X509_get_serialNumber but i don't know how can i use it , i can't print it