RSA, DSA and DH Method structures in Engine

2008-08-07 Thread Nanavati, Sitanshu
Hi all, While going thru various engines, I see that: - for RSA, the structure is always initialized for rsa_mode_exp and mod_exp_mont (6th and 7th entities in the RSA_NETHOD structure). - for DH, only mod_ep_dh (4th entity in the DH_METHOD structure) - for DSA, dsa_mod_exp and

RE: Certificate Request Problem

2008-08-07 Thread kae
chrystelle wrote: Hi! I found my error .. Everything is fine ... Thanjs again for your help can you tell what the error was? I am experiencing this same problem. -- View this message in context: http://www.nabble.com/Certificate-Request-Problem-tp17802136p18853250.html Sent

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread David Shambroom
You're right: You are completely wrong. /dev/urandom never blocks. See the man page. David Schwartz wrote: Tried many many times, even two running at the same time or poll timeout set to zero, not one instance of blocking even with od -x /dev/urandom and od -x /dev/random running

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread Damien Miller
On Wed, 6 Aug 2008, Stanislav Meduna wrote: So what should the applications calling openssl actually do if this happens? Now the ssh/apache/... simply exit, which is bad (it left me without an access to a remote box...). Exiting is the best behaviour - continuing without a good source of

Re: [openssl.org #1727] No License error getting

2008-08-07 Thread seeni vasan via RT
Dear Lutz,   Thanks for your reply.   C compiler is built in AIX.   Regds seenivasan.G --- On Wed, 8/6/08, Lutz Jaenicke via RT [EMAIL PROTECTED] wrote: From: Lutz Jaenicke via RT [EMAIL PROTECTED] Subject: [openssl.org #1727] No License error getting To: [EMAIL PROTECTED] Cc:

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread David Schwartz
David Shambroom wrote: You're right: You are completely wrong. /dev/urandom never blocks. See the man page. Is this is the excerpt from the man page you are referring to? A read from the /dev/urandom device will not block waiting for more entropy. As a result, if there

Re: [openssl.org #1727] Resolved: No License error getting

2008-08-07 Thread seeni vasan via RT
Hi Lutz ,   Is this package (openssl-0.9.8h) compatible with AIX 5300-07-03 ? .   In configure file i could see all unix OS except AIX.   I request you bin or source code for AIX supported openssl package.   Eagarly waiting for your reply.   Thanks for your prompt reply.   Regds Seenivasan.G

Re: [openssl.org #1727] Resolved: No License error getting

2008-08-07 Thread seeni vasan via RT
Hi Lutz ,   Is this package (openssl-0.9.8h) compatible with AIX 5300-07-03 ? .   In configure file i could see all unix OS except AIX.   I request you bin or source code for AIX supported openssl package.   Eagarly waiting for your reply.   Thanks for your prompt reply.   Regds Seenivasan.G

Re: [openssl.org #1727] No License error getting

2008-08-07 Thread Kyle Hamilton
IBM limited the C compiler on AIX to only allow a certain number of simultaneous invocations systemwide, based on the number of licenses that have been purchased and installed on the system. If you have 1 simultaneous-invocation license, then anyone else who invokes the compiler will block you

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread Kyle Hamilton
David S: to my knowledge you're at least somewhat incorrect, and part of your advice is rather dangerous to rely upon (from a cryptographic theory perspective). /dev/urandom will never, under normal circumstances, block -- its output is generated algorithmically by the random/urandom device

Re: [uml-devel] /dev/random problems .. or FP registers corruption?!

2008-08-07 Thread Stanislav Meduna
Stanislav Meduna wrote: Am I seeing ghosts? Anyone got other mysterious problems with current UML kernel? Could it be that some state-saving method is corrupting fp registers or something like that? Was there some change in the UML / vanilla kernel recently? Confirmed: I can reproduce openssl

Re: [uml-devel] /dev/random problems .. or FP registers corruption?!

2008-08-07 Thread Richard Salz
Your test is wrong. NaN != NaN. /r$ -- STSM, DataPower Chief Programmer WebSphere DataPower SOA Appliances http://www.ibm.com/software/integration/datapower/ __ OpenSSL Project

Re: [uml-devel] /dev/random problems .. or FP registers corruption?!

2008-08-07 Thread Stanislav Meduna
Richard Salz wrote: Your test is wrong. NaN != NaN. My test is right. Please, look into the code and the previous discussion. The whole point of the test is that the x0/x1 are mysteriously changed from outside of the process. The test will run indefinitely (well until precision suffices)

RE: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread David Schwartz
Kyle Hamilton wrote: David S: to my knowledge you're at least somewhat incorrect, and part of your advice is rather dangerous to rely upon (from a cryptographic theory perspective). You are at least somewhat incorrect too. And yes, it is possible to run out the entropy pool. The amount

Re: Couldn't obtain random bytes in sshd - problem in RAND_poll?

2008-08-07 Thread Theodore Tso
On Thu, Aug 07, 2008 at 02:13:27AM -0700, David Schwartz wrote: If so, this doesn't say that /dev/urandom never blocks. It just says that it will not block waiting for more entropy. In fact, this paragraph is horribly misleading, because it suggests that the worst thing /dev/urandom can do is