opensll-0.9.8q.tar.gz corrupted.

2010-12-03 Thread Brent Evans
It would appear that the opensll-0.9.8q.tar.gz file is corrupt. un-tar fails. Cheers, Brent

Re: opensll-0.9.8q.tar.gz corrupted.

2010-12-03 Thread james
The tarball doesn't appear to be corrupted for me, what errors are you getting?Under Redhat EL4 and EL5 VMs,tar zxf openssl-0.9.8q.tar.gz, works perfectly fine for me. Original Message From: Brent Evans brent.ev...@gmail.comTo: openssl-users@openssl.orgSent: Fri, Dec 3, 2010, 8:48

Re: opensll-0.9.8q.tar.gz corrupted.

2010-12-03 Thread Mounir IDRASSI
Hi, There is no problem with the archive. If you are under Windows, use the latest 7zip (version 9.20). You will get a warning but the decompression is OK. The previous version of 7zip had a limitation for tar support. Cheers, -- Mounir IDRASSI IDRIX http://www.idrix.fr On 12/3/2010 2:28

RE: OpenSSL 1.0.0c released

2010-12-03 Thread Erik Tkal
That's a pretty bold statement and doesn't always apply in a product environment. I have not deployed 1.0.0b (because of the pending issues); I'm still at 1.0.0a and have to decide whether to patch the vulnerabilities, or risk updating OpenSSL completely and retesting all of its consumers.

Re: OpenSSL 1.0.0c released

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 09:50:49AM -0500, Erik Tkal wrote: That's a pretty bold statement and doesn't always apply in a product environment. I have a production environment. The non-security issues in the unpatched 1.0.0b release create substantial interoperability issues with servers and

RE: Private Key from Windows Cert Store

2010-12-03 Thread Fili, Tom
I rebuild OpenSSL and didn't get a capi.dll. I'm using 0.9.8k. Is there something I'm missing in the build process that I need to change to get the engines to compiled in. From what I've read it looks like it builds these engines into the openssl dlls. The following returns still NULL for me.

Re: OpenSSL 1.0.0c released

2010-12-03 Thread Marcus Carey
Victor I am still have issues with the default ECDH parameters in 1.0.0c. The key generation with NIST Prime-Curve P-192 crashes. static void nist_cp_bn(BN_ULONG *buf, BN_ULONG *a, int top) { int i; BN_ULONG *_tmp1 = (buf), *_tmp2 = (a); for (i = (top); i != 0; i--) *_tmp1++ =

RE: Private Key from Windows Cert Store

2010-12-03 Thread Fili, Tom
Ok, so I realized if I run Configure with no-static-engine I'll get the separate dlls. These are the commands I run C:\Documents and Settings\tfili\Desktop\openssl-0.9.8kperl Configure VC-WIN32 --prefix=c:\temp\openssl no-static-engine ms\do_ms.bat nmake -f ms\ntdll.mak Unfortunately I now get

Re: Private Key from Windows Cert Store

2010-12-03 Thread Dr. Stephen Henson
On Fri, Dec 03, 2010, Fili, Tom wrote: I rebuild OpenSSL and didn't get a capi.dll. I'm using 0.9.8k. Is there something I'm missing in the build process that I need to change to get the engines to compiled in. From what I've read it looks like it builds these engines into the openssl dlls.

Re: Private Key from Windows Cert Store

2010-12-03 Thread Mounir IDRASSI
Hi, In order to enable the CAPI engine, you have to use the enable-capieng switch : this will compile the CAPI engine statically inside OpenSSL. Here is a example of configure command line for this : perl Configure VC-WIN32 --prefix=c:/openssl enable-capieng I hope this will help. Cheers, --

nist_cp_bn issue

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 09:10:41AM -0800, Marcus Carey wrote: I am still have issues with the default ECDH parameters in 1.0.0c. kEECDH handshakes appear to work. The key generation with NIST Prime-Curve P-192 crashes. How do you reproduce this? static void nist_cp_bn(BN_ULONG *buf,

Remove me please

2010-12-03 Thread Richard Buskirk
Sorry to use this list for this. But I have tried every way I know to get off the list suggestions?? -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Mounir IDRASSI Sent: Friday, December 03, 2010 1:04 PM To:

Re: nist_cp_bn issue

2010-12-03 Thread Marcus Carey
openssl ecdhtest openssl s_server Must use the -no_ecdhe flag. openssl.exe s_server -no_ecdhe ecdhetest.exe has the same access violation Unhandled exception at 0x004222f6 in ecdhtest.exe: 0xC005: Access violation reading location 0x0001 openssl.exe!nist_cp_bn(unsigned int *

RE: Remove me please

2010-12-03 Thread Erik Tkal
Go to http://www.openssl.org/support/community.html Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Richard Buskirk Sent: Friday, December

RE: Private Key from Windows Cert Store

2010-12-03 Thread Fili, Tom
Ok, I got it loading. Thanks. I'm still have an issue, which would stem from my lack of understanding of OpenSSL. This seems to succeed in giving me the private key. ENGINE_load_builtin_engines(); if( ENGINE *e = ENGINE_by_id(capi) ) { if( ENGINE_init(e) ) {

Re: nist_cp_bn issue

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 12:06:22PM -0800, Marcus Carey wrote: openssl ecdhtest What is openssl ecdhtest? Must use the -no_ecdhe flag. openssl.exe s_server -no_ecdhe With what cert/key? Any other options? What client invocation? ... openssl.exe!nist_cp_bn(unsigned int * buf=0x00acea80,

Unknown SSL protocol when accessing server from AIX host

2010-12-03 Thread Alona Rossen
Hello, We use openssl with libcurl to programmatically access, upload to and download from various URL's using https, ftps, and smtps protocols. We can successfully perform our tasks on UNIX/Linux and Windows boxes, including Solaris on SPARC and Intel, Linux, etc. However, we consistently

Unknown SSL protocol when accessing server from AIX host

2010-12-03 Thread Alona Rossen
Hello, We use openssl with libcurl to programmatically access, upload to and download from various URL's using https, ftps, and smtps protocols. We can successfully perform our tasks on  UNIX/Linux and Windows boxes, including Solaris on SPARC and Intel, Linux, etc. However, we consistently

CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-03 Thread Maxim Kammerer
I am implementing a two-party messages exchange system based on CMS for Liberté Linux (http://dee.su/liberte). The command-line argument -md to openssl cms -sign_receipt is apparently ignored, and the default digest algorithm (SHA-1 in my tests) is used instead. In addition, the -noattr argument

Re: nist_cp_bn issue

2010-12-03 Thread Marcus Carey
I used openssl to create a server certificate and key. The s_server application never loads because the error occurs using the default ECDH parameters. Then I ran the ecdhtest application to see if there was a problem. ecdhtest.exe is the test application in the crypto/ecdh directory for

problem probably simply but not for me

2010-12-03 Thread fakessh @
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 how are you. me that I will begin to prepare for Christmas,... conserne in the code, I brought a lot of code changes is a bit more solid at the moment especially the server that I think is fulfilling its function. I work on the client and I can not

Re: nist_cp_bn issue

2010-12-03 Thread Mounir IDRASSI
Hi, What compiler are you using under Windows? From my side, I have compiled and tested binaries produced by VC++ 2008 SP1 (cl version 15.00.30729.01) and the latest standalone native MinGW (gcc 4.5.0), and in both cases everything is OK (no crash and all tests succeed) -- Mounir IDRASSI

Re: nist_cp_bn issue

2010-12-03 Thread Victor Duchovni
On Fri, Dec 03, 2010 at 01:43:17PM -0500, Victor Duchovni wrote: I don't understand the code in BN_nist_mod_192(), which calls nist_cp_bn(), it has rather obscure pointer manipulation: /* * we need 'if (carry==0 || result=modulus) result-=modulus;' * as comparison