Problem after removing memory leak

2008-04-02 Thread Wockenfuß , Frank
Hi all, I have written a class in C++ to easily access functions from OpenSSL from our products. In the constructor of my class I do the following lines of code: threadSetup(); OpenSSL_add_all_digests(); OpenSSL_add_all_ciphers(); OpenSSL_add_all_algorithms();

Re: What scenario will cause openssl can't send client hello request?

2008-04-02 Thread Javen Cao
Dears, I am using libcurl to perform http and https request. We have traced the log from libcurl. It also an debug callback function to openssl.

Re: Problem after removing memory leak

2008-04-02 Thread jimmy bahuleyan
Wockenfuß wrote: Hi all, I have written a class in C++ to easily access functions from OpenSSL from our products. In the constructor of my class I do the following lines of code: threadSetup(); OpenSSL_add_all_digests(); OpenSSL_add_all_ciphers();

openssl performance

2008-04-02 Thread raj H
Hi Experts, OpenSSL 9.8b. We are facing some performance issues with it. I heard that doing session reuse or using some other ciphers can help improve the performance significantly. I would like to know - 1. Is using the session reuse with ssl handshake is advisable? I read somewhere

Openssl compilation on X86_64 for 32bit

2008-04-02 Thread rajagopal.varadharajan
Hi, How can I compile openss for 32bi on X86_64 Redhat AS4? I set the CFLAGS=-m32 but this is not updated in the Makefile, if I modify the Makefile to change -m64 to -m32, then the following libraries are not compiled and throws error #CPUID_OBJ= x86_64cpuid.o #BN_ASM= x86_64-gcc.o #RC4_ENC=

Questions about the openssl req option

2008-04-02 Thread Frank Wendel
Hello, I am developing a program, which uses openssl. It batches the generation of Certificates/Private Key-Pairs. Here an example of a (simple) console call: openssl.exe req -days 3650 -new -keyout example.key -out example.csr -config config.tmp First question: When using the

Re: openssl/crypto/cms/

2008-04-02 Thread Ger Hobbelt
On Wed, Apr 2, 2008 at 5:26 AM, shankar ks [EMAIL PROTECTED] wrote: Hi all, When i refer to the Openssl CVS, I did not find the file related to openssl/crypto/cms/ , All files in this folder are showing the difference , but not the exact files... where can i get the cms files. and one more

reg: custom encryption methods

2008-04-02 Thread rama krishna
Hi all, Iam new to the community.I have a query regarding encyption methods in SSL. Is it possibile to use some custom built encryption algorithm(apart from those it supports) with SSL? If possible, How can we do it? Thanks Ramakrishna.

AW: Problem after removing memory leak

2008-04-02 Thread Wockenfuß , Frank
Thank you for that hint. I will try to rebuild the class as singleton. This could help, but isn't really nice. Best regards Frank Wockenfuß wrote: Hi all, I have written a class in C++ to easily access functions from OpenSSL from our products. In the constructor of my class I do

Re: CMS usage with OpenSSl

2008-04-02 Thread Harald Latzko
Hello Shankar, as a member of the official OFTP2 working group and also a user of openSSL I can tell you that the PKCS#7 support is sufficient for file based operations in this context. If you need any further assistence for OFTP2 specific suppor I suggest you join the working group, whose head

Re: Problem after removing memory leak

2008-04-02 Thread Steffen DETTMER
* Wockenfuß, Frank wrote on Wed, Apr 02, 2008 at 09:07 +0200: Thank you for that hint. I will try to rebuild the class as singleton. This could help, but isn't really nice. I think you'd need multiple classes. For things done once a program life time, a C++ class (singleton) may not be suited,

AW: Problem after removing memory leak

2008-04-02 Thread Wockenfuß , Frank
Steffen, you're right and I did it always like you wrote. I made an static initialisation class. This way I don't get the problems anymore. If I had done a singleton with reference counting it could be possible that someone decrements the count to zero and all things for deinitialisation are

3DES encryption how to

2008-04-02 Thread vaibhav bindroo
Hi all , I am a newbie to OpenSSL . I have written a client and server program using OpenSSL that works properly doin certificate verification , authentication etal . Now i want to encrypt my data on the client side using 3DES algorithm ...i m confused which is the way to go ..using ciphers EVP

Re: 3DES encryption how to

2008-04-02 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 04/02/2008 02:16:19 PM: Hi all , I am a newbie to OpenSSL . I have written a client and server program using OpenSSL that works properly doin certificate verification , authentication etal . Now i want to encrypt my data on the client side using 3DES

How to load a root(CA) certificate from memory?

2008-04-02 Thread geragray
Hi, My server application now reads server and root certificates from files, like that: SSL_CTX_use_certificate_chain_file(ctx, ser_cert); SSL_CTX_use_PrivateKey_file(ctx, ser_key, SSL_FILETYPE_PEM); SSL_CTX_load_verify_locations(ctx, rootcert, NULL); But for security reasons it been decided

Re: CMS usage with OpenSSl

2008-04-02 Thread shankar ks
HI Harald, ThanQ for your information. So implementing of PKCS#7 Api's will serve my purpose .. Ok, at last , a small doubt : I have implemented signing, encryption using RSA_sign EVP_EncryptUpdate RSA_public_encrypt , so where these will differ from the PKCS#7 API's as these PKCS#7 api's also do

How to load a root(CA) certificate from memory?

2008-04-02 Thread GeraGray
Hi, My server application now reads server and root certificates from files, like that: SSL_CTX_use_certificate_chain_file(ctx, ser_cert); SSL_CTX_use_PrivateKey_file(ctx, ser_key, SSL_FILETYPE_PEM); SSL_CTX_load_verify_locations(ctx, rootcert, NULL); But for security reasons it been decided

Looking for Implementors

2008-04-02 Thread Charles Malek
Hi all, I would like if there is interested people who can do implemetations with OpenSSL. I've to run a secure application using SSL, interested people are kindly invited to contact me off-line. Sincerely, Malek

Re: How to load a root(CA) certificate from memory?

2008-04-02 Thread Dr. Stephen Henson
On Wed, Apr 02, 2008, GeraGray wrote: Hi, My server application now reads server and root certificates from files, like that: SSL_CTX_use_certificate_chain_file(ctx, ser_cert); SSL_CTX_use_PrivateKey_file(ctx, ser_key, SSL_FILETYPE_PEM); SSL_CTX_load_verify_locations(ctx, rootcert, NULL);

Re: openssl performance

2008-04-02 Thread raj H
Anybody any comments? On Tue, Apr 1, 2008 at 11:56 PM, raj H [EMAIL PROTECTED] wrote: Hi Experts, OpenSSL 9.8b. We are facing some performance issues with it. I heard that doing session reuse or using some other ciphers can help improve the performance significantly. I would like

RE: openssl performance

2008-04-02 Thread David Schwartz
On Tue, Apr 1, 2008 at 11:56 PM, raj H [EMAIL PROTECTED] wrote: Anybody any comments? It's really hard to help you because your question is so vague. What platform are you using? What performance are you seeing? What performance did you expect? Is the problem with session setup rate or