RE: Good openSSL Book??

2000-08-31 Thread Glenn Carr

Gary Feldman wrote:
 While it may not be exactly what you want, Stephen Thomas's 
 book _SSL and
 TLS Essentials_ is nevertheless valuable.  Its focus is the 
 protocol, not
 the use or configuration of OpenSSL or other such package.

I agree totally.  A very good and easy to read explanation of the
negotiation process.  Very helpful in understanding what the OpenSSL code is
doing.

"SSL and TLS Essentials: Securing the Web"
http://www.amazon.com/exec/obidos/ASIN/0471383546/glenncarr

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



how commercial browser clients seed PRNG

2000-08-28 Thread Glenn Carr

I'm curious if anyone knows how commercial browser clients (IE, Netscape,
Opera, etc.) seed their PRNGs?  Anyone know or have any guesses?

Thanks,
Glenn
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: question about DES patents

2000-08-22 Thread Glenn Carr

Greg,

Thanks for the fast response.

What are the restrictions outside the U.S.?  (I thought this was relaxed
recently.)

Is the Elliptic Curve cryptography is implemented in the OpenSSL code?  (I
can't any mention of algorithms based on this process in the code.)

Thanks,
Glenn


 -Original Message-
 From: Greg Stark [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, August 22, 2000 1:20 PM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: question about DES patents
 
 
 In the U.S., DES and DSA are royalty-free; it is also 
 possible to implement
 Elliptic Curve cryptography without stepping on patents, but 
 some care is
 needed.
 
 Greg Stark, [EMAIL PROTECTED]
 Chief Security Architect
 Ethentica, Inc.
 www.ethentica.com
 410-715-0039 Ext. 13
 
 
 - Original Message -
 From: "Glenn Carr" [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, August 22, 2000 1:22 PM
 Subject: question about DES patents
 
 
  Are use of DES, DAS and Elliptic curve algorithms still 
 restricted by
  patents?
  
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: Problem linking the examples in WinNT4

2000-08-16 Thread Glenn Carr

Sergio,

I'm guessing this has to do with collisions in the DLL you are compiling
with and the ones that were used to build the OpenSSL DLLs.  Check the
INSTALL.W32 for details, but I'm pretty sure they use (and require) the
multithreaded DLLs.  Go to your VC6 project settings (Project-Settings...).
Select each configuration (Settings For:) and on the C/C++ tab, select 'Code
Generation' in the Category dropdown.  Make sure that the runtime library
for each config is of the multithreaded variety.

Glenn

 -Original Message-
 From: Sergio Gallego Sacristana Martinez
 [mailto:[EMAIL PROTECTED]]
 Sent: Friday, August 11, 2000 6:11 AM
 To: [EMAIL PROTECTED]
 Subject: Problem linking the examples in WinNT4
 
 
 Hello!!
 
 I tried to compile the examples included in OpenSSL and after 
 setting the 
 libraries Libeay32.dll Ssleay32.dll and RSAglue.lib on the 
 link settings 
 (input) of  MS Visual C++ 6.0 I get this error:
 
 MSVCRT.lib(MSVCRT.dll) : error LNK2005: _sprintf already defined in 
 LIBCD.lib(sprintf.obj)
 MSVCRT.lib(MSVCRT.dll) : error LNK2005: _strncpy already defined in 
 LIBCD.lib(strncpy.obj)
 MSVCRT.lib(MSVCRT.dll) : error LNK2005: _fclose already defined in 
 LIBCD.lib(fclose.obj)
 MSVCRT.lib(MSVCRT.dll) : error LNK2005: _fflush already defined in 
 LIBCD.lib(fflush.obj)
 LINK : warning LNK4098: defaultlib "MSVCRT" conflicts with 
 use of other libs; 
 use /NODEFAULTLIB:library
 ..\..\bin\signRSA.exe : fatal error LNK1169: one or more 
 multiply defined 
 symbols found
 Error executing link.exe.
 signRSA.exe - 5 error(s), 1 warning(s)
 
 
 If I use the option /NODEFAULTLIB:library the same error 
 ocurrs but whith other 
 functions in the same libraries. This happens in all the 
 examples I've tried 
 with and with my own files. 
 
 Could somebody help me??
 Thak you in advance,
 Sergio Gallego.
 
 PD. Please write me back to current address 
 ([EMAIL PROTECTED])
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]