Block cipher pad is wrong

2005-06-28 Thread Philip Bowden








I am trying to use OpenSSL to secure communications between
2 little apps that I am writing myself. I am trying to use TLSv1, and have
tried many different approaches using ADH, as well as authenticating both ends
of the connection, but no matter what I try, I always seem to get the error:



484:error:140D2081:SSL
routines:TLS1_ENC:block cipher pad is wrong



on the server end after the call to
SSL_accept has completed. On the client end I get the error:



2732:error:140940F6:SSL routines:SSL3_READ_BYTES:unknown
alert type



Is it significant that the server end says TLS1 and the
client says SSL3? Can someone help me understand what this all means  I
am at a loss.



Cheers



Phill








Setting memory buffer for BIO_s_mem operations

2005-06-28 Thread Nadav Golombick
Hi,

I was wondering if there is a way to set my own memory buffer for the use of BIO_read and BIO_write operations when using BIO_s_mem functions?
My problem is that I don't want the waste of copying from one memory to another.

Thanks,-- Nadav Golombick 


Approximate memory ratio for encrypted and non encrypted data

2005-06-28 Thread Nadav Golombick
Hi,

Is there an average ratio to encrypted -- non-encrypted data?-- Nadav Golombick 


Re: Approximate memory ratio for encrypted and non encrypted data

2005-06-28 Thread Bear Giles

Nadav Golombick wrote:

Hi,
 Is there an average ratio to encrypted -- non-encrypted data?



It should be 1:1.

HOWEVER, it's more complex when you're talking about a complete 
system.  Data should usually be compressed before encryption and 
there's normally framing and other added in the encrypted stream. 
 One drops the ratio, the other increases it.


Further complicating this is the possibility that a really 
paranoid person will include frames containing random data. 
(There will be some hidden marker indicating that they should be 
ignored, of course.)  It's hard to guess what's in an encrypted 
file if they're always padded to a multiple of a megabyte or two.


Bear
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Setting memory buffer for BIO_s_mem operations

2005-06-28 Thread Prashant Kumar
Look under the documentation for BIO_s_mem, an example is given there.

char data[] = "Hello World";BIO *mem;mem = BIO_new_mem_buf(data, -1);

Regards,
Prashant.Nadav Golombick [EMAIL PROTECTED] wrote:

Hi,

I was wondering if there is a way to set my own memory buffer for the use of BIO_read and BIO_write operations when using BIO_s_mem functions?
My problem is that I don't want the waste of copying from one memory to another.

Thanks,-- Nadav Golombick 
		Yahoo! Sports 
Rekindle the Rivalries. Sign up for Fantasy Football




Re: Setting memory buffer for BIO_s_mem operations

2005-06-28 Thread Nadav Golombick
That is memory for reading. What about memory for writing?
On 6/28/05, Prashant Kumar [EMAIL PROTECTED] wrote:

Look under the documentation for BIO_s_mem, an example is given there.

char data[] = Hello World;BIO *mem;mem = BIO_new_mem_buf(data, -1);

Regards,
Prashant. 
Nadav Golombick [EMAIL PROTECTED]
 wrote:


Hi,

I was wondering if there is a way to set my own memory buffer for the use of BIO_read and BIO_write operations when using BIO_s_mem functions?
My problem is that I don't want the waste of copying from one memory to another.

Thanks,-- Nadav Golombick 


Yahoo! Sports
Rekindle the Rivalries. Sign up for Fantasy Football 
-- Nadav Golombick 


Please remove me from the mailing list.

2005-06-28 Thread John LaRocka


Thanks,
John


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Getting sockaddr_in structures from a BIO or SSL struct.

2005-06-28 Thread Joe Santapau

Thanks one and all,

I had priviously used a socket BIO, but now I think I'll use accept() get
what I need, and then populate it into a SSL *  it might give me 
flexability

with the socket itself, timeouts and the like.

Thanks,
Joe S.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


TLS-PSK implementation

2005-06-28 Thread Gat, Gilad








Hi,



Does
openSSL support TLS communication based on Pre-Shared Keys?

I'm
referring to the implementation suggested by http://www.ietf.org/internet-drafts/draft-ietf-tls-psk-09.txt.




Thanks
in advance,




Gilad Gat.