Blutige Selbstjustiz
Polizeiexperten warnen: Ethnisch abgeschottete Mafia-Clans sind kaum noch zu durchdringen. Die Gerichte tragen Mitschuld. Weiter auf: http://www.libasoli.de/2004/ethnoclans%20spiegel50_04.html __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
RE: Engine vs non-engine
0.9.6-engine supports CryptoSwift as well as nCipher, Atalla, and software. 0.9.7 folds the engine code into the main branch, reorganizes it, and adds a couple more engines. Lynn Gazis Rainbow Technologies -Original Message- From: Andy Schneider [mailto:[EMAIL PROTECTED]] Sent: Friday, December 07, 2001 9:39 AM To: [EMAIL PROTECTED] Subject: RE: Engine vs non-engine AFAIK OpenSSL 0.9.7 is going to have pluggable cryptographic service providers (engines). 0.9.6 doesn't have this (it's all software) but 0.9.6-engine does. You can therefore use an engine based version with hardware crypto if you have an appropriate engine. 0.9.6 supports three? of engines, software, nCipher and attalla? Andy S. -Original Message- From: Averroes [mailto:[EMAIL PROTECTED]] Sent: 07 December 2001 17:33 To: [EMAIL PROTECTED] Subject: Re: Engine vs non-engine Hi, One can control some crypto card as nCipher's shield, that we use in my company.The ohter is just a software. Ciao! Kasper (swebase) wrote: I have an easy question. What is the difference between openssl-engine and openssl ? /Kasper __ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- # .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .- # Averroes A. Aysha # Think Linux, Think Slackware! # e-fingerprint = 63:B0:7D:A1:23:BC:25:96:AE:B7:76:36:F3:07:1F:88 # .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .- __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: openssl-0.9.6b on solaris-sparcv9-cc
Alternatively, if you *do* have a Solaris C compiler installed, you need to check and make sure it comes first in your path. /opt/SUNWspro/bin (or whatever directory you installed the C compiler in, if you didn't place it in the default location) should come before /usr/ucb in your path. As long as you pick up /usr/ucb/cc first, OpenSSL won't build. If you don't have the SUNWspro compiler, follow Erich's advice and use gcc. Lynn Gazis -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED]] Sent: Sunday, November 11, 2001 6:11 AM To: [EMAIL PROTECTED] Subject: Re: openssl-0.9.6b on solaris-sparcv9-cc Hi Aslam wrote the following at 19:48 09.11.2001: I'm trying to compile openssl-0.9.6b on solaris-sparcv9-cc.. and when I do make as per the install in openssl-0.9.6b\.. I get following error message.. $ make + rm -f libcrypto.so.0 + rm -f libcrypto.so + rm -f libcrypto.so.0.9.6 + rm -f libssl.so.0 + rm -f libssl.so + rm -f libssl.so.0.9.6 making all in crypto... cc -I. -I../include -KPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xta rget=ultra -xarch=v8plus -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W -DUL TRASPARC -DMD5_ASM -c cryptlib.c /usr/ucb/cc: language optional software package not installed *** Error code 1 make: Fatal error: Command failed for target `cryptlib.o' Current working directory /etc/export/home/openssl/openssl-0.9.6b/crypto *** Error code 1 make: Fatal error: Command failed for target `sub_all' Could any one tell me what all he is asking about ?? Looks like you are missing some software on your solaris installation, e.g. the compiler You might try to use gcc regards Erich Titl THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16 __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: API's ??
Yes, there are. If you look at req.c and genrsa.c, in the apps directory, you can see what API calls wind up being used when you run openssl genrsa ... or openssl req ... Lynn Gazis -Original Message- From: Ruby Cruiser [mailto:[EMAIL PROTECTED]] Sent: Sunday, November 11, 2001 12:12 PM To: [EMAIL PROTECTED] Subject: API's ?? For generating the certifcate and private file, I am currently using the command line interface... that is commands like openssl genrsa ... and openssl req -new -x509... etc. But, are there any openssl API's for the same? If yes, please let me know few APIs. Thanks for the assistance, Ruby __ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: compilation de openssl
You need to set your path such that /usr/ucb/cc is not the first C compiler picked up. You want either the Sun native C compiler in /opt/SUNWspro/bin, or else gcc. Lynn Gazis -Original Message-From: laurent evain [mailto:[EMAIL PROTECTED]]Sent: Monday, September 17, 2001 6:14 AMTo: [EMAIL PROTECTED]Subject: compilation de openssl J'ai essayé de compiler l'openssl-0.9.06b sous solaris8 1/01 avec le compiler cc lorsque je lance la commande make ou make test Ci-joint le fichier d'erreur Je n'ai pas osé lancer l'installation (make install) Pourriez-vous m'aider à savoir d'ou vient cette erreur en sachant que j'a installé les recommended patchs pour solaris Cordialement L.EVAIN
RE: Problem running cswift on Linux
I haven't seen this particular error before, but I'd suggest contacting our tech support ([EMAIL PROTECTED]), and including information on the versions of OpenSSL, Apache, and CryptoSwift IK involved, just what load test is being run, and any errors that may appear in the Apache error log. Lynn Gazis Rainbow Technologies -Original Message- From: Andy Tsz Kwan Chan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, September 05, 2001 8:21 PM To: [EMAIL PROTECTED] Subject: Problem running cswift on Linux Hi, I am running cswift on Linux 2.2.17 using regular Apache. After a load test is over, I see the followings: 140 D abuser1700 1688 2 60 0- 1206 end19:52 ? 00:00:24ab-helper -f /USR/A/conf/httpd.conf This process stays in this state forever and it can not be killed. It seems to be waiting for a disk operation to be completed. When I do lsmod, I see something like: cspci5744x where x is the number of processes staying in the above state. Any idea why this is happening? Thanks. best regards, Andy __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: How I can use Cryptoswitf device with openssl engine 0.9.6 ?
Are you at OpenSSL engine 0.9.6 or 0.9.6b? There were some fixes to the engine code between 0.9.6 and 0.9.6b which will be relevant to you if you are on FreeBSD, AIX, or HP UX (particularly HP UX, but FreeBSD and AIX do require some extra options to be passed to config, at version 0.9.6, for the engine DSO code to work properly). I have some instructions which I can email you, but, due to the fixes I mentioned, I have slightly different versions of the instructions depending on whether you are using 0.9.6 or 0.9.6a/0.9.6b (the fixes got applied in 0.9.6a, so there is no change in what you need to do between 0.9.6a and 0.9.6b). You can also email our Technical Support in France ([EMAIL PROTECTED]) for assistance from someone in your own time zone in getting your CryptoSwift device working with OpenSSL. Lynn Gazis Rainbow Technologies -Original Message-From: Patrick FRAIZ [mailto:[EMAIL PROTECTED]]Sent: Wednesday, August 22, 2001 3:10 AMTo: [EMAIL PROTECTED]Subject: How I can use Cryptoswitf device with openssl engine 0.9.6 ? Thanks, Patrick FRAIZPhone 33 (0)1 55 63 42 28Fax 33 (0)1 55 63 54 01ADP-GSI 148, rue Anatole France92688 Levallois-Perret Cedex - France
RE: CryptoSwift Engine on HPUX 11
The OpenSSL 0.9.6 engine code, as released, will not properly load the necessary library on HP UX, due to some problems with the DSO code. The DSO code was, however, fixed as of the snapshot of November 7, 2000, so the latest snapshot should work (with the usual caveat that any snapshot, at any given time, may have something broken in it), provided that SHLIB_PATH is set to the directory where libswift.so is found (generally /usr/lib). If you are going to use this with Apache, you will need to run chatr +s on httpd, after it is built, so that it will recognize SHLIB_PATH, and add a line setting and exporting SHLIB_PATH to apachectl. Alternatively, I can get you patches to use with the non-engine version of OpenSSL 0.9.6 on HP UX. You can email [EMAIL PROTECTED] for a fuller set of instructions (either for using the OpenSSL engine version or for patching the non-engine version) for using CryptoSwift with OpenSSL 0.9.6 on HP UX. Lynn Gazis -Original Message- From: Jay W. Reffner [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 27, 2001 4:17 PM To: [EMAIL PROTECTED] Subject: CryptoSwift Engine on HPUX 11 I'm having the following trouble when I try to get openssl to work with Rainbow's CryptoSwift card on HPUX 11.0. After doing a ./config and a make I try to test it with the following command: # ./openssl speed rsa1024 -engine cswift can't use that engine 4489:error:2506C066:DSO support routines:DL_LOAD:could not load the shared libra ry:dso_dl.c:133: 4489:error:25072066:DSO support routines:DSO_load:could not load the shared libr ary:dso_lib.c:230: 4489:error:26065068:engine routines:CSWIFT_INIT:DSO failure:hw_cswift.c:271: 4489:error:2607E06D:engine routines:ENGINE_SET_DEFAULT_TYPE:init failed:engine_l ib.c:398: It does this with the 0.9.6 engine version and with the latest SNAP's. Any help would be greatly appreciated. Sincerely, Jay W. Reffner __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board
There's a known issue with the openssl speed test when running the OpenSSL 0.9.6 engine version with Cryptoswift on Solaris; it will be addressed in a future release. The situation which is causing a routine in the speed test to be interrupted does not occur in Apache, so you should still be able to use Cryptoswift with Solaris, OpenSSL 0.9.6 engine version, and Apache without difficulty. Let me know if you have any further questions or issues. Lynn Gazis Rainbow Technologies -Original Message- From: De Taeye, Herman [mailto:[EMAIL PROTECTED]] Sent: Friday, February 23, 2001 6:30 AM To: 'lgazis'; '[EMAIL PROTECTED]'; De Taeye, Herman; Gyutani (E-mail) Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board Thanks for the diagnostic program. With the delivery by Sun an other program called cstest located in /opt/SUNWconn/sunsecure/vts/bin. This program has other options, but finally returns similar output. csdiag showed that when running openssl speed rsa1024 -engine cswift, the card processed 1440 requests. During the test it comes up with an error : # openssl speed rsa1024 -engine cswift engine "cswift" set. Doing 1024 bit private rsa's for 10s: RSA sign failure 17338:error:26067072:engine routines:CSWIFT_MOD_EXP_CRT:request failed:hw_cswift .c:524:CryptoSwift error number is -10004 1 1024 bit private RSA's in 0.29s Doing 1024 bit public rsa's for 10s: RSA verify failure 17338:error:26066072:engine routines:CSWIFT_MOD_EXP:request failed:hw_cswift.c:4 13:CryptoSwift error number is -10004 1 1024 bit public RSA's in 0.67s OpenSSL 0.9.6 [engine] 24 Sep 2000 built on: Wed Feb 21 15:15:24 MET 2001 options:bn(64,32) md2(int) rc4(ptr,char) des(idx,cisc,16,long) idea(int) blowfis h(ptr) compiler: gcc -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -mcpu=ultr asparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC -DMD5_A SM signverifysign/s verify/s rsa 1024 bits 0.2900s 0.6700s 3.4 1.5 For this problem I had opened an other contact. When installing openssl and configuring Apache.1.3.17, all seems to be OK. Thanks to you all for the prompt support in trying to solve my problem. Best regards, Herman De Taeye Unisys Belgium. -Original Message----- From: lgazis [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 4:30 PM To: '[EMAIL PROTECTED]'; De Taeye, Herman Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board 1) csdiag -a 0 2) Run your test. 3) csdiag -a 0 If the interrupts haven't gone up by more than a couple, then the card isn't being accessed (in which case, I'd suggest following John Airey's advice about SSL_EXPERIMENTAL and SSLCryptoDevice, or you can email [EMAIL PROTECTED] for help). Lynn Gazis -Original Message- From: adrien mistretta [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 5:29 AM To: [EMAIL PROTECTED]; De Taeye, Herman Subject: Re: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator board 3. How can I really test that the board is used and not the internal engine? you can use the csdiag command to see if request are made to the crypto card, but I don't remember the option. Adrien __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator board
1) csdiag -a 0 2) Run your test. 3) csdiag -a 0 If the interrupts haven't gone up by more than a couple, then the card isn't being accessed (in which case, I'd suggest following John Airey's advice about SSL_EXPERIMENTAL and SSLCryptoDevice, or you can email [EMAIL PROTECTED] for help). Lynn Gazis -Original Message- From: adrien mistretta [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 5:29 AM To: [EMAIL PROTECTED]; De Taeye, Herman Subject: Re: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator board 3. How can I really test that the board is used and not the internal engine? you can use the csdiag command to see if request are made to the crypto card, but I don't remember the option. Adrien __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: make not found
However, ./config is a shell script which calls ./Configure, which itself is a shell script which calls "make". So Richard's account of the error seems likely to be the actual cause. Lynn Gazis -Original Message- From: gavin.java [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 06, 2001 9:40 AM To: Richard Levitte - VMS Whacker; [EMAIL PROTECTED] Subject: Re: make not found It would be obvious if I was using the "make" command but what I'm trying to do is install openssl using the ./config and that's the error I'm receiving. Gavin From: Richard Levitte - VMS Whacker [EMAIL PROTECTED] Date: Tue, 06 Feb 2001 18:16:50 +0100 (MET) To: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: make not found From: "gavin.java" [EMAIL PROTECTED] gavin.java I'm trying to install openssl0.9.5a for OSX Server 1.2 and Apache 1.3.14. gavin.java During the ./config I'm receiving an error "make not found". gavin.java What is going on ? That should be obvious from the message. It tries to use the program "make" and fails. Either you haven't installed that program, or your $PATH is wrong... -- Richard Levitte \ Spannvgen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +46-709-50 36 10 Procurator Odiosus Ex Infernis-- [EMAIL PROTECTED] Member of the OpenSSL development team: http://www.openssl.org/ Software Engineer, Celo Communications: http://www.celocom.com/ Unsolicited commercial email is subject to an archival fee of $400. See http://www.stacken.kth.se/~levitte/mail/ for more info. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
