Re: Microsoft Visual C++

2008-10-10 Thread Thomas J. Hruska
Michael Luich wrote: Hello, I'm trying to compile in Microsoft Visual C++ Express and I'm getting linker errors like: error LNK2019: unresolved external symbol _BIO_gets referenced in function "char * __cdecl sr_encrypt(char *,struct _iobuf *)" (?sr_encrypt@ @YAPADPADPAU_iobuf@@@Z) I got th

RE: [FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

2008-10-10 Thread Dave Thompson
> -Original Message- > From: [EMAIL PROTECTED] On Behalf Of Lutz Jaenicke > Sent: Friday, 10 October, 2008 09:03 > - Forwarded message from "Joy, Byju (GE Healthcare, > consultant)" <[EMAIL PROTECTED]> - > > Subject: DNS Error while doing SSL handshake - bad gethostbyaddr > Date: Fr

bug in gost engine

2008-10-10 Thread Евгений
I found a bug in implementation of gost89 algorithm in gost engine of OpenSSL library. I installed openssl-SNAP-20081006. Simple program shows an error in decryption of buffer encrypted with gost89 algorithm. #include #include static void print_buffer(void *buffer, int len) { u_int

Microsoft Visual C++

2008-10-10 Thread Michael Luich
Hello, I'm trying to compile in Microsoft Visual C++ Express and I'm getting linker errors like: error LNK2019: unresolved external symbol _BIO_gets referenced in function "char * __cdecl sr_encrypt(char *,struct _iobuf *)" (?sr_encrypt@ @YAPADPADPAU_iobuf@@@Z) I got the header files all setu

RE: RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread David Schwartz
> Thanks for the suggestionb but the RAND_poll function already > pulls from the system right after the big #if 0 block as described > below in the stetup for the calls. > > if (advapi) > { > /* > * If it's available, then it's available

RE: non-blocking version of SSL_peek

2008-10-10 Thread David Schwartz
> Actually before closing a TLS connection I need to make sure that no > pending data is present on the that socket. So, calling SSL_peek would > tell if this is the case or not. No, it won't. Okay, you call SSL_peek, and there's no pending data. Now, you're about to call SSL_shutdown. How do yo

[FWD] DNS Error while doing SSL handshake - bad gethostbyaddr

2008-10-10 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from "Joy, Byju (GE Healthcare, consultant)" <[EMAIL PROTECTED]> - Subject: DNS Error while doing SSL handshake - bad gethostbyaddr Date: Fri, 10 Oct 2008 15:00:51 +0200 Thread-Topic: DNS Err

RE: RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread Ray Casterline
Thanks for the suggestionb but the RAND_poll function already pulls from the system right after the big #if 0 block as described below in the stetup for the calls. if (advapi) { /* * If it's available, then it's available in both ANSI

Re: Valid certificate reported as expired

2008-10-10 Thread Andrej Podzimek
Have you enabled CRL checking too? You can also get that if the nextUpdate time in a CRL has passed. That might explain things if the CRL runs for a month or so. WOW! That's it! Thank you so much! CRL expired exactly the day it stopped working. I did not know that a CRL could expire. Never exp

Re: FIPS fail

2008-10-10 Thread Dr. Stephen Henson
On Fri, Oct 10, 2008, joshi chandran wrote: > Hi All, > > Can any body give me small program which set in fips mode and uses non fips > algorithm ,hence fails while running . > Well the standard OpenSSL utility will do that e.g. OPENSSL_FIPS=1 openssl md5 somefile Steve. -- Dr Stephen N. Hen

RE: non-blocking version of SSL_peek

2008-10-10 Thread vne
David Schwartz wrote: > > >> Hi, >> Can anyone tell me if SSL_peek is a blocking or non-blocking call ? > > It can be either. > >> When I use it inside my code, then the program blocks on this fuction >> call >> where there is no data on the socket. > > If you're using blocking socket calls

Re: FIPS fail

2008-10-10 Thread joshi chandran
Hi All, Can any body give me small program which set in fips mode and uses non fips algorithm ,hence fails while running . Thanks Joshi On Thu, Oct 9, 2008 at 5:13 PM, Steve Marquess <[EMAIL PROTECTED]>wrote: > Kyle Hamilton wrote: > >> Okay. Let's see if I can piece together everything I've

RE: Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread David Schwartz
> Hello, > > The Windows NT 4.0 system has the workstation service stopped. > > This causes the following snippet from rand_win.c to return 0 > > if (netstatget(NULL, L"LanmanWorkstation", 0, 0, > &outbuf) == 0) > { > RAND_add(outbuf, si

Issue getting enough entropy on Windows NT 4.0 system

2008-10-10 Thread Ray Casterline
Hello, The Windows NT 4.0 system has the workstation service stopped. This causes the following snippet from rand_win.c to return 0 if (netstatget(NULL, L"LanmanWorkstation", 0, 0, &outbuf) == 0) { RAND_add(outbuf, sizeof(STAT_WORK

Re: Certificate validation problem

2008-10-10 Thread Gerhard Gappmeier
Thanks Dave, today I rechecked the dump of the certificates which cause the problem. The AUTHORITY_KEYID was really missing in them. They were created using some MS .Net stuff. My certificates which I create with openssl work fine. I told the guy who created the wrong certificates about the missi