Re: RNGs - Use input from your sound card!

1999-10-16 Thread Terrell Larson

commercial.

On Sat, 16 Oct 1999 20:18:35 -0400, Michael R. Batchelor wrote:

>>Would it make any sense to build a card?  
>
>
>As a commercial product or a hobby project?
>
>MB
>
>__
>OpenSSL Project http://www.openssl.org
>User Support Mailing List[EMAIL PROTECTED]
>Automated List Manager   [EMAIL PROTECTED]


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: RNGs - Use input from your sound card!

1999-10-16 Thread Michael R. Batchelor

>Would it make any sense to build a card?  


As a commercial product or a hobby project?

MB

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: RNGs - Use input from your sound card!

1999-10-16 Thread Ben Laurie

Terrell Larson wrote:
> 
> Would it make any sense to build a card?

Somebody already has, but I keep forgetting who.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

"My grandfather once told me that there are two kinds of people: those
who work and those who take the credit. He told me to try to be in the
first group; there was less competition there."
 - Indira Gandhi
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: RNGs - Use input from your sound card!

1999-10-16 Thread Terrell Larson

Would it make any sense to build a card?  

On Sat, 16 Oct 1999 11:25:14 -0400, Michael R. Batchelor wrote:

>>My point is not that it doesn't yield useful randomness but that the
>>assertion that it is _completely unpredictable_ is false. This is, of
>>course, quite different to the assertion that it is not completely
>>predictable, with which I agree (over any finite time period).
>
>
>But I think most of this is moot (despite the fact that I've contributed
>to the thread) because we're trying to devise something the average
>person can utilize. While it's true that I've built Geiger counters, and
>I've built random noise generators with diodes in avalanche, and I've
>had the guts of scores of computers strung across workbenches connected
>to lights, the hot water heater, ham radios, motion detectors, model
>rocket launchers, and a lot of other things, most people aren't
>interested in cobbling together some device. What's needed for the
>working public is to use some existing device which is "good enough".
>
>MB
>
>__
>OpenSSL Project http://www.openssl.org
>User Support Mailing List[EMAIL PROTECTED]
>Automated List Manager   [EMAIL PROTECTED]


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: Net:SSLeay on HPUX 10.20 - installation problem

1999-10-16 Thread Igor I. Shulz

> > My environment:
> > System: HP-UX palm B.10.20 A 9000/879 1274075342 two-user license
> > open-ssl: 0.9.4 - installed successfully - Apache+mod_ssl works fine
with it
> > Net::SSLeay 1.0.5
> > gcc: v.2.8.1

Pardon me for boring...
I've managed to compile NetSSLeay. Having Makefile created (perl
Makefile.PL) I replaced
LINKTYPE= dynamic with LINKTYPE = static
Pack was compiled and installed successfully. Than I've tried to make test.
It complained that it does not see libperl.a library and I replaced
libperl.a with libperl.sl in Makefile.aperl file. After all I get the next
output from make test:

# make test
make -f Makefile.aperl perl
`perl' is up to date.
PERL_DL_NONLAZY=1
./perl -Iblib/arch -Iblib/lib -I/opt/perl5/lib/5.00503/PA-RISC2.0 -I/opt/per
l5/lib/5.00503 test.pl
1..16
ok 1
ok 2
Spawning a test server on port 1212, pid=796...
Can't locate loadable object for module Net::SSLeay in @INC (@INC contains:
blib/arch blib/lib /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .)
at examples/sslcat.pl line 13
BEGIN failed--compilation aborted at examples/sslcat.pl line 13.
*** not ok 3

Can't locate loadable object for module Net::SSLeay in @INC (@INC contains:
blib/arch blib/lib /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .)
at examples/minicli.pl line 5
BEGIN failed--compilation aborted at examples/minicli.pl line 5.
*** not ok 4

Can't locate loadable object for module Net::SSLeay in @INC (@INC contains:
blib/arch blib/lib /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .)
at examples/callback.pl line 11
BEGIN failed--compilation aborted at examples/callback.pl line 11.
*** not ok 5

Sending 1 MB over localhost, may take a while (and some VM)...
Can't locate loadable object for module Net::SSLeay in @INC (@INC contains:
blib/arch blib/lib /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .)
at examples/bulk.pl line 7
BEGIN failed--compilation aborted at examples/bulk.pl line 7.
...took 1 secs (1024 KB/s)
*** not ok 6

Sending 1 MB over pipes, may take a while (and some VM)...
Can't locate loadable object for module Net::SSLeay in @INC (@INC contains:
blib/arch blib/lib /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503 /opt/perl5/lib/5.00503/PA-RISC2.0
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .
/opt/perl5/lib/5.00503/PA-RISC2.0 /opt/perl5/lib/5.00503
/opt/perl5/lib/site_perl/5.005/PA-RISC2.0 /opt/perl5/lib/site_perl/5.005 .)
at examples/stdio_bulk.pl line 8
BEGIN failed--compilation aborted at examples/stdio_bulk.pl line 8.
...took 1 secs (1024 KB/s)
*** not ok 7

Now about to contact external sites...
www.bacus.pt
www.openssl.org
www.apache-ssl.org
www.cdw.com
www.rsa.com
developer.netscape.com
banking.wellsfargo.com
secure.worldgaming.net
www.engelschall.com
You have 5 seconds of time to hit Ctrl-C if you do not like this.
*** 5 tests failed already.
Following tests _will_ fail if you do not have network
connectivity (or if the servers are down or have changed).
ok 8 www.bacus.pt
ok 9 www.openssl.org (Apache/1

Certificates.

1999-10-16 Thread Pedro Boavida


Hi. I'm having some troubles doing openssl s_connect...
I've already put the remote certificate I'm trying to use in
/usr/local/ssl/certs but the following error apeears:

verify error:num=20:unable to get local issuer certificate
verify return:1
(...)
verify error:num=21:unable to verify the first certificate
verify return:1

What am I doing wrong ?

Regards,

./Pedro Boavida

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: RNGs - Use input from your sound card!

1999-10-16 Thread Michael R. Batchelor

>My point is not that it doesn't yield useful randomness but that the
>assertion that it is _completely unpredictable_ is false. This is, of
>course, quite different to the assertion that it is not completely
>predictable, with which I agree (over any finite time period).


But I think most of this is moot (despite the fact that I've contributed
to the thread) because we're trying to devise something the average
person can utilize. While it's true that I've built Geiger counters, and
I've built random noise generators with diodes in avalanche, and I've
had the guts of scores of computers strung across workbenches connected
to lights, the hot water heater, ham radios, motion detectors, model
rocket launchers, and a lot of other things, most people aren't
interested in cobbling together some device. What's needed for the
working public is to use some existing device which is "good enough".

MB

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



VC++ project files

1999-10-16 Thread Andrew W. Gray

OK guys - (and gals)
I actually had this done a couple weeks ago but had to run off to
Saudi Arabia and forgot to post this to the list.

Since people were asking I put the latest ones out at 

http://www.iconsinc.com/~agray/ossldev/

This is based upon the 0.9.4 release.  The latest snap will not
correctly build as new files have been added.  The easiest way to
migrate to a new version is to build the snap from commandline and
also 0.9.4 from command line then diff the obj files in the two
directories to see what new source files have been added

These are based upon all of the ones i released for SSLeay 6-9

I still have the SSLeay 6 thru 9 project/workspace  files as well that i did
while at the osf - but they arent on the site.  If you need these drop
me a note and i'll have someone dig them out.

These files include 1 workspace and 50+ projects.  Everything is built
- i.e. tests, apps, openssl, etc. and each is reflected within its own
project.  All of the projects are further subdivided within developer
studio to reflecxt their relevent contents.  That is - libeay for
example has all of its code contained within various folders within
that workspace.  The asn1 code is in the asn1 folder, bignumber in bn
folder, x509 in the x509 folder, etc, etcc, etc... This makes it much
easier for manhaging a build of specific portions of the library - as
in building only the sha1 routines.  In addition the openssl monolith
is built as well

As mentioned all of the relevent individual executables are included
in the workspace as well.  If you dont need specific pieces just
unload the project.

Andrew 
[EMAIL PROTECTED]


RELEASE NOTES:





Installation:
1. Extract openssl-0.9.4.tar.gz as you normally would.

2. Extract VCopenssl.zip targetting the openssl-0.9.4 (or whatever name it's in)
directory.  This will create another directory named "msvc" at the top 
of the SSLeay directory tree.  

3. Open a command prompt and run "perl Configure VC-WIN32" as per the 
instructions in the $openssl-0.9.4_ROOT/Install.w32 file.  Then run "ms\do_ms.bat"

4. Return to your command prompt and from the openssl root directory run:
"perl msvc\doinc.pl"  This is a quick hack that creates the output
directories and copies the header files much as what ntdll.mak does at
the start of a command linebuild.  All of the dependencies for header
file locations are built into the developer studio workspace.

5. Open the developer studio workspace - openssl-0.9.4\msvc\openssl.dsw
This will open up a Microsoft Developer Studio Workspace containing 50
projects.  Dependancies are built into the workspace -
i.e. libeay32.dll will be built automatically before asn1parse.
Executables are both built independently and also as openssl.exe.

6.VERY IMPORTANT - BEFORE ATTEMPTING A BUILD
there is a minor cast error in crypto\bn\bn_div.c.  Replace line 241
which reads:

q=BN_ULLONG)n0)<

Things that typically cause errors:

1.Make sure that ALL Microsoft SDKs are removed from your default include path in 
Menu:Tools/Options | Directories.  The Only path that I have in mine is 
c:\Program Files\DevStudio\VC\INCLUDE

2.Not Running configure or ms/do_ms.bat in step 3.

What projects (executables and libraries) are implemented:
bash-2.02$ ls -l
total 707
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 asn1parse
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 bftest
drwxr-xr-x   2 544  everyone0 Oct  4 07:49 bntest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 ca
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 casttest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 ciphers
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 crl
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 crl2pkcs7
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 destest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dgst
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dh
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dhtest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dsa
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dsaparam
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 dsatest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 enc
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 errstr
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 exptest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 gendh
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 gendsa
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 genrsa
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 hmactest
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 ideatest
drwxr-xr-x   2 544  everyone0 Oct  4 07:49 libeay32
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 md2test
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 md5test
drwxr-xr-x   2 544  everyone0 Oct  4 07:46 mdc2test
drwxr-xr-x   2 

OpenCA Up Again ...

1999-10-16 Thread Massimiliano Pala

Hi everybody,

I have to report that the OpenCA site is up again. Anyway we did
not succeed in finding the problems behind that, and the blackout
could happen again. If this happens, please report it to me ASAP.

http://www.openca.org

ftp://ftp.openca.org

Thank you,

Massimiliano Pala ([EMAIL PROTECTED])
 S/MIME Cryptographic Signature