Re: random crash in getrn function (ssl, crypto).

2009-09-03 Thread Dan Ribe
Got the fix for this ... Following callbacks must be implemented by the developer if CRYPTO library has to be used in the multi-threaded environment. CRYPTO_set_locking_callback()CRYPTO_set_id Cheers ! On Thu, Sep 3, 2009 at 10:20 AM, Dan Ribe wrote: > Hi Everyone, > > I am using gsoap stub co

Re: openssl C server and java clients

2009-09-03 Thread Sebastián Treu
On Thu, Sep 3, 2009 at 7:11 PM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behalf Of Sebastián Treu >> Sent: Thursday, 03 September, 2009 06:06 > >> After writing a server in C using select() (a >> multiplexed server) and a java client ... >> I decided to secure the conection

Cross Compiling for Alpha

2009-09-03 Thread ef
Hello, I have tried for a long time to Cross Compile OpenSSL for an Alpha Machine (EV67,EV5,EV6), however it has yet to work. Is it even possible to cross compile on a linux x86 to Alpha-line machine? Thanks EF __ OpenSSL Project

RE: Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Hazel John > Sent: Thursday, 03 September, 2009 15:25 > openssl enc -aes-256-cbc -K > 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E > 1F -iv 00112233445566778899AABBCCDDEEFF -e -in input.txt -out > output.enc > [and same with -

Question regarding PRF()...

2009-09-03 Thread barcaroller
The TLS RFC specifies a PRF() function for the generation of the master secret: master_secret = PRF(pre_master_secret, "master secret", ClientHello.random + ServerHello.random); Does OpenSSL publish an interface to this function (PRF)? On a similar note, doe

RE: openssl C server and java clients

2009-09-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Sebastián Treu > Sent: Thursday, 03 September, 2009 06:06 > After writing a server in C using select() (a > multiplexed server) and a java client ... > I decided to secure the conection > using openssl. > > I have the examples of the book I've

RE: EVP_DecryptFinal succeeds but fails.

2009-09-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of roxaz > Sent: Thursday, 03 September, 2009 06:46 > Hey, EVP_DecryptFinal returns 0 for me, but no data is returned > to supplied output buffer, and returned data length is set to 0. > What could be the issue? bdec receives s

RE: Export/Move Certificate failure

2009-09-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of mitch355 > Sent: Tuesday, 01 September, 2009 11:35 > I've installed my certificate for my apache server and now > want to export/move the certificate for the Tomcat server on > the same machine. I'm using the following command: > > bin\opens

RE: post-connection assertions

2009-09-03 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Daniel Mentz > Sent: Wednesday, 02 September, 2009 08:27 > To: openssl-users@openssl.org > Subject: post-connection assertions > > I'm wondering what's the best way to check the identity of > the peer [in its cert just after connection] > So I

Re: EVP_DecryptFinal succeeds but fails.

2009-09-03 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 roxaz wrote: | Hey, EVP_DecryptFinal returns 0 for me, but no data is returned to | supplied output buffer, and returned data length is set to 0. What could | be the issue? bdec receives some correct data tho. | | u32 szbdec = 0; | u8

Re: Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-03 Thread Hazel John
This is the openssl command line that I am using To encrypt: openssl enc -aes-256-cbc -K 000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F -iv 00112233445566778899AABBCCDDEEFF -e -in input.txt -out output.enc To Decrypt: openssl enc -aes-256-cbc -K 000102030405060708090A0B0C0D0E0F1

Re: Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-03 Thread Hazel John
I am specifying the key and IV and using the same hex based string for both. On Thu, Sep 3, 2009 at 2:02 PM, Victor Duchovni wrote: > On Thu, Sep 03, 2009 at 01:51:10PM -0500, Hazel John wrote: > >> Hi, >> I need to encrypt simple strings to readable strings using the openssl >> command line (ope

Re: Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-03 Thread Victor Duchovni
On Thu, Sep 03, 2009 at 01:51:10PM -0500, Hazel John wrote: > Hi, > I need to encrypt simple strings to readable strings using the openssl > command line (opessl enc with the -a option to return readable > strings) and decrypt this in my code (c++/linux). I tried both the low > level aes and evp f

Trying to encrypt with openssl commandline and decrypt using aes or evp

2009-09-03 Thread Hazel John
Hi, I need to encrypt simple strings to readable strings using the openssl command line (opessl enc with the -a option to return readable strings) and decrypt this in my code (c++/linux). I tried both the low level aes and evp functions and couldn't get the results to match. Is there a default padd

RE: openssl C server and java clients

2009-09-03 Thread Will Bickford
Note that you should read about TLS 1.0, TLS 1.1, and TLS 1.2. OpenSSL only supports TLS 1.0 at this point, but SSL v2 and v3 are pretty old. If you want to do current work, you should be using TLS. TLS 1.0: http://tools.ietf.org/html/rfc2246 TLS 1.1: http://tools.ietf.org/html/rfc4346 TLS 1

EVP_DecryptFinal succeeds but fails.

2009-09-03 Thread roxaz
Hey, EVP_DecryptFinal returns 0 for me, but no data is returned to supplied output buffer, and returned data length is set to 0. What could be the issue? bdec  receives some correct data tho.         u32 szbdec = 0;         u8* bdec = new u8[resp.rSize + halfKey];    // half rSize = half of chyper

speed command in openssl.exe

2009-09-03 Thread jimmy_moh
hi guys am new to openSSL , by using speed function i was checking the performance of crypto algorithms. but i had a confusion in output report .. "Doing sha1 1310720 times on 1024 blocks: 1310720 sha1's in 11.17 s" here what is this number "1310720".. is it the number of iterations...? and wha

Re: openssl C server and java clients

2009-09-03 Thread Sebastián Treu
Sry, i read in the web about it and I found at: http://www.openssl.org/docs/ssl/SSL_CTX_new.html that for compatible issues one can use: SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void) That do it. I managed to use keytool also to export the certificate created with o

openssl C server and java clients

2009-09-03 Thread Sebastián Treu
Hi there, I'm new on this list. I'm a computer science student and I'm trying to write an application that models the client-server schema. After writing a server in C using select() (a multiplexed server) and a java client that interacts with more of this java clients succesfully, I decided to se

Re: Verify certificate using subordinate ca

2009-09-03 Thread Steffen DETTMER
* Dr. Stephen Henson wrote on Wed, Sep 02, 2009 at 15:08 +0200: > Including a public key certificate in no way risks the > integrity of its private key as several others have said in > this thread. I think this theoretically opens the possibility to brute-force the private key. I think that Brute

Re: Verify certificate using subordinate ca

2009-09-03 Thread Steffen DETTMER
* Serge Fonville wrote on Wed, Sep 02, 2009 at 13:00 +0200: > The chain always includes all CAs and certificates. I've done some > googling, and it shows that you can trust 'just' the intermediate CA > without trusting the root CA, altough this kinda obsoletes the purpose > of the root CA. [...]

Windows CE port SSL_connect() issue

2009-09-03 Thread mscdex
Hello, First: I am using OpenSSL 0.9.8a (pre-compiled binaries from http://nakka.com/soft/npop/download/npopssl/npopssl002mips.zip) on both Windows CE 2.11 and 3.0 (HPC Pro and HPC2000 respectively) with .NET Compact Framework 1.0 SP3. I have successfully been able to use OpenSSL 0.9.8k in a sampl