Re: Question about Sessions and gcc compiler

2009-07-19 Thread Irfan Gulamali
Any input would greatly be appreciated. I can't figure out what I'm not doing. Sent wirelessly from my BlackBerry device on the Bell network. Envoyé sans fil par mon terminal mobile BlackBerry sur le réseau de Bell. -Original Message- From: Irfan Gulamali irfan.gulam...@hotmail.com

RE: One CA for many clients (a silly question)

2009-07-19 Thread PMHager
Here are three different annotations regarding a non-critical extKeyUsage extension. ITU-T X.509 2000/03: If this extension is present, and the certificate-using system recognizes and processes the extendedKeyUsage extension type, then the certificate-using system shall ensure that the

TLS extension servername ssl session caching

2009-07-19 Thread Jan F. Schnellbaecher
Hi, I am using 098h with the non default configure option 'enable-tlsext' and have a problem with the TLS extension servername in conjunction with ssl session caching. It seems that sessions that contain the SNI extension will not be cached by openssl. (I tried with FF 351) During the

Re: One CA for many clients (a silly question)

2009-07-19 Thread javierm
This is the template in apache SSL virtual host: Check the SSLRequire directive, which applies to specific clients, considering a previous directive ( SSLCACertificateFile /etc/apache2/ssl.crt/ca-bundle.crt) has verified the client's cert is issued by a valid CA. Notice it can also be

Re: One CA for many clients (a silly question)

2009-07-19 Thread javierm
Frans de Boer wrote: @Kyle, one site using multiple CA's? ... Frans. Not meaning multiple CA's, but rather sub-CA's. As you know the chain to get to the final cert can have several steps. You still have MyCorp or MyOrg as the only self signed CA, but MyOrg-Plants sub CA and

Re: Best format for enveloped signed content

2009-07-19 Thread javierm
Jeremy R. wrote: ... I'd like to be able to use the openssl command-line utility to generate messages manually during development. Hello Jeremy You can see my code at http://sourceforge.net/projects/as2openssl/files/ and all is done using the command line openssl. I found quite ok

Link errors with VS2005 C++ and 1.0.0-beta3 using NASM (fix included)

2009-07-19 Thread John Buck
Under VS2005 VC++, using NASM, it appears the ASM files generated by the perl scripts define OPENSSL_ia32cap_P to be common/BSS as opposed to declaring it to be extern. In fact, crypto/perlasm/x86nasm.pl goes out of its way to comment out the: extern_OPENSSL_ia32cap_P and add a BSS

Best format for enveloped signed content

2009-07-19 Thread Jeremy R.
I'm writing an application which will receive messages which must be both enveloped and signed, and I'm looking for the best way to do this. Obviously, I can simply use EVP_Open* and EVP_Verify* in either order to do this, but I'm wondering if there's a good way to do this – ideally, I'd

General Question

2009-07-19 Thread Loke Foo Soon
Hi All, I still new in openssl. May I know what different between openssh and openssl? They look a same. May I know how to use the openssl? Do they have any command prompt feature? Thanks -fsloke

Re: General Question

2009-07-19 Thread javierm
Loke Foo Soon wrote: (1) May I know what different between openssh and openssl? (2) Do they have any command prompt feature? Hello, ssh means secure shell it's like a telnet but over SSL Yes OpenSSL has a command line tool. -- View this message in context:

Re: PHP Open SSL

2009-07-19 Thread javierm
mahendra [MinG] wrote: Questions: 1. What is the encoding format for the encrypted text that is generated from openssl_public_encrypt? 2. Is it possible that because when i generate the encrypted text, i echo it into a HTML textarea and hence changing the encoding? For the openssl

Re: TLS extension servername ssl session caching

2009-07-19 Thread Dr. Stephen Henson
On Sun, Jul 19, 2009, Jan F. Schnellbaecher wrote: Hi, I am using 098h with the non default configure option 'enable-tlsext' and have a problem with the TLS extension servername in conjunction with ssl session caching. It seems that sessions that contain the SNI extension will not be

Re: General Question

2009-07-19 Thread Jeremy R.
They are two different network protocols which both implement cryptography. OpenSSL is primarily used by developers behind the scenes and not directly by users (though there is an openssl command-line tool that exposes many of OpenSSL's capabilities). I assume the command prompt feature

RE: Question about Sessions and gcc compiler

2009-07-19 Thread Vivek Subbarao
Can u please provide the series of calls that u make in the server and client. What do u mean by close the connection from the server? Does the server spawn a new thread to handle client requests? -Original Message- From: owner-openssl-us...@openssl.org

RE: Question about Sessions and gcc compiler

2009-07-19 Thread Vivek Subbarao
Accept() and SSL_accept should be inside the while loop. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Irfan Gulamali Sent: 19 July 2009 03:23 To: openssl-users@openssl.org Subject: Question about Sessions and gcc compiler

RE: Question about Sessions and gcc compiler

2009-07-19 Thread Irfan Gulamali
Hi, When I close the connection from the server SSL_shutdown(ssl) and I have the client connect again via: openssl s_client -tls1 -msg -port 8080 the second time it tries to connect (2nd time run the above command again with the server code attached in the previous email), I'm not able to

RE: Question about Sessions and gcc compiler

2009-07-19 Thread Irfan Gulamali
Hi, Thanks that fixed my issues. Cheers, Irfan Subject: RE: Question about Sessions and gcc compiler Date: Sun, 19 Jul 2009 22:31:20 -0700 From: viv...@chelsio.com To: openssl-users@openssl.org Accept() and SSL_accept should be inside the