OpenSSL v0.9.9 connection refused error

2008-11-17 Thread Vishnu Param
I use Linux, and I custom compiled my OpenSSL 0.9.9. This is my BIO_connect code : conn = BIO_new_connect(SERVER ":" PORT); However, I get this error : ** ../client.c:66 Error connecting to remote machine 3084527244:error:0200206F:system library:connect:Connection refused:bss_

RE: Which version of 0.9.9 is stable enough to use?

2008-11-17 Thread Vishnu Param
Steffen wrote : > Hello again, > > just wondering, shouldn't -lssl the first of -l options? sry > forgot in my first mail. Don't know if this makes any change > (especially for the last error) but maybe worth a try? > > oki, > > Steffen Wow, that was great. Solved everything. Thanks Steffen.

Re: openssl-0.9.8-stable-SNAP-20081115 and FIPS

2008-11-17 Thread The Doctor
On Mon, Nov 17, 2008 at 02:33:18PM -0500, Green, Paul wrote: > Dear 'The Doctor', > > I am not on the OpenSSL team so I'm just speaking for myself here. But > I have done work on many other open-source products, so I'm responding > based on my overall experience with open-source development. > >

RE: how to verify if the public_key is valid to decrypt data using RSA_public_decrypt()

2008-11-17 Thread David Schwartz
> I'm using RSA to encrypt/decrypt some text. I encrypt the data using the > private key and then decrypt it using RSA_public_decrypt(). One thing i > noticed was that if the data was not encrypted using the correct > private key > that RSA_public_decrypt() will just set the output to giberish.

AES CTR mode via EVP

2008-11-17 Thread NAGATA Shinya
Hi, I'm using EVP_CipherInit and EVP_Cipher for AES-CBC encrypt/decrypt. I want to use AES-CTR too with EVP functions. But the EVP ctr funtions are undefined by "#if 0" in evp.h since May 2002 (from the start). Is there a plan to implement it in future release? Thanks, -- NAGATA Shinya <[EMAI

how to verify if the public_key is valid to decrypt data using RSA_public_decrypt()

2008-11-17 Thread Shaun R.
I'm using RSA to encrypt/decrypt some text. I encrypt the data using the private key and then decrypt it using RSA_public_decrypt(). One thing i noticed was that if the data was not encrypted using the correct private key that RSA_public_decrypt() will just set the output to giberish. Is ther

Re: Setting up Open-SSL to use a proxy server

2008-11-17 Thread Victor Duchovni
On Mon, Nov 17, 2008 at 08:37:05PM +0530, Sugandh Rakha wrote: > I am using openssl to make HTTPS connection to other-websites. Now I want to > make these connections via a proxy server. > Any ideas? Make the proxied connection, then start TLS on the already connected socket. The OpenSSL library

Setting up Open-SSL to use a proxy server

2008-11-17 Thread Sugandh Rakha
Hi, I am using openssl to make HTTPS connection to other-websites. Now I want to make these connections via a proxy server. Any ideas? regards, Sugandh

Re: Create a new extension

2008-11-17 Thread Patrick Patterson
Hello Omar: On November 16, 2008 07:21:01 pm Massive Cava wrote: > Hi patrick > my goal would be to create an X509 certificate who carry those exstension > that i have described Infact i need the certificate to test an application > that i made in java wich produce SAML Assertion. In this certific

RE: Which version of 0.9.9 is stable enough to use?

2008-11-17 Thread Vishnu Param
Stephen wrote: > Date: Mon, 17 Nov 2008 10:13:05 +0100 > From: [EMAIL PROTECTED] > To: openssl-users@openssl.org > Subject: Re: Which version of 0.9.9 is stable enough to use? > > * Vishnu Param wrote on Mon, Nov 17, 2008 at 16:12 +0800: > > > > s3_enc.c:(.text+0xaeb): undefined reference to `COM

Re: Which version of 0.9.9 is stable enough to use?

2008-11-17 Thread Steffen DETTMER
* Vishnu Param wrote on Mon, Nov 17, 2008 at 16:12 +0800: > > > s3_enc.c:(.text+0xaeb): undefined reference to `COMP_CTX_new' > > I am sure I am pointing to the 0.9.9 libraries/headers, because I > wouldn't get these errors if I wasn't. I think what you were supposed to ensure is that you have the

RE: help

2008-11-17 Thread Ajeet kumar.S
Please take refrence file s_client.c and s_server.c from openssl project in folder apps. Thank you. Regards, --Ajeet Kumar Singh _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of vinni rathore Sent: Monday, November 17, 2008 2:10 PM To: openssl-users@openss

Re: help

2008-11-17 Thread naveen.bn
Hi Vineeta, Thank you for your reply, Now the client code works, I had made a mistake in assigning the created socket to BIO. Thank You naveen. vinni rathore wrote: As u said that if u use already provided certificates then it work fine right... it means that your certificates are not proper

Re: help

2008-11-17 Thread vinni rathore
As u said that if u use already provided certificates then it work fine right... it means that your certificates are not proper at both end.. means may be there is any mismatching of the certificates.. may be u r missing something.. it just my assumptions.. Also u sent me the errors that shows the

RE: Which version of 0.9.9 is stable enough to use?

2008-11-17 Thread Vishnu Param
Kyle H wrote : > Make sure that the OpenSSL includes that your program is compiled with > are the ones from the 0.9.9 snapshot you built, not the ones from > /usr/include or /usr/include/openssl. > > -Kyle H > > On Sun, Nov 16, 2008 at 12:11 PM, Vishnu Param <[EMAIL PROTECTED]> wrote: > > I have