[openssl-users] TLS 1.2 Client hello missing SessionTicket

Hi Folks, I'm working on an issue where something seems to be going wrong with our internal state after a while, and one of our sessions will have suddenly lost its SessionTicket during the Client Hello. To debug the issue, I'm wondering if someone can point me to the right internal variable

Re: encryption / decryption not the same debug / release

call I was forgetting... Cheers and many thanks, Mike Ken Goldman ([EMAIL PROTECTED]) wrote*: From: Mike Gagnon [EMAIL PROTECTED] Date: Sun, 08 May 2005 21:27:31 + I'm zeroing in on my problem. Encryption / decryption WORKS in DEBUG in the Visual C++ IDE BUT NOT when run from

Re: encryption / decryption not the same debug / release

I found my problem. My initialization vector was too short. I remembered that it needed to be a multiple of 8 (I think) and that it needed to have a minimum length... Mike Mike Gagnon ([EMAIL PROTECTED]) wrote*: Hello Ken, Very nice of you to take the time out to write to me. Thanks a lot

encryption / decryption not the same debug / release

Hi list, I'm zeroing in on my problem. Encryption / decryption WORKS in DEBUG in the Visual C++ IDE BUT NOT when run from windows explorer. Also doesn't work at all in release mode. I tried turning off optimization and that didn't help. Any ideas / suggestions? Thanks! Mike // This email

encryption decryption not the same?

Hi list, I've created an encrypter/decrypter object that successfully encrypts and decrypts strings. However, this object doesn't successfully decrypt another instances' encryption. It's obviously something to do with initialization. I'm creating a BIO chain: Cipher, Base64, Memory. I'm using

Re: Trying to convert .pem -key only- to .pkcs12 file.

You can't place a key without its certificate into a PKCS12. You need both - they are coupled together in this type of file. You can even store certificates that were not created with the supplied key, but at least one of the certificates must match the supplied key.. Mike -BEGIN PGP

Re: Trying to convert .pem -key only- to .pkcs12 file.

11:55 am, Mike Gagnon wrote: You can't place a key without its certificate into a PKCS12. You need both - they are coupled together in this type of file. You can even store certificates that were not created with the supplied key, but at least one of the certificates must match the supplied

Re: Trying to convert .pem -key only- to .pkcs12 file.

a certificate - you'll see that a key is used to do so... Mike -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 openssl pkcs12 -in key.pem -out key.pkcs12 -export -certfile cert.pem No certificate matches private key On Friday 19 March 2004 12:19 pm, Mike Gagnon wrote: I haven't tried that, but I

Re: key fingerprints

non-null - so they will always add data to the digest function, drastically changing the result and giving me my unique fingerprint for them.. Thanks, Mike On Thu, Feb 26, 2004, Mike Gagnon wrote: Hi list, I need to know how to calculate the fingerprint for public/private RSA/DSA keys. (4

key fingerprints

); blob-put_bignum2(pKey-pkey.rsa-e); blob-put_bignum2(pKey-pkey.rsa-n); The result is then the MD5 digest on the blob... Thanks for your help! Mike Gagnon __ OpenSSL Project http

PKI certificate enrollment

Hi list, Does anyone know of any implementations for certificate enrollment that fit easily and work well with OpenSSL? I'm at the research phase, looking at options... Thanks! Mike Gagnon __ OpenSSL Project

Re: Documentation

book: Network Security with OpenSSL by Viega, Messier Chandra (O'Reilly) -Mike Hello. I'm trying to undesrtand OpenSSL API. But documentation on the web seems to be very incomplete. Could please anybody suggest me where to look for better documentation or easy to understand

blob from CAPI

Hi list, Would anyone know how to convert a CAPI certificate blob to an OpenSSL X509 certificate? Thanks very much! Mike Gagnon __ OpenSSL Project http://www.openssl.org User Support Mailing

Re: blob from CAPI

, CRYPT_STRING_BASE64HEADER, NULL, dwLengthBase64); LPSTR szBase64 = new char[dwLengthBase64]; CryptBinaryToString(pCert, dwCertLength, CRYPT_STRING_BASE64HEADER, szBase64, dwLengthBase64); --- Thanks! Mike Gagnon

Re: blob from CAPI

I don't think it's PEM. It's binary (The function is binaryToString)... Mike On Mon, Dec 01, 2003, Mike Gagnon wrote: Hi Dr. Henson / list, This is the code that I was using to convert my blob to an OpenSSL certificate (the problem I have with this working code

iKey

Hi list, Does anyone know of a CAPI-only engine for OpenSSL that can do the basic necessary operations for an SSL connection? Thanks! Mike Gagnon __ OpenSSL Project http://www.openssl.org User