CryptoAPI

2001-01-11 Thread kure
Hi !   Is it possible to add Microsoft CryptoAPI 2.0 as one of crypto engine? Maybe somebody have alredy done it?  

Re: "libsafe violation for /etc/ssl/openssl-0.9.6/apps/openssl, pid=18373; overflow caused by memcpy()"

2001-01-11 Thread Lutz Jaenicke
On Sun, Nov 12, 2000 at 07:13:07PM -0500, David Arbogast wrote: > This was a clean full install of Mandrake 7.2 i586 in "expert" paranoid > security mode. > > My fault? Yes :-) ... > ../apps/openssl verify -CApath ../certs ../certs/*.pem > Detected an attempt to write across stack boundary. > T

Re: cvs commit: openssl STATUS

2001-01-11 Thread Bodo Moeller
On Wed, Jan 10, 2001 at 06:11:57PM +, Dr S N Henson wrote: > [EMAIL PROTECTED] wrote: >> +o crypto/ex_data.c is not really thread-safe and so must be used >> + with care (e.g., extra locking where necessary, or don't call >> + CRYPTO_get_ex_new_index once multiple threa

Re: Memory Leaks Detecting on WIN32

2001-01-11 Thread Dror
Hi Richard, It works perfectly!!! I couldn't compile the snapshot (some linker errors), so I just added the involved files into the last release version. I had to update the DEF file with the new function (CRYPTO_set_mem_ex_functions) as well, in order to be able to import it into the applic

HURD openssl compile patch

2001-01-11 Thread Jonathan Bartlett
in config: GNU*) echo "hurd-x86"; exit 0; ;; in Configure: "hurd-x86", "gcc:-DL_ENDIAN -DTERMIOS -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT:-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dl

Entrust patent on CRLDistributionPoint?

2001-01-11 Thread Michael Ströder
HI! The description of SCEP found on http://www.cisco.com/warp/public/cc/pd/sqsw/tech/scep_wp.htm mentions an Entrust patent on usage of CRLDistributionPoint as described in RFC2459: 7.0 Intellectual Property This protcol includes the optional use of Certificate Revocation List Distribution Poin

Re: CryptoAPI

2001-01-11 Thread Richard Levitte - VMS Whacker
From: "kure" <[EMAIL PROTECTED]> kure> Is it possible to add Microsoft CryptoAPI 2.0 as one of crypto engine? kure> Maybe somebody have alredy done it? Noone so far. Wanna have the honors? :-) -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA

Re: Entrust patent on CRLDistributionPoint?

2001-01-11 Thread Peter Gutmann
Michael StrM-vder <[EMAIL PROTECTED]> writes: >The description of SCEP found on >http://www.cisco.com/warp/public/cc/pd/sqsw/tech/scep_wp.htm mentions an >Entrust patent on usage of CRLDistributionPoint as described in RFC2459: > >Does anybody know something about this patent and its implicatio

Re: Memory Leaks Detecting on WIN32

2001-01-11 Thread Richard Levitte - VMS Whacker
From: "Dror" <[EMAIL PROTECTED]> drorotmi> It works perfectly!!! Cool! drorotmi> Thank you very very much effort. YW. HAND. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL PROTECTED] Chairman@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47 Redakteur@Stacken \ SWEDEN \ or +4

Re: HURD openssl compile patch

2001-01-11 Thread Richard Levitte - VMS Whacker
From: Jonathan Bartlett <[EMAIL PROTECTED]> johnnyb> in config: johnnyb> johnnyb> johnnyb> GNU*) johnnyb> echo "hurd-x86"; exit 0; johnnyb> ;; johnnyb> johnnyb> in Configure: johnnyb> johnnyb> "hurd-x86", "gcc:-

Re: Entrust patent on CRLDistributionPoint?

2001-01-11 Thread Rich Salz
> The description of SCEP found on > http://www.cisco.com/warp/public/cc/pd/sqsw/tech/scep_wp.htm > mentions an Entrust patent on usage of CRLDistributionPoint as > described in RFC2459 > Does anybody know something about this patent and its implications > especially for Open Source projects? En

Re: cvs commit: openssl STATUS

2001-01-11 Thread Dr S N Henson
Bodo Moeller wrote: > > On Wed, Jan 10, 2001 at 06:11:57PM +, Dr S N Henson wrote: > > [EMAIL PROTECTED] wrote: > > >> +o crypto/ex_data.c is not really thread-safe and so must be used > >> + with care (e.g., extra locking where necessary, or don't call > >> + CRYPTO_g

openssl-engine + FreeBsd

2001-01-11 Thread adrien mistretta
I've tried to use a Cryptoswift PCI card with openssl-engine 0.9.6 on FreeBsd 4.2, but i got the followin message. If someone can help ... Adrien. sys-test# openssl OpenSSL> version OpenSSL 0.9.6 [engine] 24 Sep 2000 OpenSSL> speed -engine cswift can't use that engine 8699:error:2507006C:DSO s

RE: openssl-engine + FreeBsd

2001-01-11 Thread lgazis
On FreeBSD, you need to run: ./config -DDSO_DLFCN -DHAVE_DLFCN_H to get the DSO code to work properly. If you have any further trouble getting this to work, feel free to email either me or [EMAIL PROTECTED] Lynn Gazis Rainbow Technologies -Original Message- From: adrien mistretta [ma

Re: openssl-engine + FreeBsd

2001-01-11 Thread adrien mistretta
Le Jeudi 11 Janvier 2001 16:19, vous avez écrit : > On FreeBSD, you need to run: > > ./config -DDSO_DLFCN -DHAVE_DLFCN_H Thanks, it works fine, but now i got another problem, some errors on the speed test, and the time test seems to be false OpenSSL> speed -engine cswift rsa engine "cswift"

Re: ca -extfile [PATCH] and CVS access

2001-01-11 Thread Massimiliano Pala
Hi, when trying to compile the latest SNAP, I get on the following computer: K7 Thunderbird 1Gh 128Mb Ram Linux 2.4.0-test12 RedHat 7.0 + Updates the following error: making all in crypto/lhash... make[2]: Entering directory `/usr/local/devel/madwolf/original/op

Re: CryptoAPI

2001-01-11 Thread Dr S N Henson
Richard Levitte - VMS Whacker wrote: > > From: "kure" <[EMAIL PROTECTED]> > > kure> Is it possible to add Microsoft CryptoAPI 2.0 as one of crypto engine? > kure> Maybe somebody have alredy done it? > > Noone so far. Wanna have the honors? :-) > This depends to some extent on what you want

Re: openssl-engine + FreeBsd

2001-01-11 Thread Geoff Thorpe
Hi there, On Thu, 11 Jan 2001, adrien mistretta wrote: > Thanks, it works fine, but now i got another problem, some errors on the > speed test, and the time test seems to be false if you read the errors you'll see what the problem is; > Doing 4096 bit private rsa's for 10s: 64 4096 bit priva

Re: CryptoAPI

2001-01-11 Thread Richard Levitte - VMS Whacker
From: Dr S N Henson <[EMAIL PROTECTED]> drh> I haven't kept up with ENGINE development but it would need some drh> flexible way to handle hardware keys to support this. There is some support for it, and hw_ncipher.c supports it. I'm sure you'll recognise the method used :-). -- Richard Levitt

RE: openssl-engine + FreeBsd

2001-01-11 Thread lgazis
We ran the DSA speed test with OpenSSL 0.9.6 on several platforms here. The FreeBSD test here succeeded for 512 bit and 1024 bit DSA, and failed only for 2048 bit DSA (which the Cryptoswift card is not designed for). However, when I examined the test results cross-platform, I found that some pla

Re: latest SNAP (0110) compiling error on Athlon

2001-01-11 Thread Massimiliano Pala
Ulf Möller wrote: > > On Thu, Jan 11, 2001 at 05:02:23PM +0100, Massimiliano Pala wrote: > > > gcc -I.. -I../../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H > > -DNO_KRB5 -DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall -DSHA1_ASM > > -DMD5_ASM -DRMD160_ASM -c -o lha

Re: latest SNAP (0110) problems and 'toupper' question

2001-01-11 Thread Massimiliano Pala
Ulf Möller wrote: > Odd, but I think that has to be a compiler error. Ignore my previous mail, it was a gcc error... lucky me... :-D Updating had fixed the problem, it seems. Anyway, can I use the 'toupper' function in the ca tool to get an 'upper' version of a passed parameter ? Are there some

Re: latest SNAP (0110) compiling error on Athlon

2001-01-11 Thread Richard Levitte - VMS Whacker
From: Massimiliano Pala <[EMAIL PROTECTED]> madwolf> Yes, I though it too, but why I don't get that error when compiling the madwolf> madwolf>openssl-SNAP-20010104 madwolf> madwolf> instead of the latest (20010110) ??? I am updating the gcc, anyway I can't find madwolf> the problem

Re: latest SNAP (0110) problems and 'toupper' question

2001-01-11 Thread Richard Levitte - VMS Whacker
From: Massimiliano Pala <[EMAIL PROTECTED]> madwolf> Ignore my previous mail, it was a gcc error... lucky madwolf> me... :-D Updating had fixed the problem, it seems. It might be a good idea for us to know what gcc version caused the problem. -- Richard Levitte \ Spannvägen 38, II \ [EMAIL P

Re: latest SNAP (0110) problems and 'toupper' question

2001-01-11 Thread Massimiliano Pala
Richard Levitte - VMS Whacker wrote: > > From: Massimiliano Pala <[EMAIL PROTECTED]> > > madwolf> Ignore my previous mail, it was a gcc error... lucky > madwolf> me... :-D Updating had fixed the problem, it seems. > > It might be a good idea for us to know what gcc version caused the > problem.

Re: latest SNAP (0110) problems and 'toupper' question

2001-01-11 Thread Richard Levitte - VMS Whacker
From: Massimiliano Pala <[EMAIL PROTECTED]> madwolf> The system was: madwolf> madwolf>K7 Athlon madwolf>Linux 2.4.0-test12 madwolf>RedHat 7.0 (that's why, I suppose) madwolf>gcc-2.96 (rpm gcc-2.96-56) Ah, yes, you said that, sorry. RedHat 7 is known for coming w

CRLF request

2001-01-11 Thread Rob Neff
When executing an openssl app, such as s_client, s_server, x509, etc., can a change be made such that the output from these apps include the CRLF line terminating chars similar to the way the input stream is modified when the '-crlf' command line switch is specified?  Those of us in the Win

cert chain issue

2001-01-11 Thread Rob Neff
Questions for the SSL code gurus:   When using OpenSSL v.0.9.6 and calling SSL_CTX_use_certificate_chain_file() and supplying a .PEM file containing the server cert and signing certs, the signing root certs do not appear to be sent to the client when using s_client -showcerts. Is the chain