Re: test vectors for CTR DRBG

2011-11-07 Thread Jiri Hladky
Hi Julien, thanks for the hint, I'm going to try it! Sorry for the long delay in response, I was quite sometime off-line and now I'm going through all the e-mails... Thanks! Jirka On Wed, Oct 19, 2011 at 7:06 PM, nimou rild...@gmail.com wrote: Jiri Hladky-2 wrote: Hello, I'm

Re: Support for ECDH-RSA cipher suites in 0.9.8

2011-11-07 Thread Bodo Moeller
On Fri, Nov 4, 2011 at 5:23 PM, John Foley fol...@cisco.com wrote: None of the ECDH-RSA cipher suites appear to work in 0.9.8r. Yet they work in 1.0.0. Is this expected? Yes -- the OpenSSL 0.9.8 branch includes basic support for elliptic-curve cryptography, but TLS integration wasn't

Re: help please

2011-11-07 Thread John Doe
From: Abdulhadi Abulzahab abed-scorp...@hotmail.com 1 - I want to use the sha1 command but I need the result to go into txt file Search for any dos/windows shell tutorial... And then search about redirections ( file). 2 - I want to create a simple batch file  contains the sha1 command I

Re: decrypt certificates signature

2011-11-07 Thread Maurice Mahieu
Thanks for the answer, I mean the first case, to verify the signature. As I understand the signature is the encyrpted digest of the certificate, I was wondering if it is possible to decrypt the digest using the public key of the issuer. with kind regards, Maurice On 11/07/2011 01:51 AM,

Re: decrypt certificates signature

2011-11-07 Thread Jeffrey Walton
Hi Maurice, On Mon, Nov 7, 2011 at 8:01 AM, Maurice Mahieu mauri...@chello.nl wrote: I mean the first case, to verify the signature. As I  understand the signature is the encyrpted digest of the certificate, I was wondering if it is possible to decrypt the digest using the public key of the

Re: decrypt certificates signature

2011-11-07 Thread Jakob Bohm
For the RSA algorithm ONLY: The signature is the digest (plus some clever padding etc.) encrypted with the private key. RSA verification starts with decrypting the signature with the public key, then comparing the result to the expected padded value. For most other algorithms (such as DSA,

group certificate

2011-11-07 Thread prabhu kalyan rout
Hi all, I need to setup a testCA which will be able to issue group certificate. Can somebody tell me what will be the openssl commands or steps i need to do. Thanks Regards __ OpenSSL Project

Re: Difference b/w TLS Connection and TLS Session

2011-11-07 Thread Mr.Rout
Thanks Wim Richard. But still i donot understand why I am seeing Encryption Alert ? My TLS Client is 10.220.4.50 My TLS Server is 10.204.4.69. If you see the packets #16,#31,#50 then an Encryption Alert is being sent by TLS Client. As of this Connection is getting closed and new handshake

Re: decrypt certificates signature

2011-11-07 Thread Dr. Stephen Henson
On Sun, Nov 06, 2011, Maurice Mahieu wrote: I want to know if it is possible to decrypt the signature from a server certicate with the issuers public key using openssl. An additional data point to the comprehensive replies you've received so far. If you literally want to decrypt the

RE: Open SSL API's Support For IPv6.

2011-11-07 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Akanksha Shukla Sent: Thursday, 03 November, 2011 11:25 I want to summarize snip I am using the SSL API's for client application to get connect to server and that worked fine over IPv4. Now my requirement is to

RE: help please: commandline DOS basics

2011-11-07 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Abdulhadi Abulzahab Sent: Saturday, 05 November, 2011 12:32 1 - I want to use the sha1 command but I need the result to go into txt file not only to appear on the screen otherwise I need to print the result of

RE: Difference b/w TLS Connection and TLS Session

2011-11-07 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Wim Lewis Sent: Friday, 04 November, 2011 15:44 On 4 Nov 2011, at 7:12 AM, Mr.Rout wrote: Can any body please let me know what is the difference between TLS Connection and TLS Session ? If a client makes a connection to a server it has

Fwd: OpenSSL Mailing List Question

2011-11-07 Thread Curt Sampson
Folks, I'm developing a distributed application for which I'm currently planning to use OpenSSL to handle the security needs, which include a (privately-run) PKI. I can't divulge the details of the application, but this vendor's systems would be installed at individual client sites as well as