RE: Good openSSL Book??
Gary Feldman wrote: While it may not be exactly what you want, Stephen Thomas's book _SSL and TLS Essentials_ is nevertheless valuable. Its focus is the protocol, not the use or configuration of OpenSSL or other such package. I agree totally. A very good and easy to read explanation of the negotiation process. Very helpful in understanding what the OpenSSL code is doing. "SSL and TLS Essentials: Securing the Web" http://www.amazon.com/exec/obidos/ASIN/0471383546/glenncarr __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
how commercial browser clients seed PRNG
I'm curious if anyone knows how commercial browser clients (IE, Netscape, Opera, etc.) seed their PRNGs? Anyone know or have any guesses? Thanks, Glenn __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: question about DES patents
Greg, Thanks for the fast response. What are the restrictions outside the U.S.? (I thought this was relaxed recently.) Is the Elliptic Curve cryptography is implemented in the OpenSSL code? (I can't any mention of algorithms based on this process in the code.) Thanks, Glenn -Original Message- From: Greg Stark [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 22, 2000 1:20 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: question about DES patents In the U.S., DES and DSA are royalty-free; it is also possible to implement Elliptic Curve cryptography without stepping on patents, but some care is needed. Greg Stark, [EMAIL PROTECTED] Chief Security Architect Ethentica, Inc. www.ethentica.com 410-715-0039 Ext. 13 - Original Message - From: "Glenn Carr" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 22, 2000 1:22 PM Subject: question about DES patents Are use of DES, DAS and Elliptic curve algorithms still restricted by patents? __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: Problem linking the examples in WinNT4
Sergio, I'm guessing this has to do with collisions in the DLL you are compiling with and the ones that were used to build the OpenSSL DLLs. Check the INSTALL.W32 for details, but I'm pretty sure they use (and require) the multithreaded DLLs. Go to your VC6 project settings (Project-Settings...). Select each configuration (Settings For:) and on the C/C++ tab, select 'Code Generation' in the Category dropdown. Make sure that the runtime library for each config is of the multithreaded variety. Glenn -Original Message- From: Sergio Gallego Sacristana Martinez [mailto:[EMAIL PROTECTED]] Sent: Friday, August 11, 2000 6:11 AM To: [EMAIL PROTECTED] Subject: Problem linking the examples in WinNT4 Hello!! I tried to compile the examples included in OpenSSL and after setting the libraries Libeay32.dll Ssleay32.dll and RSAglue.lib on the link settings (input) of MS Visual C++ 6.0 I get this error: MSVCRT.lib(MSVCRT.dll) : error LNK2005: _sprintf already defined in LIBCD.lib(sprintf.obj) MSVCRT.lib(MSVCRT.dll) : error LNK2005: _strncpy already defined in LIBCD.lib(strncpy.obj) MSVCRT.lib(MSVCRT.dll) : error LNK2005: _fclose already defined in LIBCD.lib(fclose.obj) MSVCRT.lib(MSVCRT.dll) : error LNK2005: _fflush already defined in LIBCD.lib(fflush.obj) LINK : warning LNK4098: defaultlib "MSVCRT" conflicts with use of other libs; use /NODEFAULTLIB:library ..\..\bin\signRSA.exe : fatal error LNK1169: one or more multiply defined symbols found Error executing link.exe. signRSA.exe - 5 error(s), 1 warning(s) If I use the option /NODEFAULTLIB:library the same error ocurrs but whith other functions in the same libraries. This happens in all the examples I've tried with and with my own files. Could somebody help me?? Thak you in advance, Sergio Gallego. PD. Please write me back to current address ([EMAIL PROTECTED]) __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]