Problems using openssl through an ffi.

I'm trying to use openssl library through a foreign function interface (ctypes in Python) but it seems that: BIO_set_nbio and SSL_CTX_set_options/SSL_set_options are not exported in the dynamic library. Is that a bug ? An implementation decision or what? I tried with 0.9.7 and 0.9.8b and neither

Re: AES192 in CTR mode - crypted result looks like ECB

Luc Perthuis wrote: Marty Lamb wrote: How are you deriving CTR from OFB? Well, i imagine the issue is somewhere around there. Unfortunately, i can't figure out where. When i launch './crypt -phrase AES-192-OFB -in small.txt -out small.ssl', i get for exemple: 97 occurrences of 43 f9 e5 0e

Compilation broke with suffix or operands invalid for `bswap

Can somebody please help me? I got this error while building openssl (openssl 9.8.a)for x86 . . . make[2]: Leaving directory `/usr/local/src/openssl-0.9.3a/crypto/md5' making all in crypto/sha... make[2]: Entering directory `/usr/local/src/openssl-0.9.3a/crypto/sha' gcc -I.. -I../../include

Compilation broke with suffix or operands invalid for `bswap

Can somebody please help me? I got this error while building openssl (openssl 9.8.a)for x86 . . . make[2]: Leaving directory `/usr/local/src/openssl-0.9.3a/crypto/md5' making all in crypto/sha... make[2]: Entering directory `/usr/local/src/openssl-0.9.3a/crypto/sha' gcc -I.. -I../../include

openssl.cnf file and custom tag values.

Hi. Is it possible to put custom tags inside the openssl.cnf file? I'm thinking here about generating a certificate request (*.csr) that will store not only standard DN data like country, city, organization, etc. but also some extra stuff. I'm doing it like this: . . commonName = Common

openssl.cnf file and custom tag values.

Hi. Is it possible to put custom tags inside the openssl.cnf file? I'm thinking here about generating a certificate request (*.csr) that will store not only standard DN data like country, city, organization, etc. but also some extra stuff. I'm doing it like this: . . commonName = Common

Compilation broke with suffix or operands invalid for `bswap

Can somebody please help me? I got this error while building openssl (openssl 9.8.a)for oz_x86 processor on HP-UX . . . make[2]: Leaving directory `/usr/local/src/openssl-0.9.3a/crypto/md5' making all in crypto/sha... make[2]: Entering directory `/usr/local/src/openssl-0.9.3a/crypto/sha' gcc -I..

Re: openssl.cnf file and custom tag values.

hi you need to add the entry of your custom tags under crypto/objects.txt and make update the openssl environment. best tanish On 7/27/06, Paweł Tatera [EMAIL PROTECTED] wrote: Hi. Is it possible to put custom tags inside the openssl.cnf file? I'm thinking here about generating a

trying to create a Certificate Authority for use with stunnel- but, it doesn't wanna work.

Hi everybody. I'm trying to set up an OpenSSL Certificate Authority for use with my recently-installed stunnel 7.x installation- only, I'm having a hard time creating the cacert.pem file. It seems that OpenSSL wants an infile when generating this file. Has anybody had experience with this? Can

Re: trying to create a Certificate Authority for use with stunnel- but, it doesn't wanna work.

--- Robert Butler [EMAIL PROTECTED] wrote: Hi everybody. I'm trying to set up an OpenSSL Certificate Authority for use with my recently-installed stunnel 7.x installation- only, I'm having a hard time creating the cacert.pem file. It seems that OpenSSL wants an infile when generating

PHP5, Win Srv 2003, OpenSSL

I have installed the openssl windows binaries. I am using PHP 5 and OpenSSL 0.9.8b. I have moved both .dll files to the c:/windows/system32 directory. I have created a self signed cert and key and placed them where I think they should go (C:\OpenSSL\bin\PEM\demoCA). Every time I uncomment out

Re: trying to create a Certificate Authority for use with stunnel- but, it doesn't wanna work.

Hm, okay, I seem to have successfully generated my Certificate Authority, but now, I'm getting VERIFY ERROR: depth=0, error=unable to get local issuer certificate: /C=US/ST=Florida/O=Health Plan Partners, LLC./OU=Certificate Authority/CN=hpprx.com/[EMAIL PROTECTED] Any ideas as to what I

Re: openssl.cnf file and custom tag values.

On Thu, Jul 27, 2006, Saurabh Arora wrote: hi you need to add the entry of your custom tags under crypto/objects.txt and make update the openssl environment. That would work but creates a non standard version of OpenSSL. An easier way is to add a new object to openssl.cnf. However if

Re: PHP5, Win Srv 2003, OpenSSL

Ever think your problem might be related to windows? ;) - Robert On Thu, 2006-07-27 at 10:15 -0700, dougdrury (sent by Nabble.com) wrote: I have installed the openssl windows binaries. I am using PHP 5 and OpenSSL 0.9.8b. I have moved both .dll files to the c:/windows/system32 directory. I

Re: PHP5, Win Srv 2003, OpenSSL

Thanks for the help. ;0P -- View this message in context: http://www.nabble.com/PHP5%2C-Win-Srv-2003%2C-OpenSSL-tf2010840.html#a5526064 Sent from the OpenSSL - User forum at Nabble.com. __ OpenSSL Project

Revoking a certificate using only a serial number?

Does anyone know how can I revoke a certificate, even if I don't have the certificate file anymore, (using openssl) can I just update the index.txt line associated with this certificate, change the V to R and add the revocation date? If this should work does anyone have already a script that does

Re: PHP5, Win Srv 2003, OpenSSL

Hi Robert, Ever think your problem might be related to windows? ;) - Robert I think it's more likley his issue relates to PHP, in which case he could probally find better help from a PHP specific mailing list like one of these: http://www.php.net/mailing-lists.php For the record, OpenSSL

How to cut down openssl library for embedded system.

Hi all, I'd like to use openssl in embedded system. I learn from the following url that openssl can be trimmed down to 200K. http://groups.google.com/group/mailing.openssl.users/browse_frm/thread/9a5232984fe12dc4/6b593af39bd56d76?q=embeddedrnum=8#6b593af39bd56d76 So I start my own config:

stunnel still acting funky

To all, can somebody please tell me what the hell is going on with my stunnel? I just re-initialized my Certificate Authority, and it's giving me all of these strange messages, like stunnel not verifying any of my certs- what's up with that? Anybody's assistance to help shed some light on this

Norbert Bittner is out of the office.

I will be out of the office starting 07/27/2006 and will not return until 08/07/2006.

Re: How to cut down openssl library for embedded system.

Remove the 'shared' from your Configure line. On 7/27/06, Du Jingwu [EMAIL PROTECTED] wrote: Hi all, I'd like to use openssl in embedded system. I learn from the following url that openssl can be trimmed down to 200K.

RE: How to cut down openssl library for embedded system.

Are you really intending to have the library as a shared object in this embedded system? How many different executables will be linked against it? A more usual approach if you want to minimize size is to do a static build of the OpenSSL library and link against that. Your executable will then