[openssl.org #642] WinCE IE 3.02 client problem

2003-06-10 Thread Simon Davison via RT
To whom it may concern, I'm not sure of the format you require for bug reports but I'll try to limit this email to pertinent info only... Summary: Our application uses Pocket IE v3.02 on WinCE to communicate with our secure webserver (apache + mod_ssl). When we upgraded the server's openssl from

Re: AES counter mode

2003-06-10 Thread Thierry Boivin
At 07:48 10/06/03 -0700, you wrote: >Thierry Boivin wrote: >>I agree with you about the way to build the initial "ctr" value from the "nonce" >>value. My question is different : whithin the encryption of a whole plaintext >>message (so a big block to be divided into 128 bit length blocks) , why

Re: Submitting a Patch

2003-06-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 10 Jun 2003 23:20:30 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> In message <[EMAIL PROTECTED]> on Tue, 10 Jun 2003 11:17:02 -0600, "Verdon Walker" <[EMAIL PROTECTED]> said: levitte> VWalker> BTW, the code won't compile be

Re: [openssl.org #641] AutoReply: Problem with include file !!!

2003-06-10 Thread Trinh Anh Tuan via RT
--- Trinh Anh Tuan - CMO-CFTI/NACENTECH Ministry of Science & Technologies Off. Tel.: (84-4) 8541197 - Off. Fax: (84-4) 8548187 CellPhone: (84) 913-323266

Re: Submitting a Patch

2003-06-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 10 Jun 2003 11:17:02 -0600, "Verdon Walker" <[EMAIL PROTECTED]> said: VWalker> I have a patch ready to be submitted which will add NetWare support to VWalker> OpenSSL 0.9.7. I have tested it with the latest snapshots and everything VWalker> is looking good.

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Dr. Stephen Henson
On Tue, Jun 10, 2003, Bryce Howard wrote: > > I was afraid I was duplicating something else out there, seems that this is not > so. I will clean up the code a bit this week and submit it with the method that > Geoff suggested. > I have also written a CAPI ENGINE but it had to do various evil th

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Bryce Howard
I was afraid I was duplicating something else out there, seems that this is not so. I will clean up the code a bit this week and submit it with the method that Geoff suggested. --- "Kenneth R. Robinette" <[EMAIL PROTECTED]> wrote: > Bryce > > Why not make the MS CAPI engine available for downloa

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Joel Daniels
Yes I for one am interested. - Joel Daniels - Original Message - From: "Kenneth R. Robinette" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 10, 2003 6:41 AM Subject: Re: MS CAPI OpenSSL Engine? > Bryce > > Why not make the MS CAPI engine available for download. We a

Submitting a Patch

2003-06-10 Thread Verdon Walker
I have a patch ready to be submitted which will add NetWare support to OpenSSL 0.9.7. I have tested it with the latest snapshots and everything is looking good. I would like the patch to go into the 0.9.8 branch as well as the 0.9.7 branch, but when I downloaded the latest snapshot (6-10) for 0.9.8

Re: AES counter mode

2003-06-10 Thread Michael Sierchio
Thierry Boivin wrote: I agree with you about the way to build the initial "ctr" value from the "nonce" value. My question is different : whithin the encryption of a whole plaintext message (so a big block to be divided into 128 bit length blocks) , why to increment ctr by 2^64 instead of 1 from b

disconnect

2003-06-10 Thread Lukasz Wójcicki
Hi, Why SSL connection is not broken even if I call SSL_free and SSL_CTX_free ? Lukasz Wójcicki e-mail: [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org Development Mailing List

RE: possible problems with RAND_seed()

2003-06-10 Thread DJohnson
Title: RE: possible problems with RAND_seed() Sorry, i forgot that part. I am running 0.9.7b on Solaris 7 64-bit.  And that makes sense about AES requiring 32 bytes.  My 32-bit version was an older version, 0.9.6e i think.  So it would still only use the128 bits. Thanks for clearing that up

Re: changes in HASH_UPDATE()

2003-06-10 Thread Nils Larsch
Satoshi Inoue wrote: Hi all, Hi Satoshi, I've been looking into the recent (well, what's recent you might say but never mind ;) changes made in CVS repository, and found this: - http://cvs.openssl.org/chngview?cn=9280 What will be an impact of not applying this fix (other than uninitialized mem

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Kenneth R. Robinette
Bryce Why not make the MS CAPI engine available for download. We are interested and I suspect quite a few others would have an interest also. I suspect a lot of people are interested but don't want to admit they use Microsoft. You know, only the big boys use OpenSSL on UNIX. However, the t

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Bryce Howard
For one I know CAPI doesn't support OAEP yet (not part of the TLS spec, right?) but yes I was confused by the padding they used. Eventually I realized that the padding the MS CAPI uses is dependent upon the context of the RSA operation, signing or key-exchange. When encrypting w/ the public key PK

Re: AES counter mode

2003-06-10 Thread Thierry Boivin
I agree with you about the way to build the initial "ctr" value from the "nonce" value. My question is different : whithin the encryption of a whole plaintext message (so a big block to be divided into 128 bit length blocks) , why to increment ctr by 2^64 instead of 1 from block to block ?

Re: possible problems with RAND_seed()

2003-06-10 Thread Lutz Jaenicke
On Mon, Jun 09, 2003 at 04:41:01PM -0400, [EMAIL PROTECTED] wrote: > I had a 32-bit application that was working fine, but when i compiled it as > 64-bit, it started to fail. I was getting this error: "PRNG not seeded". > > I read the documents and FAQ, and it states that the library needs to be

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Frédéric Giudicelli
Ok. Didn't you have to many problems with the PADDING ? If I recall well CAPI doesn't suppport all the PADDINGS used by opnessl. Frédéric Giudicelli http://www.newpki.org - Original Message - From: "Bryce Howard" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 10, 2003

Re: MS CAPI OpenSSL Engine?

2003-06-10 Thread Bryce Howard
In summary the MS CAPI engine provides: - Support for RSA signing and verification operations that will work w/ non-exportable MS CAPI private keys, should work with any CAPI-compliant HW token (testing it w/ Rainbow iKey's this week) - Full access to any MS CAPI keystore, implemented a certificat

[openssl.org #641] Problem with include file !!!

2003-06-10 Thread Trinh Anh Tuan via RT
Hallo, I have trouble with the header files in openssl distribution and I would like to ask you for hints. I am compiling smime-0.7 util of Sampo and the compiling said errors with a non-existed member named "req_kludge" in X509_REQ_INFO structure in include/openssl/x509.h file. This happened wi