Problems with cipher in engine

2010-07-05 Thread Nacho Álvarez
Hello everybody, I am having got several problems with ciphers in my engine. 1st: Key, who I recive in the key argument from init function (from evp_cipher_st), is different to the key I write in the command line (Is the key cooked?). 2nd: In the init function (from evp_cipher_st) the key I

Why 2 DLL's for building OpenSSL

2010-07-05 Thread Deckers, Rob
I am trying to build OpenSSL by using CMake ( only for windows ) files to generate visual studio solutions. Now I see that OpenSSL results in 2 .dll files. Is there a special reason why 2 DLL's? Could it be combined in just one DLL? Greets Rob Deckers This message and attachment(s)

Re: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Emanuele Cesena
On Mon, 2010-07-05 at 12:54 +0200, Deckers, Rob wrote: Is there a special reason why 2 DLL's? Could it be combined in just one DLL? one is crypto, with all the crypto stuffs, the other is ssl, with the SSL/TLS implementation. I assume they are separated because you could build applications on

Re: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Anil Tambe
by 2 dlls .. do you mean libssl and libcrypto ? On Mon, Jul 5, 2010 at 4:24 PM, Deckers, Rob rob.deck...@oce.com wrote: I am trying to build OpenSSL by using CMake ( only for windows ) files to generate visual studio solutions. Now I see that OpenSSL results in 2 .dll files. Is there a

Re: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Dr. David Kirkby
On 07/ 5/10 11:54 AM, Deckers, Rob wrote: This message and attachment(s) are intended solely for use by the addressee and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If you are not the intended recipient or agent thereof

RE: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Deckers, Rob
When I do: nmake -f ms\ntdll.mak install I get 4 Directories: - bin - lib - include - ssl In the bin directory, I see ssleay32.dll and libeay32.dll. Now, I am building OpenSSL myself with CMake and it would be easier to just build one big dll. Therefor, I am wondering if I run into

Re: verify certificate in c

2010-07-05 Thread Michael S. Zick
On Sun July 4 2010, Jeremy Farrell wrote: From: Behalf Of Michael S. Zick Sent: Saturday, July 03, 2010 6:51 PM On Sat July 3 2010, Dr. Stephen Henson wrote: On Sat, Jul 03, 2010, belo wrote: Damn! how can be possible that in the official openssl documentation there's

Re: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Thomas J. Hruska
Anil Tambe wrote: by 2 dlls .. do you mean libssl and libcrypto ? Actually they are named: ssleay32.dll and libeay32.dll. To get 'libssl', I copy ssleay32.dll to libssl32.dll during installation (they are the same thing). -- Thomas Hruska Shining Light Productions Home of BMP2AVI and

Doubts about certificates

2010-07-05 Thread Sebastián Treu
Hi, I'm not much related with security, certificates and authentication, but If anyone can gather our server certificate this way: echo | openssl s_client -connect ${MY_SERVER}:443 21 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' mycert.pem How can we avoid a possible hacked DNS

Re: Doubts about certificates

2010-07-05 Thread Steffen DETTMER
* Sebastián Treu wrote on Mon, Jul 05, 2010 at 10:39 -0300: if we can use a fake DNS that resolves a name as we want and also we can gather that certificate to be installed in the fake-server, This fake-server would not have the secret key belonging to the public key certified in the (public)

Re: Doubts about certificates

2010-07-05 Thread Jakob Bohm
On 05-07-2010 15:39, Sebastián Treu wrote: Hi, I'm not much related with security, certificates and authentication, but If anyone can gather our server certificate this way: echo | openssl s_client -connect ${MY_SERVER}:443 21 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' mycert.pem

Re: Doubts about certificates

2010-07-05 Thread Sebastián Treu
Thanks to both. It's much clear to me now. Best regards, -- If you want freedom, compile the source. Sebastián Treu http://labombiya.com.ar __ OpenSSL Project http://www.openssl.org User Support

Re: Why 2 DLL's for building OpenSSL

2010-07-05 Thread Ger Hobbelt
If you're doing your own makefiles (cmake for instance), then anything is allowed: if 2 dlls feels like trouble to you, I'd suggest building the entire thing as a library (a.k.a. static library) instead -- can't imagine what 1 dll does better than 2 of the buggers, but that 's just me -- but

RE: Large CRL Handling Problem

2010-07-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Ryan Smith Sent: Friday, 02 July, 2010 18:31 I have written a FIPS-1.1.2 compliant (OpenSSL 0.9.7m) application that validates certificates that are read in from files. It also loads the CA certificates and corresponding

RE: Serials and root certificates

2010-07-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Jon Kristensen Sent: Sunday, 04 July, 2010 08:28 Currently, I'm using openssl req -x509 to create root certificates and openssl x509 to create all other certificates. I'm using the openssl x509 parameters -CAserial and -CAcreateserial to

RE: key usage for certificates

2010-07-05 Thread Dave Thompson
?? From: owner-openssl-us...@openssl.org On Behalf Of baccali Sent: Saturday, 03 July, 2010 12:06 Hi all, sorry for my bad english i'm don't speak very well. I subscribed here because i have a probably easy question for you. All is in the title. The fact is the notion of keyUsage in