Retrieving hostname after accept

Hello I have a simple question that I can't find an answer to. I'm writing an application where every instance is both client and server (a thread is listening for incoming connections on a predefined port, and at the same time connections are created to others whenever they're needed).

Help

Good morning,I am Emna Zeddini from TUNISIA, a telecommunication ingeneer and I am working on porting openssl on VDK.The problem is that VDK dosen't understand types.h.when compiling, many errors occur like __BEGIN_DECLS ..Please help me.

Re: Retrieving hostname after accept

On Mon, Aug 10, 2009, Laura Arhire wrote: Hello I have a simple question that I can't find an answer to. I'm writing an application where every instance is both client and server (a thread is listening for incoming connections on a predefined port, and at the same time connections are

EVP errors!

OK, so after the last post I made; I was trying to use the DES library, and was advised to use the higher level EVP library, I have now used this and getting the same type of error! %-| So where do I go from here. The command line that i wish to use for decrypting the file that i am encrypting

Issuer statement

Hi, How do I get an issuer statement (when viewed in IE). What settings in openssl.cnf are required and do I need to specift any extra commandline switches? Thanks in advance Regards, Serge Fonville __ OpenSSL Project

Re: EVP errors!

On Mon, Aug 10, 2009, MusicAndy wrote: OK, so after the last post I made; I was trying to use the DES library, and was advised to use the higher level EVP library, I have now used this and getting the same type of error! %-| So where do I go from here. The command line that i wish to use

Re: Issuer statement

On Mon, Aug 10, 2009, Serge Fonville wrote: Hi, How do I get an issuer statement (when viewed in IE). What settings in openssl.cnf are required and do I need to specift any extra commandline switches? It is the certificate policies extension that covers that. The syntax is mentioned in

Re: Issuer statement

Thx for the quick reply How do I get an issuer statement (when viewed in IE). What settings in openssl.cnf are required and do I need to specift any extra commandline switches? It is the certificate policies extension that covers that. The syntax is mentioned in doc/openssl.txt, hmm... was

Re: EVP errors!

Since awaiting for a reply, I realised this was the case. So the question is now, for different ciphers is the key length also different? is it eight characters for des3? Also, how will i eventually add salt to this (specified in the command line as -salt but with no number present) Dr.

Re: EVP errors!

On Mon, Aug 10, 2009, MusicAndy wrote: Since awaiting for a reply, I realised this was the case. So the question is now, for different ciphers is the key length also different? is it eight characters for des3? Is is 24 for des3. You can use EVP_MAX_KEY_LENGTH for the key and

Re: EVP errors!

Thanks for your help so far, but still cannot get this working... Here is my latest code. I am trying to emulate something that should be simple, which can be decrypted using openssl des3 -d -nosalt -k 1 -in source filename -out destination filename EVP_CIPHER_CTX ctx;

Re: EVP errors!

On Mon, Aug 10, 2009, MusicAndy wrote: Thanks for your help so far, but still cannot get this working... Here is my latest code. I am trying to emulate something that should be simple, which can be decrypted using openssl des3 -d -nosalt -k 1 -in source filename -out destination

Re: EVP errors!

Thanks again Steve, However the EVP_MAX_KEY_LENGTH appears to be a length of 32, not 24 that DES3 requires. Therefore when i call EVP_EncryptInit_ex I am only going to send 24 characters of this key, and see what happens then. It should only be sending 24 characters shouldnt it? Dr. Stephen

Re: EVP errors!

The Key looks completely different in command line to my program. Why would this be the case when i am calling the bytes to key function I am using a password of 1 therefore in the C++ do I need to do the same.. do I need to pad out the password in the C++? Help :( MusicAndy wrote:

Any differences between Openssl 0.9.8g and 0.9.8k for DES3 key creation

Hi folks, I have realised that the command line openssl i am using is version 0.9.8g and im pretty sure the version of the SDK (which was a ready compiled one) is version 0.9.8k. I am using the EVP library to generate a key from a password. Would there be any differences in the way the key is

Re: EVP errors!

On Mon, Aug 10, 2009, MusicAndy wrote: The Key looks completely different in command line to my program. Why would this be the case when i am calling the bytes to key function I am using a password of 1 therefore in the C++ do I need to do the same.. do I need to pad out the password

new_certs_dir error

Hello, I have tried ot execute the following command to sign a web server certificate with my CA key: C:\OpenSSL\binopenssl ca -days 3650 -in ./CA/TestCA.csr -cert ./CA/TestCA.crt -keyfile ./CA/TestCA.key -out ./CA/TestServer.crt -config openssl.cfg but I get this error: Using configuration

openssl s_client behind proxy server

Hi All, I am trying to test a web service client (using openSSL for crypto related stuff) with https/SSL. For this, I need to get the server cert. I was able to do this in a desktop machine using the following command:     openssl s_client -connect servername:port and then copying the

RE: openssl s_client behind proxy server

Gordon Brown wrote: However, when I try to do the same on another machine that is behind a proxy server, I noticed that this same command does not work. NAT? Socks proxy? Squid proxy? Transparent proxy? It's not clear what you're talking about. I got an error message like this: Loading

Re: openssl s_client behind proxy server

Hi David, Thanks for the reply. With regard to my questions, as I really don't have deep knowledge about proxy server, so they might be a bit ambiguous.  I think the proxy server I am taking about here is a transparant proxy. It is also the proxy server I have to set in IE browser in order to

RE: openssl s_client behind proxy server

Gordon Brown wrote: The question I am asking here is if the command openssl s_client -connect serverhost:port is supposed to work behind a proxy server? There's no way to answer that without knowing what you mean by proxy server. Your response at one point hints at a NAT-type proxy server

Verifying servers

Hello All, Do the following two perform the same job? 1) SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL) 2) SSL_get_verify_result(ssl) -Rij __ OpenSSL Project http://www.openssl.org User Support

RE: BIO_new_file and OPENSSL_NO_FP_API

From: owner-openssl-us...@openssl.org On Behalf Of Alexander Lamaison Sent: Friday, 07 August, 2009 08:15 2009/8/7 Dave Thompson dave.thomp...@princetonpayments.com: snip: applink I our case (the libssh2 library) we don't have an EXE to compile OpenSSL_Applink into (you cant just compile

RE: new_certs_dir error

From: owner-openssl-us...@openssl.org On Behalf Of Christina GE Sent: Monday, 10 August, 2009 11:47 I have tried ot execute the following command to sign a web server certificate with my CA key: C:\OpenSSL\binopenssl ca -days 3650 -in ./CA/TestCA.csr -cert

Prevent RSA keys from being paged out?

Greetings community, Can anyone tell me if the crypto libraries perform any sort of locking on private key structures to prevent them from being paged out of memory? Or is it required to call mlock/munlock or the equivalent on other platforms explicitly? Thank you in advance for your replies.