Re: Triple DES ECB question

2012-02-24 Thread burtbick
Jeffrey Walton-3 wrote: On Thu, Feb 23, 2012 at 2:12 PM, burtbick l...@burtbicksler.com wrote: snip But when I try using the openssl command line tool I wind up with 24 bytes of cipher text for my encrypted 16 byte key value. snip It sounds like the device wants a '2-key

Can I use an exsisting csr file?

2012-02-24 Thread jim.armstrong
openssl version -a returns OpenSSL 0.9.8g - Platform: debian-i386-i686/cmov There's an existing csr file on the server. Can I use this csr file or do I need to generate a new one? All the info on the existing file is accurate and it's 2048 bit. So no changes need to be made to it. If I

RE: Triple DES ECB question

2012-02-24 Thread burtbick
Thanks, Per the device specification they are saying that they are using Triple DES-ECB, since the keys they are using are 16 bytes I'm assuming that it is 2-key Triple DES but they do not clearly state that in the specifications. I have asked them to confirm that it is 2-key. Here's the

TLS Fast Start Support

2012-02-24 Thread Ryan Brown
Improving SSL performance, any support for including TLS Fast Start? http://blog.chromium.org/2011/05/ssl-falsestart-performance-results.html https://tools.ietf.org/html/draft-bmoeller-tls-falsestart-00 __ OpenSSL Project

RE: Can I use an exsisting csr file?

2012-02-24 Thread Edward Ned Harvey
From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of jim.armstrong openssl version -a returns OpenSSL 0.9.8g - Platform: debian-i386-i686/cmov There's an existing csr file on the server. Can I use this csr file or do I need to generate a new one?

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread sandeep kiran p
You mentioned that OpenSSL is holding a snapshot lock in rand_win.c. I couldn't find anything like that in that file. Can you specifically point me to the code that you are referring to? I would also like to get an opinion on possible workarounds that I can enforce to avoid the deadlock. 1. Can I

Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Jaquez Jr, Hector L.
Hello, I am new to certificates, how to create them, how to import them etc. I am looking for good training material that I can read over to learn more about this. I can create a CSR file but don't know how to import it using command line or GUI for that matter. We have

Re: Triple DES ECB question

2012-02-24 Thread Johannes Bauer
On 24.02.2012 03:51, burtbick wrote: So the new questions are: Is des-ede the proper choice for Triple DES-ECB as the target device specification requires? If not then is there another viable option? You can use 3K3DES and have the same results (with lower performance) if you set K1 = K3.

Re: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Michael S. Zick
On Fri February 24 2012, Jaquez Jr, Hector L. wrote: Hello, I am new to certificates, how to create them, how to import them etc. You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike I am looking

Re: Triple DES ECB question

2012-02-24 Thread burtbick
Johannes Bauer wrote: On 24.02.2012 03:51, burtbick wrote: snip HTH, Joe __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org

RE: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Edward Ned Harvey
From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Michael S. Zick You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike, How do you call that a thread hijack? New subject, new thread

Re: Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-24 Thread Gatewood_Green
What is your test environment and method? We've tried this in both our embedded OS (minimized LFS style build) and OpenSUSE. Both ways the result is the same. Focusing on the PRNG, We cannot get FIPS_rand_status() to report 1. Tried both on hardware and in VMs. Moved to the 20120222

Re: Resources for certificates using OpenSSL (newbie)

2012-02-24 Thread Jakob Bohm
On 2/24/2012 8:27 PM, Edward Ned Harvey wrote: From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Michael S. Zick You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike, How do you call that

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread Jakob Bohm
On 2/24/2012 2:14 PM, sandeep kiran p wrote: You mentioned that OpenSSL is holding a snapshot lock in rand_win.c. I couldn't find anything like that in that file. Can you specifically point me to the code that you are referring to? I would also like to get an opinion on possible workarounds

Re: Deadlock in RAND_poll's Heap32First call

2012-02-24 Thread Jeffrey Walton
On Fri, Feb 24, 2012 at 4:08 PM, Jakob Bohm jb-open...@wisemo.com wrote: On 2/24/2012 2:14 PM, sandeep kiran p wrote: You mentioned that OpenSSL is holding a snapshot lock in rand_win.c. I couldn't find anything like that in that file. Can you specifically point me to the code that you are

use open-ssl to secure DSR protocol in ns2

2012-02-24 Thread Benamar Lydia
hello, I want to know how to use open-ssl in order to secure DSR protocol under ns2. i want specially to use deffie-hellman method. thank you. __ OpenSSL Project http://www.openssl.org User Support