Re: Just testing....

2000-10-26 Thread Jim Grimmett
Right, I've got to the point where I can happily generate keys and sign data. Hurrah! Now all I need to do is find a way to store keys. Looking in the rsa.h file you can see the structure is as follows: struct rsa_st { /* The first parameter is used to pickup errors where

Re: Just testing....

2000-10-26 Thread Rich Salz
I've got to the point where I can happily generate keys and sign data. Hurrah! Now all I need to do is find a way to store keys. look at the d2i and i2d functions declared in rsa.h In general, for any complicated structure you need to serialize (also known as flattening or marshalling

Re: with BIO pairs, how to tell data needs to be read from underlying transport

2000-10-26 Thread Lutz Jaenicke
On Wed, Oct 25, 2000 at 08:00:52PM -0400, Hugh Mandeville wrote: hello, i'm writing an SSL client whose transport isn't socket based, so i am using a BIO pair to manage the I/O. on one end of the BIO pair is the SSL BIO (ssl_bio) and on the other end the Client BIO (client_io).

Re: certificate chaos...

2000-10-26 Thread Michael Sierchio
Ricardo Stella wrote: RTFM :). Seriously, you are being prompted for the cert's passphrase. You need to remove the encrypted passphrase from the cert, then try again. It helps to be precise, though -- it's the private key that is protected with the passphrase -- there's almost never a

Re: HTTPS: errors

2000-10-26 Thread Randall
Hello, We are using OpenSSL version 0.9.5a for a project and have noticed some errors connecting to any of our HTTPS:// sites with IE4.0. We can use the same machine with the same version browser and connect to several other https: sites. One thought was what version of SSL is being sent to

RE: HTTPS: errors

2000-10-26 Thread David Walgamotte
I ran into this on a solaris 2.6 system it is caused by solaris not including a /dev/random and /dev/urandom random number generator. There is a solaris patch called sunsit (i think)that you can download from sunsolve or you can install an open source random number generator (there are

No Subject

2000-10-26 Thread Mick McLane
NowComm, Inc. Mick McLane 1012 Golden Grove Lane Florence, KY 41042 859-371-8784 Voice 859-371-6233 Fax We buy/sell/lease new/used/refurbished computer and networking equipment. Call us if you have surplus equipment you would like to sell. Primary products include: Cisco, Motorola, Paradyne,

A few questions about OpenSSL+its components in my port

2000-10-26 Thread Lord Praetor Satanus of Acheron
OK, a couple of questions 1) I am making a fairly well optimised port of some hashing tools from OpenSSL available as a nice "slick" application for the Macintosh... I was thinking of using some of the graphics from your website. [Any font data/base images you guys might have would be nice

Avoiding man in the middle attacks

2000-10-26 Thread Darío Mariani
Hello: I'm still learning SSL. I still do no understand how does or if SSL/TSL prevents from a "man in the middle" attack. If the certificates are good, no problem. But, how does a client, or what must I do for a client to check the validity of a certificate, even a signed one from a trusted

Re: Avoiding man in the middle attacks

2000-10-26 Thread Michael Sierchio
Darío Mariani wrote: Hello: I'm still learning SSL. I still do no understand how does or if SSL/TSL prevents from a "man in the middle" attack. If the certificates are good, no problem. But, how does a client, or what must I do for a client to check the validity of a certificate, even a

Blowfish with different compilers

2000-10-26 Thread Bill Klein
Hi all, I'm having what seems to be a strange problem. I have code to encrypt some text using blowfish, and corresponding code to decrypt it. This works on compiler A: I can encrypt some text, and then decrypt the encrypted data correctly. This also works on compiler B: again I can have

How to let gcc know the path of the OpenSSL include file

2000-10-26 Thread Wei Qu
Hi, all: I am just start learning OpenSSL and I have just download the OpenSSL and installed it on a Linux(Redhat 6.0) box. The openssl is installed in the default directory (/usr/local/ssl). But it seems that the compiler can not find the include directory of the openssl so it can not find the

Re: Blowfish with different compilers

2000-10-26 Thread Dr S N Henson
Bill Klein wrote: Hi all, I'm having what seems to be a strange problem. I have code to encrypt some text using blowfish, and corresponding code to decrypt it. This works on compiler A: I can encrypt some text, and then decrypt the encrypted data correctly. This also works on compiler B:

Lists working again, Was Re: Just testing....

2000-10-26 Thread Geoff Thorpe
Hi there, There appeared to a glitch on the openssl.org server a day or two ago, showing how "/var" is much like a good compiler - you generally only notice its existence when it's failing. :-) Anyways, mail sent since the list stopped distributing has been buffered and is now spewing out to