External Crypto Engine Support

2003-06-24 Thread Bruce E.Buffam
Hi, I am interested in the support of external crypto devices in the OpenSSL implementation? Who is/are the authority/s within the OpenSSL community of developers on doing that type of integration? Rgds, Bruce __ OpenSSL Project

Re: pkcs#12 creation with secret bags

2003-06-24 Thread Dr. Stephen Henson
On Mon, Jun 23, 2003, Claude CONVERT wrote: > Hi all > I try to create a pkcs#12 with several secret bags. > I haven't found any sample which indicates how to do this and especially how > to create a secret bag. > I try the following code, but it doesn't work : > > PKCS12_SAFEBAG *safebag; >

RE: AES counter mode

2003-06-24 Thread Lee Dilkie
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of David Maurus > Sent: Tuesday, June 24, 2003 7:29 AM > To: [EMAIL PROTECTED] > Subject: Re: AES counter mode > > The easiest way to go about it would be to increment the user > supplied > IV by 1 for each

RE: pkcs#11 engine for openssl

2003-06-24 Thread Gilad Finkelstein
Hi Afchine,guys Just as I feared one need to change every layer that uses opnessl in order to support engines (mod_ssl is an example). What about what I said allowing the openssl to recognize it is to be used via the engines internally ? i.e. if a USE_EMGINE environment is set with an engine ID ope

Re: AES counter mode

2003-06-24 Thread David Maurus
Stephen Sprunk wrote: In the specification of CTR mode, as proposed for AES, you will find the statement "The number /nonce/ is incremented following each encryption." I interpreted this to mean that the top 2^64 bits are to be incremented for each successive block, and this is how I implemented

[openssl.org #648] Spurious SSL handshake interrupt [Hint: Usually just one of those OpenSSL confusions!?]

2003-06-24 Thread via RT
Dear, We have installed apache-ssl with ipv6 disabled. apache version is 2.0.40 and openssl version is 9.7 We are already having apache-ssl server with ipv6 enabled. In that server we have rarely found out the above mentioned error. Whereas after installing apache server with ipv6-disabled, we