Re: Question about GOST engine in Openssl 1.0

On 2009.05.05 at 13:47:50 +0200, Dr. Stephen Henson wrote: Yes it's just a case of hacking util/mkmf.pl and/or some Makefiles. If OpenSSL is compiled without shared library engines (enable-static-engine) in the command line you *do* get the GOST engine under VC++. And I think that static

BIO_new_file() Usage Doesn't Use BIO_METHOD's ctrl Function Pointer

Hi, Is there a reason why BIO_new_file() doesn't use the BIO_METHOD ctrl function pointer using BIO_C_SET_FILENAME to open a file? Many OpenSSL functions in the system call BIO_new_file() directly to create or open a file, there's no way for an application to hook into opening a file in all

Re: I want you to do my homework for me.

Mods: Any way there can be some banning happening soon? On Tue, May 5, 2009 at 11:39 PM, Miguel Ghobangieno mikee...@yahoo.comwrote: Are damned bridges a reference to the punk/ska/hacker/liberal movie The Matrix (TM), where a liberal white male, along with women, minorities, and

RE: error while executing make command

Hey Guys Somebody help please Who can I turn off ANSI mode? Regards Neerav From: Neerav Singh Sent: Monday, May 04, 2009 9:52 AM To: 'openssl-users@openssl.org' Subject: RE: error while executing make command Does anyone have any idea on this? Please

Re: I want you to do my homework for me.

David Loman wrote: Mods: Any way there can be some banning happening soon? Best way to end discussions like this one is to * step back * ignore what was written (annoying or offensive or not) * just do not write any more statements * enjoy doing something more useful Please understand that the

[OPENSSL In MAC OS]The SSL Format Issue

I port the supplicant with openssl 0.9.8k. It will show that SSL3:server alert:decode error after the supplicant send the client hello message to server. I change to port the supplicatn with openssl 0.9.8i, it can authentication success. I don't know what's happen. Could you help me resolve it?

Re: I want you to do my homework for me.

* David Loman wrote on Wed, May 06, 2009 at 11:21 +0200: Mods: Any way there can be some banning happening soon? Don't feed the trolls. oki, Steffen ---[ end of message ]-8===

Re: Openssl Memory leak

Okey. Now i got no more memory leaks when I put the SSL code in main. However, if i try to put the exact same code in a thread the memory leak is back. Here is the essential code I'm using; void lcserver::start() { SSL_library_init(); SSL_load_error_strings(); method = SSLv23_server_method();

Loading a public RSA key from a DER file

Dear all, I am working on a project which has to encrypt datas thanks to an RSA public key stored in DER format. I tried to write a test program using the d2i_RSAPublicKey, but the function returns NULL. However I'm pretty sure the file is correct, since I could use openssl command-line to

Re: error while executing make command

On Wed, May 6, 2009 at 11:38 AM, Neerav Singh neerav.si...@tatatel.co.in wrote: Hey Guys Somebody help please Who can I turn off ANSI mode? Neerav, this issue is veering off OpenSSL and into the system internals arena. With this kind of thing (access rights for dev tools like 'ar', etc.

Make test fails while building 64bit openssl 9.8f

Hi, I tried to build the 64 bit of openssl 9.8f. Make was successfully but when i done make test , it fails . Here is the failure message $sh testss make a certificate request using 'req' rsa Generating a 512 bit RSA private key . . writing new private key

Re: Loading a public RSA key from a DER file

Hi, Your file pk.der contains a public key encoded as a SubjectPublicKeyInfo and NOT as a PKCS#1 encoding. So, you should use the function d2i_RSA_PUBKEY instead of d2i_RSAPublicKey in order to read the public key. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr Dear all, I am working on

Re: Loading a public RSA key from a DER file

Hi Mounir, Your file pk.der contains a public key encoded as a SubjectPublicKeyInfo and NOT as a PKCS#1 encoding. So, you should use the function d2i_RSA_PUBKEY instead of d2i_RSAPublicKey in order to read the public key. Ah I thought I tried this one but apparently I did not. It works

where i can see the code of BN_mod_exp?

Hi, I know the BN_mod_exp is optimized to compute the exponential and modular combinations (it's what i have read!) i'm interested to see the algorytm instead it: becouse i have to calculate a^b^c^d..%mod (or some thing like this), at the time i iterate BN_exp to calculate one single exponent end

Re: where i can see the code of BN_mod_exp?

On Wed May 6 2009, Antonio Ragagnin wrote: Hi, I know the BN_mod_exp is optimized to compute the exponential and modular combinations (it's what i have read!) i'm interested to see the algorytm instead it: becouse i have to calculate a^b^c^d..%mod (or some thing like this), at the time i

Re: where i can see the code of BN_mod_exp?

On Wed May 6 2009, Michael S. Zick wrote: On Wed May 6 2009, Antonio Ragagnin wrote: Hi, I know the BN_mod_exp is optimized to compute the exponential and modular combinations (it's what i have read!) i'm interested to see the algorytm instead it: becouse i have to calculate

DTLS: openssl s_client broken in 1.0.0-beta2 due to lack of ECDHE support

I built a vanilla openssl-1.0.0-beta2 and tried to run ./openssl s_client -dtls1 against ./openssl s_server -dtls1 To my disappointment it did not work properly. The client reported 3084506760:error:14106044:SSL routines:DTLS1_SEND_CLIENT_KEY_EXCHANGE:internal error:d1_clnt.c:976: The

Re: where i can see the code of BN_mod_exp?

thanks a lot!! 2009/5/6, Michael S. Zick open...@morethan.org: On Wed May 6 2009, Michael S. Zick wrote: On Wed May 6 2009, Antonio Ragagnin wrote: Hi, I know the BN_mod_exp is optimized to compute the exponential and modular combinations (it's what i have read!) i'm interested to see

Does AES_cbc_encrypt remove PKCS5 padding

Hi, Does AES_cbc_encrypt add or remove the padding, if I provide an un-padded data in the multiples of 16 bytes? I wrote a piece code where I am manually adding the padding but when I decrypt using AES_cbc_encrypt the padding is automatically removed. -- _/\_ With Regards SB Angel Warrior

Re: Does AES_cbc_encrypt remove PKCS5 padding

On Wed, May 06, 2009, AngelWarrior wrote: Hi, Does AES_cbc_encrypt add or remove the padding, if I provide an un-padded data in the multiples of 16 bytes? I wrote a piece code where I am manually adding the padding but when I decrypt using AES_cbc_encrypt the padding is automatically

Re: Does AES_cbc_encrypt remove PKCS5 padding

But I am experimenting with the code which is actually removing the padding by calling AES_cbc_encrypt(unsigned char*)input, (unsigned char*)(output), (const unsigned long)(length), ks, (unsigned char*)ivec, AES_DECRYPT). What is EVP layer? On Wed, May 6, 2009 at 3:45 PM,

Re: DTLS: openssl s_client broken in 1.0.0-beta2 due to lack of ECDHE support

DTLS has always been one of the red-headed stepchildren of OpenSSL. It has never received the love that the rest of the codebase has, and it needs a real maintainer. I agree, s_client and s_server are reference apps. On the -users list, we even recommend that people use them when they're trying

would anyone be interested in the output from a

failed OpenSSH compile using the new beta2 version of openssl? I had to punt back to version *k David C. McCall/UNIX-Linux/SysAdmin SSU - NASA/EPO http://epo.sonoma.edu/group.php 707-540-1692 These words travel almost 50,000miles to reach you, sorry for the delay

Re: Question about GOST engine in Openssl 1.0

Thanks, static compilation works fine. And one remark. This file engines/ccgost/readme.gost has an example configuration for GOST engine [gost_section] engine_id = gost dynamic_path = /usr/lib/ssl/engines/libgost.so default_algorithms = ALL crypt_params =