Re: OpenSSL and compression using ZLIB

2002-11-27 Thread Pablo J Royo
I have used ZLIB in several projects, but my knowledge of it it´s not as deep as yours, but...aren't you talking about a simple BIO for compressing data?.(Or,probably, I missed something in this discussion thread?) I think the BIO would mantain the context (as z_stream struct of ZLIB do) among

Re: [openssl.org #257] openssl-0.9.7-beta3 on Irix

2002-11-27 Thread Andy Polyakov
No, I get exactly same error: NIST curve P-521 -- Generator: x = 0xC6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66 y =

Re: [openssl.org #257] openssl-0.9.7-beta3 on Irix

2002-11-27 Thread Martin MOKREJ
On Wed, 27 Nov 2002, Martin MOKREJ wrote: Yes, those were my environment variables, but as I see some of the setting were overriden by configure. Do post output from 'apps/openssl version -a'. OpenSSL 0.9.6h-dev xx XXX built on: Wed Nov 6 16:09:53 CET 2002 platform: irix-mips3-cc

[openssl.org #367] s3_clnt.c ssl3_get_server_hello and SSL_SESSION cipher_id 0.9.7-b4

2002-11-27 Thread Jeffrey Altman via RT
Sometime in the last couple of weeks the following change was made to s3_clnt.c 698,699c699 if (s-hit (s-session-cipher != c)) --- if (s-hit (s-session-cipher_id != c-id)) The only problem is that at this point in time the cipher_id field of the SSL_SESSION has not been set.

[openssl.org #367] s3_clnt.c ssl3_get_server_hello and SSL_SESSION cipher_id 0.9.7-b4

2002-11-27 Thread Lutz Jaenicke via RT
[[EMAIL PROTECTED] - Wed Nov 27 14:49:04 2002]: Sometime in the last couple of weeks the following change was made to s3_clnt.c 698,699c699 if (s-hit (s-session-cipher != c)) --- if (s-hit (s-session-cipher_id != c-id)) ... This problem was already reported as #351 and

Re: cvs commit: openssl/crypto/asn1 x_x509a.c

2002-11-27 Thread Kiyoshi WATANABE
Dear Openssl Developer, Is there any command that generates a cross certificate pair, or only the ASN.1 data structure? With Best Regards, -Kiyoshi Kiyoshi Watanabe levitte 27-Nov-2002 14:40:12 Modified:crypto/asn1 x_x509a.c Log: Extra ; removed. Revision Changes

Re: [openssl.org #257] openssl-0.9.7-beta3 on Irix

2002-11-27 Thread Andy Polyakov
so, once more. I've tested now openssl-0.9.7-beta4: ./Configure irix-mips3-cc --prefix=/usr/local/openssl --openssldir=/usr/local/openssl no-threads Configuring for irix-mips3-cc IsWindows=0 CC=cc CFLAG =-DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_KRB5 -n32 -O2

RE: OpenSSL and compression using ZLIB

2002-11-27 Thread Le Saux, Eric
Yes, very interesting. This is another way of adding compression to the data pipe. I have not looked at the code, but I assume that the compression state is maintained for the whole life of the communication channel, which is what gives the best results. Have you tried to use

Re: [openssl.org #343] Fw: When scrubbing secrets in memory doesn't work

2002-11-27 Thread list_7531 at Hotmail via RT
Hi, Thanks for the update. Do you have an email address for the OpenSSH developers? On 14th November I sent a similar email to [EMAIL PROTECTED] [EMAIL PROTECTED] but haven't recieved a reply. Thanks, Adrian - Original Message - From: Richard Levitte via RT [EMAIL PROTECTED] To:

RE: [openssl.org #353] 0.9.7 B4 testssl with no-dh fails

2002-11-27 Thread Chris Brook
Whoops! I sent a bad suggested fix for this. This should be better. Chris Brook ### if ../apps/openssl no-dh; then echo skipping anonymous DH tests else echo test tls1 with 1024bit anonymous DH, multiple handshakes $ssltest -v

RE: [openssl.org #353] 0.9.7 B4 testssl with no-dh fails

2002-11-27 Thread Chris Brook via RT
Whoops! I sent a bad suggested fix for this. This should be better. Chris Brook ### if ../apps/openssl no-dh; then echo skipping anonymous DH tests else echo test tls1 with 1024bit anonymous DH, multiple handshakes $ssltest -v

engine vs non egine

2002-11-27 Thread Zvi Dubitzky
Hi there Can anybody tell what is the difference between openssl-engine-0.9.6a.tar.gzand openssl-0.9.6a.tar.gz thanks Zvi IBM __ OpenSSL Project http://www.openssl.org Development Mailing

How to port for Palm

2002-11-27 Thread mohanraj venkatesh kumar
Dear Sir, Iam trying to port OpenSSL to Palm. Iam trying to develop a client side application that would use SSL. Could someone please guide me as what are the common files that I would need to take as-is and what are the files that need to be ported for a particular OS(Palm OS). Thanks in

RE: engine vs non egine

2002-11-27 Thread Lynn Gazis
openssl-engine-0.9.6a.tar.gz supports several cryptographic accelerator cards which openssl-0.9.6a does not support. Otherwise the two distributions are the same. Also, it would be better to use OpenSSL 0.9.6g than OpenSSL 0.9.6a, since there are some security holes that have been fixed since

Re: OpenSSL and compression using ZLIB

2002-11-27 Thread Geoff Thorpe
On November 27, 2002 12:33 pm, Le Saux, Eric wrote: Yes, very interesting. This is another way of adding compression to the data pipe. I have not looked at the code, but I assume that the compression state is maintained for the whole life of the communication channel, which is what gives the

Re: OpenSSL and compression using ZLIB

2002-11-27 Thread Kenneth R. Robinette
Date sent: Wed, 27 Nov 2002 14:58:24 -0500 From: Geoff Thorpe [EMAIL PROTECTED] Subject:Re: OpenSSL and compression using ZLIB To: [EMAIL PROTECTED] Copies to: Le Saux, Eric [EMAIL PROTECTED], royop@tb- solutions.com

Re: OpenSSL and compression using ZLIB

2002-11-27 Thread Geoff Thorpe
On November 27, 2002 03:24 pm, Kenneth R. Robinette wrote: Um, well that's one approach. But its a little like saying Lets let SSL/TLS take care of agreeing on a cipher type, and then leave it up to the user application to take care of the actual encryption/decrytion. I would rather see the

Re: How to port for Palm

2002-11-27 Thread nagendra modadugu
Ian Goldberg did some work as part of TopGun (this is a rather outdated port though): http://www.isaac.cs.berkeley.edu/pilot/ Also, Palm OS 5.0 is supposed to ship with an SSL library. nagendra * mohanraj venkatesh kumar [EMAIL PROTECTED] [2002-11-27 16:27:54 +]: Dear Sir, Iam