Year 2038 and CA certificate

2011-10-10 Thread Felix Brack (Mailinglist)
Hello, My PKI is currently running on a 32 bit machine with Open SSL version 0.9.8 suffering from the Y2038 bug. Another 64 bit machine does not show that bug. What I need for now is a CA certificate for signing which should have a validity that extends beyond 2038, say 2050. I can create

FECC

2011-10-10 Thread Benix Vincent
What is fundamental EC implementation in SSL? Thanks, Benix.

Re: Year 2038 and CA certificate

2011-10-10 Thread Dr. Stephen Henson
On Mon, Oct 10, 2011, Felix Brack (Mailinglist) wrote: Hello, My PKI is currently running on a 32 bit machine with Open SSL version 0.9.8 suffering from the Y2038 bug. Another 64 bit machine does not show that bug. What I need for now is a CA certificate for signing which should have a

SSL/TLS - Error while trying to decrypt the premaster secret.

2011-10-10 Thread nilesh
Hi, I have an issue related to RSA decryption while using https. I have setup a dummy https server and captured packets on wireshark. As per the RFC - in client key exchange message the premaster is encrypted using Server's public key and sent to server. So, I have captured the encrypted

Re: starting point for learning to use OpenSSL

2011-10-10 Thread John Zavgren
Amen to the book. I found it extremely helpful. On Mon, Oct 10, 2011 at 1:14 AM, Scott Gifford sgiff...@suspectclass.comwrote: You can find Eric Rescorla's SSL examples here: http://www.rtfm.com/openssl-examples/ He mentions his book on that page as well, which I found very useful for

Re: Year 2038 and CA certificate

2011-10-10 Thread Felix Brack (Mailinglist)
On 10.10.2011 13:14, Dr. Stephen Henson wrote: On Mon, Oct 10, 2011, Felix Brack (Mailinglist) wrote: Hello, My PKI is currently running on a 32 bit machine with Open SSL version 0.9.8 suffering from the Y2038 bug. Another 64 bit machine does not show that bug. What I need for now is a CA

Re: Year 2038 and CA certificate

2011-10-10 Thread Dr. Stephen Henson
On Mon, Oct 10, 2011, Felix Brack (Mailinglist) wrote: On 10.10.2011 13:14, Dr. Stephen Henson wrote: If you use OpenSSL 1.0.0 or later you shoudln't see the 2038 issue on any platform because OpenSSL uses its own internal date routines to bypass the limitations of system routines. I

Re: Cert VU#864643

2011-10-10 Thread Jeffrey Arlt
Randy, Are you any relation to Mike Diffenderfer the innovative surfing legend? Be well, Jeff On Fri, Oct 7, 2011 at 10:55 AM, Diffenderfer, Randy randy.diffender...@hp.com wrote: How worried should I be about the contents of this?

HMAC-SHA1

2011-10-10 Thread Oleksiy
I am writing a program to upload file to Amazon S3 in C with libCurl and OpenSSL. To send a request to amazon I have to sign it - with HMAC-SHA1 http://docs.amazonwebservices.com/fws/latest/DeveloperGuide/index.html?SummaryOfAuthentication.html - here amazon doc that explain it.

Problem

2011-10-10 Thread paulor . oliveira
Hello! I am having a problem using the openSSL BigNum. See this code:  #include stdio.h #include openssl/bn.h BIGNUM ee(BIGNUM *a, BIGNUM *b) { BIGNUM *a0 = BN_new(); BIGNUM *b0 = BN_new(); BIGNUM *c = BN_new(); BIGNUM *p = BN_new(); BIGNUM *q = BN_new(); BIGNUM *r = BN_new(); BIGNUM *s =

New to OpenSSL: some questions

2011-10-10 Thread Jim Moon
Hello, All, I am glad to know about OpenSSL and look forward to better learning some of the features and requirements. I am working in a Linux environment. Here are my questions. 1. May there be no exchange of certificates? 2. May there be 256-bit encryption on both ends using the same key?