Certificates in a buffer

2009-06-08 Thread Satish Chandra Kilaru
Hi All I have certificate and private key in a buffer (not in a file). How do I pass on these to OpenSSL with out storing in a temp file? In other words are there any APIs that take certificate from a buffer instead of a file? I could only find APIs that expect a file argument or X509* or ASN1 bu

Re: Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Satish Chandra Kilaru
Thank you. I was trying SSL_Shutdown() and creating a new SSL structure. 2nd SSL_Connect() was failing with vague errors. I will try SSL_clear(). --Satish On Mon, Jun 8, 2009 at 1:38 PM, Kyle Hamilton wrote: > It won't matter in that case (the CAs still don't match each other, > unless you add CA

RE: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-08 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Kyle Hamilton > Sent: Monday, 08 June, 2009 13:46 > SSL_ERROR_SYSCALL means that an underlying call to the system failed. > Check errno in that case. > Or in desktop-Windows=Winsock2 WSAGetLastError() . I don't know if windows mobile(?) is the

How to pack RSA structure?

2009-06-08 Thread Ashwin Chandra
I am using the RSA_generate_keys to generate an RSA * structure. I wish to pack or serialize all the information in this structure into an array of bytes and then deserialize it back into an RSA * structure later on. What is the best way to do this? I have a couple of options I have explored:

Re: d2i dumps core Solaris 10 Sparc64

2009-06-08 Thread ronald braswell
Dr. Henson, Thank you Sir. Problem solved. Ron Braswell On Fri, Jun 5, 2009 at 4:30 PM, Dr. Stephen Henson wrote: > On Fri, Jun 05, 2009, ronald braswell wrote: > > > I am getting a core dump from d2i in the following code. The offending > > line is: > > > > *val = meth->i2v( meth, meth->d2i(

Re: SSL_read() returns SSL_ERROR_SYSCALL

2009-06-08 Thread Kyle Hamilton
SSL_ERROR_SYSCALL means that an underlying call to the system failed. Check errno in that case. If you're getting the error on larger pieces of data, instead of smaller pieces of data, it sounds like you're not properly handling the case where your read buffer isn't large enough, needs to be exten

Re: Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Kyle Hamilton
It won't matter in that case (the CAs still don't match each other, unless you add CA1 to the client's trust store), but yes, you can SSL_clear() to make the socket reusable. -Kyle H On Mon, Jun 8, 2009 at 7:40 AM, Satish Chandra Kilaru wrote: > Hi > > I am developing SSL client and server progra

Not so Ancient History

2009-06-08 Thread Paul Rogers
I have a NEED to build up a LIGHTWEIGHT version of an OLD Linux system. It won't be in a perimeter, high threat situation, no real NEED for OpenSSL, but it would be good to have. Here's the outline, kernel-2.2.26, bash-2.04, perl-5.6.1, openssl-0.9.7g, -march=i386. I've successfully installed 0.

Can I reuse a socket connection after SSL connect failed with Unknown CA error

2009-06-08 Thread Satish Chandra Kilaru
Hi I am developing SSL client and server programs. These are NOT general purpose SSL client and server programs. At the beginning of the world they will have a CA1 and certificates signed by CA1. After some time, client is is configured with a new CA called CA2. Now client is trying to connect t

Help with CMS

2009-06-08 Thread carlyoung
Hi all. I would like some help and guidance with using CMS in OpenSSL and general CMS I guess. I just want to use enveloped data to transport an existing cryptogram. The cryptogram was generated using AES-128 CBC with random IV using pre-shared AES keys. I think I need to use "key encryption ke

Re: about the integer decomposition

2009-06-08 Thread Steffen DETTMER
* Stephan V Bechtolsheim wrote on Fri, Jun 05, 2009 at 18:20 -0700: > > This is hardly anything remotely resembling a formal proof, > > of course. But it should give you the basic idea -- it's a > > difficult problem because the numbers are big. > Your argument only applies to "your algorithm". The

How to salt with API

2009-06-08 Thread INRO(Robert Inzinger)
Hi I have a simple Question (I hope): How can I do salting data with the API like in command line -salt switch? Any hint? Regards Robert __ OpenSSL Project http://www.openssl.org User Support Mail

SSL_read() returns SSL_ERROR_SYSCALL

2009-06-08 Thread chithuanand
Hi All, we are working on a client which runs on windows mobile. This client access a webservice using gSOAP generated stubs For secure webservice calls,we are using openssl for communication. My problem is that - while transferring data, SSL_read() always fails (after transferring few KB of data

How to salt with API

2009-06-08 Thread INRO(Robert Inzinger)
Hi I have a simple Question (I hope): How can I do salting data with the API like in command line -salt switch? Any hint? Regards Robert __ OpenSSL Project http://www.openssl.org User Support Ma