RE: tlsv1_method implementation

2009-07-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Michael Kurecka > Sent: Friday, 31 July, 2009 09:05 > I'm using OpenSSL 0.9.8k and am trying to find the > implementation of the tlsv1_method. Below are the only > references I found. I'm trying to determine the cipher suites > used by OpenSS

Re: SSL_connect on non blocking socket: Works but need better understanding

2009-07-31 Thread Rij
> If you get SSL_ERROR_WANT_READ, you need to epoll/select for readability. If > you get SSL_ERROR_WANT_WRITE, you need to epoll/select for readability. > I am assuming the above was a typo and you meant writeability for SSL_ERROR_WRITE. Ok. That's interesting. I actually followed the concept from

RE: Deconstructing OASIS Web Services Security SOAP Messages with OpenSSL utilities

2009-07-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Carlo Milono > Sent: Thursday, 30 July, 2009 19:27 > I'm trying to illustrate how to take an OASIS WSSE SOAP > Message and operate on it with the commands in OpenSSL. > The SOAP Message encrypts the contents of an element in the > Body with AE

RE: Maximum RSA/DSA key length

2009-07-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Alexander Lamaison > Sent: Thursday, 30 July, 2009 08:05 > I'm calling PEM_read_bio_RSAPrivateKey and > PEM_read_bio_DSAPrivateKey with private keys loaded from > files on disk. I read the file into a string, put that into > a BIO and then c

RE: SSL_connect on non blocking socket: Works but need better understanding

2009-07-31 Thread David Schwartz
Rij wrote: > I am using a non-blocking socket to connect to a server. I have the > following code which works fine. The issue is that the while loop > executes almost 3000 times! Is this expected? When I am waiting for > select/epoll to return, I was expecting it to return only when the > connect

SSL_connect on non blocking socket: Works but need better understanding

2009-07-31 Thread Rij
Hello, I am using a non-blocking socket to connect to a server. I have the following code which works fine. The issue is that the while loop executes almost 3000 times! Is this expected? When I am waiting for select/epoll to return, I was expecting it to return only when the connection completes,

Re: any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread ohaya
Hi, I think that the same needs to be said for the private key associated with the server cert. That needs to be kept securely, and not distributed, right? Jim Kyle Hamilton wrote: > Only if they have the CA's private key, or if the CA is using MD5 and > is otherwise subject to a "prei

what is the best way to read write data on openssl

2009-07-31 Thread Luiz Rafael Culik Guimaraes
Dear Friends My current code that use standart sockets connect and receive data correctly using an call to select () and depending on it return value to recv/send api what is the best way to do the same using SSL_read/SSL_write api? openssl 0.98k under msvc and borland ++, and linux with gcc

tlsv1_method implementation

2009-07-31 Thread Michael Kurecka
I'm using OpenSSL 0.9.8k and am trying to find the implementation of the tlsv1_method. Below are the only references I found. I'm trying to determine the cipher suites used by OpenSSL's TLSv1 method so I would appreciate any help in locating the code, Thanks. File openssl-0.9.8k\ssl\s23_meth.c 7

Re: Pop3/smtp with gmail

2009-07-31 Thread Luiz Rafael Culik Guimaraes
Dear Friends Does any one has an small sample on using openssl in C to connect to gmail pop3 and smtp server. with my code , i can connect with out problems on the server, but when i send PASS command for pop, i get the -Err unsuported command , same response i get for sending AUTH LOGIN to sm

Re: any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread Kyle Hamilton
Only if they have the CA's private key, or if the CA is using MD5 and is otherwise subject to a "preimage" attack. The CA's certificate file is harmless to distribute under most circumstances. -Kyle H 2009/7/30 Selçuk Cihan : > Hi, we have a client-server application. We want our client(win32 >

any vulnerabilities in a scenario in which root certificate authorithy is a local file

2009-07-31 Thread Selçuk Cihan
Hi, we have a client-server application. We want our client(win32 application) to be sure that it is talking to our server indeed(server auth. only), and we wanted to have this communication secured. We are using openssl on the client side. Our server is a java application. We have created our roo

Re: Hex dump of public key.

2009-07-31 Thread Fred Keet
Bizhan Gholikhamseh (bgholikh) wrote: Hi All, I need to convert a public key in PEM format to Hex format. Thanks, B __ OpenSSL Project http://www.openssl.org User Support Mailing List