query reg disabling hanshake and key exchange mechanism openssl

2011-09-24 Thread Siddharth Sharma
Hi, I am a network security researcher. We have designed and developed a multifactor authentication and secure key exchange protocol that can counter man in the middle attack. I want to integrate my protocol with SSL on apache. I have written my own protocol for authentication and key exchange.

Re: TLS 1.0 cracked...

2011-09-24 Thread Ben Laurie
On Fri, Sep 23, 2011 at 4:54 PM, Dr. Stephen Henson st...@openssl.org wrote: On Fri, Sep 23, 2011, Jakob Bohm wrote: Is openssl running out of bit values for SSL_OP_ constants? Well more ran out of contants. When a new flag was needed for TLS v1.2 all 32 bits were used but fortunately two

certificate problems http://www.rtfm.com/openssl-examples/

2011-09-24 Thread mattj610
In regards to the examples given at http://www.rtfm.com/openssl-examples/ I have been trying to set up pem files so that the connection will work by self signed certificates. I can get the wclient to connect only with the -i option, as I understand the example pem files expired long ago. I have

Re: Unable to enable GOST ciphers support

2011-09-24 Thread Andrey Kulikov
You config file is incorrect. It should looks something like this: == openssl_conf = openssl_def [openssl_def] engines = engine_section [engine_section] gost = gost_section == On 19 September 2011 12:31, Peter Volkov p...@gentoo.org wrote: Hi!

Re: c/c++ and GOST is russian ciphers.

2011-09-24 Thread Andrey Kulikov
You need to initiualie engine first: static ENGINE *e = NULL; e = ENGINE_by_id(gost); if (!e){ printf(Can't find engine \n); return 1; } if (!ENGINE_init(e)){ printf(Engine initialization failed!\n); ENGINE_free(e); return 1; } /*