Subject Alternate Names (SANS)

2012-12-10 Thread Jaquez Jr, Hector L.
Hello All, I am having an issue trying to get my server read the SAN entries that I have configured in my cnf file. I created a .CSR file (2048) and had our PKI folks generate the certificate (.p7b) so that I could import it into my application. The application accepts the certificate

Re: Subject Alternate Names (SANS)

2012-12-10 Thread Jakob Bohm
On 12/10/2012 2:43 PM, Jaquez Jr, Hector L. wrote: Hello All, I am having an issue trying to get my server read the SAN entries that I have configured in my cnf file. I created a .CSR file (2048) and had our PKI folks generate the certificate (.p7b) so that I could import it into my

Question related to TLS1.2 key computation function - PRF.

2012-12-10 Thread Tayade, Nilesh
Hi, As per RFC5246 - the TLS1.2 uses SHA256, SHA384 MAC. I would appreciate any pointers on how the PRF is implemented for TLS1.2. E.g. For TLS1.0, TLS1.1 - the HMAC-SHA1 is implemented as below. And SHA-1 uses 20bytes at a time. How many bytes SHA256 uses at a time? // First initialize the

Re: Question related to TLS1.2 key computation function - PRF.

2012-12-10 Thread Jakob Bohm
On 12/10/2012 6:27 PM, Tayade, Nilesh wrote: Hi, As per RFC5246 - the TLS1.2 uses SHA256, SHA384 MAC. I would appreciate any pointers on how the PRF is implemented for TLS1.2. E.g. For TLS1.0, TLS1.1 - the HMAC-SHA1 is implemented as below. And SHA-1 uses 20bytes at a time. How many bytes

How to implement custom STACK object functions

2012-12-10 Thread Felipe Blauth
Hello, I have defined a custom ASN.1 structure by doing something like this: *typedef struct my_custom* *{* *... // omited * * * *} MY_CUSTOM;* Then I did the declarations like this: *DECLARE_ASN1_ITEM(MY_CUSTOM)* *DECLARE_STACK_OF(MY_CUSTOM)* *DECLARE_ASN1_SET_OF(MY_CUSTOM)* And

blowfish-cbc: what to save?

2012-12-10 Thread Markus Wernig
Hi everyone! I have a fairly basic question about how to use blowfish-cbc in an application. Here's the scanario: An application will receive arbitrary amount of data (potentially multi-gigabyte) via a tcp/ssl socket, multiple files from multiple senders over long periods of time (i.e. not in

Set up the protocol

2012-12-10 Thread Alex Chen
I want to set up SSL so it does not use SSL v2 or older, just like that Apache has in its httpd-ssl.conf SSLProtocol all -SSLv2 What is the equivalent API to do this? Thanks. __ OpenSSL Project