OpenSSL on IBMi

2010-04-04 Thread Pankaj Aggarwal
Could somebody point me to the latest patch available (with instructions) for compiling openssl on IBMi (OS/400). Pankaj __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
http://rt.openssl.org/Ticket/Display.html?id=1565user=guestpass=guest Only for 0.9.8e, though. G. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Pankaj Aggarwal Sent: 04 April 2010 10:05 To: openssl-users@openssl.org

Re: OpenSSL on IBMi

2010-04-04 Thread Pankaj Aggarwal
I used the patch on openssl 0.9.8e. on firing ./Configure OS400-icc I am getting the following error: qsh: 001-0014 Command /home/qsecofr/openssl/QAPTL/GMAKE not found. GMAKE: *** [links] Error 1 $ I have set the PATH environment variable as follows :

RE: OpenSSL on IBMi

2010-04-04 Thread Shaw Graham George
You should read the detail of the readme files for this and maybe previous ports at rt.openssl.org. Firstly, for this port to work, you need to install the IBM AS/400 GNU utilities - it doesn't look like you have. I'm not sure of their current status, but at the time these were unsupported

Re: handshake failure / SSL3_GET_CLIENT_HELLO:no shared cipher s3_srvr

2010-04-04 Thread Götz Reinicke - IT Koordinator
Am 01.04.10 23:09, schrieb Victor Duchovni: On Thu, Apr 01, 2010 at 10:48:56PM +0200, G??tz Reinicke - IT Koordinator wrote: Hi, how do I check this? On both servers I do have installed the same client and server software and performing a secured connection from both systems to the

setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
hello, is there a way i can set a timeout for an SSL_accept, either if the handshake does not complete within X seconds (prefered), or even if it is waiting on a blocking socket and no data comes in for X seconds. I know i can use alarms, but i was wondering (hoping), there was a mechanism

Re: setting an SSL_accept(...) timeout

2010-04-04 Thread Dr. Stephen Henson
On Sun, Apr 04, 2010, Adam Grossman wrote: hello, is there a way i can set a timeout for an SSL_accept, either if the handshake does not complete within X seconds (prefered), or even if it is waiting on a blocking socket and no data comes in for X seconds. I know i can use alarms, but i

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
Peter-Michael, thanks for the info, but this is on linux. -=- adam grossman On Sun, 2010-04-04 at 19:40 +0200, PMHager wrote: Adam Grossman wrote: is there a way i can set a timeout for an SSL_accept, either if the handshake does not complete within X seconds (prefered), or even if it is

How to passively obtain the server certificate from a TLS connection

2010-04-04 Thread Ciprian Dorin, Craciun
Hello all! (I'm a new member of this mailing list, so if the answer to my question is already somewhere in the archives please point me there.) (I've done some searching and couldn't find anything useful.) In the context of the Perspectives project (

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread PMHager
Adam Grossman wrote: thanks for the info, but this is on linux. The socket interface is almost the same on linux: #include sys/socket.h int hSocket; int dwTimeout=1000; // milliseconds setsockopt(hSocket,SOL_SOCKET,SO_RCVTIMEO,(void*)dwTimeout,sizeof dwTimeout);

RE: setting an SSL_accept(...) timeout

2010-04-04 Thread Adam Grossman
i have done networking programming for a while, and i have never run across that before. thank you so much, you have just saved me a lot of development time! -=- adam grossman On Sun, 2010-04-04 at 22:34 +0200, PMHager wrote: Adam Grossman wrote: thanks for the info, but this is on linux.

Decrypting with key and initialization vector don't decrypt the first 8 bytes?

2010-04-04 Thread Alfredo Belmonti
Hello everybody and thank you all for reading. I'm doing some experiments with blowfish and triple DES ciphers. I'm encrypting some text files; using a password to generate the key and the IV; while using the -p option to let openssl show me the salt, the key and the IV onscreen. As far as I've