des_ncbc_encrypt question

2009-03-08 Thread Nikos Balkanas
Hi, I am using des_ncbc_encrypt to encrypt/decrypt packages in a server/client architecture (CBC mode). When I test encryption/decryption from within the server I get everything decrypted OK, except the last 4 bytes. However, this is enough for the client to reject the packet. I am using the

Verifying private certificate before SSL connection

2009-03-08 Thread Liz Voss
I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using to verify peer certificate but I am

RE: des_ncbc_encrypt question

2009-03-08 Thread Bill Colvin
I suggest you carefully read the following function description paying close attention to length. DES_ncbc_encrypt() encrypts/decrypts using the cipher-block-chaining (CBC) mode of DES. If the encrypt argument is non-zero, the routine cipher-block-chain encrypts the cleartext data pointed to

Re: des_ncbc_encrypt question

2009-03-08 Thread Nikos Balkanas
Dear Bill, Thank you very much for your quick reponse, on Sunday night! Indeed I had read this part, but couldn't make much of it. It took me a while to rewrite the code, but eventually everything looks fine! BR, Nikos - Original Message - From: Bill Colvin