Re: TLS version in ssl protocol header

2013-05-02 Thread Jakob Bohm
On 5/2/2013 12:41 AM, Indtiny s wrote: Hi, Acutally I added ECC chiper suitesupport for the openssl 1.0.1c version for my requirement , I tried setting these options in 1.0.1c (SSL_OP_NO_TLSv1_1|SSL_OP_NO___TLSv1|SSL_OP_NO_SSLv3|SSL_OP___NO_SSLv2) . but did not work .. Is it not possible

AES128-ECB

2013-05-02 Thread Raghunandan BN
has anyone tried encrypt/decrypt on a video file (uncompressed yuv/nv12 formats) using AES128 ECB? Thanks, Raghu

Re: Bug(?) in x509 app

2013-05-02 Thread Dr. Stephen Henson
On Wed, May 01, 2013, Salz, Rich wrote: Your suspicion in that old thread was right. Adding this fixed it: --- //projects/shared/openssl-6.101.5.1/akamai/openssl/apps/x509.c 2013-03-01 23:14:34.0 +++ /home/rsalz/p4/misc/openssl/apps/x509.c 2013-03-01

Re: TLS version in ssl protocol header

2013-05-02 Thread Indtiny s
Hi, Actually I did not add my cipher to 1.0.1c such a way that it can be easily added to the new version of openssl . So it may kill my more time if I want to do the same changes in the 1.0.1e . So what do you suggest here ? adding my changes to new openssl or is there any work around ? Content

RE: Bug(?) in x509 app

2013-05-02 Thread Salz, Rich
The bug was in X509_sign_ctx which didn't set the modified flag while the regular X509_sign did. Thanks! -- Principal Security Engineer Akamai Technology Cambridge, MA __ OpenSSL Project

Re: AES128-ECB

2013-05-02 Thread Jakob Bohm
On 5/2/2013 1:32 PM, Raghunandan BN wrote: has anyone tried encrypt/decrypt on a video file (uncompressed yuv/nv12 formats) using AES128 ECB? Thanks, Raghu Some stupip person may have. Anyone familiar with the concepts will already know the entertaining result: The video will be instantly

Re: TLS version in ssl protocol header

2013-05-02 Thread Jakob Bohm
On 5/2/2013 3:39 PM, Indtiny s wrote: Hi, Actually I did not add my cipher to 1.0.1c such a way that it can be easily added to the new version of openssl . So it may kill my more time if I want to do the same changes in the 1.0.1e . So what do you suggest here ? adding my changes to new openssl

Re: TLS version in ssl protocol header

2013-05-02 Thread Dr. Stephen Henson
On Tue, Apr 30, 2013, Indtiny s wrote: Hi, I have compiled libcurl with openssl , When I tried for some TLS handshake . In the Clinet hello . Content Type: Handshake (22)*Version: TLS 1.0 (0x0301)* Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Version: TLS 1.2

Re: TLS version in ssl protocol header

2013-05-02 Thread Dr. Stephen Henson
On Thu, May 02, 2013, Dr. Stephen Henson wrote: On Tue, Apr 30, 2013, Indtiny s wrote: Hi, I have compiled libcurl with openssl , When I tried for some TLS handshake . In the Clinet hello . Content Type: Handshake (22)*Version: TLS 1.0 (0x0301)* Handshake Protocol: Client

RE: Bug(?) in x509 app

2013-05-02 Thread Salz, Rich
Same fix needed in X509CRL_sign_ctx? -- Principal Security Engineer Akamai Technology Cambridge, MA __ OpenSSL Project http://www.openssl.org User Support Mailing List

Getting different/incompatible RSA Signatures

2013-05-02 Thread Patrick Herbst
Hello, I'd like to calculate a digest first, then sign/verify it after the SHA is generated. I thought I could do this by using openssl dgst -sha256 -binary and then put those results through openssl rsautl -sign But the results of do not match that from openssl dgst -sha256 -sign I'm

Getting different/incompatible RSA Signatures

2013-05-02 Thread Patrick Herbst
Hello, I'd like to calculate a digest first, then sign/verify it after the SHA is generated. I thought I could do this by using openssl dgst -sha256 -binary and then put those results through openssl rsautl -sign But the results of do not match that from openssl dgst -sha256 -sign I'm

RE: Getting different/incompatible RSA Signatures

2013-05-02 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Patrick Herbst Sent: Thursday, 02 May, 2013 16:46 I'd like to calculate a digest first, then sign/verify it after the SHA is generated. I thought I could do this by using openssl dgst -sha256 -binary and then put those results through

Re: CApath in the config file

2013-05-02 Thread Phil Pennock
On 2013-04-30 at 01:17 +0200, Arthur Carcano wrote: Good evening everyone, Please excuse me if it has already been asked but is there a way to make openssl s_client use my directory with every certificates (as with -CApath) once and for all ? Export $SSL_CERT_DIR into the environment of the

BN_new/BN_init/BN_free

2013-05-02 Thread Tom marchand
Hi, I am using the following code to create a temporary BIGNUM to hold the result of multiplication: BIGNUM *Res; while(!Done) { Res=BN_new(); BN_init(Res); BN_mul(Res,A,B,Ctx); BN_free(); } This code works with the exception that BN_free() is not

RE: BN_new/BN_init/BN_free

2013-05-02 Thread Jeremy Farrell
From: Tom marchand [mailto:tpmarch...@gmail.com] Sent: Friday, May 03, 2013 2:55 AM I am using the following code to create a temporary BIGNUM to hold the result of multiplication: BIGNUM*Res; while(!Done) { Res=BN_new(); BN_init(Res);

Re: BN_new/BN_init/BN_free

2013-05-02 Thread Tom marchand
Good eye but that's not it. The code below should read BN_free(Res). Thanks. On May 2, 2013, at 10:42 PM, Jeremy Farrell wrote: From: Tom marchand [mailto:tpmarch...@gmail.com] Sent: Friday, May 03, 2013 2:55 AM I am using the following code to create a temporary BIGNUM to hold the