AES - Rijndael

2000-12-12 Thread Johannes Baagoe
Hello, Are there any plans, or even a schedule, for a new release of OpenSSL with Rijndael (AES) support ? -- Johannes Baagoe __ OpenSSL Project http://www.openssl.org User Support Mailing List

HP OpenSSL 64 Bit

2000-12-12 Thread Cliff Sarginson
Hello, I am not sure if this is the right place for this .. I compiled the HP-UX 11 port of OpenSSL as a 64 bit library, and "make test" fails... (PA.HPUX):/homes/csargins/openssl-HP-64/openssl-0.9.5amake test testing... ./destest Doing cbcm *** Termination signal 138 Stop. *** Error

Re: AES - Rijndael

2000-12-12 Thread Robert Sandilands
There seems to be two ways... The newest CVS contains updates for Rijndael and I posted patches for 0.9.6 for Rijndael. So go either to the CVS repository for the newest and bestest or look in the archives for my patch. Robert Sandilands Johannes Baagoe wrote: Hello, Are there any plans,

RE: what is ISO 9796?

2000-12-12 Thread Bernard Dautrevaux
-Original Message- From: Martin Szotkowski [mailto:[EMAIL PROTECTED]] Sent: Monday, December 11, 2000 5:22 PM To: [EMAIL PROTECTED] Subject: Re: what is ISO 9796? 'net. Although I appreciate that this standard covers data encryption, I don't think it's that relevant to this

CRLs and IE

2000-12-12 Thread Dave R
Hi, I have a test SSL web server that is working fine. With my OpenSSL based CA, I revoked the certificate that the web server is using, and I generated a CRL, which was then served by the web server. Netscape pulled it down OK, and now correctly prevents connections to this server. However

Re: AES - Rijndael

2000-12-12 Thread Johannes Baagoe
Robert Sandilands wrote: There seems to be two ways... The newest CVS contains updates for Rijndael and I posted patches for 0.9.6 for Rijndael. So go either to the CVS repository for the newest and bestest or look in the archives for my patch. OK, thanks a lot. However, I have a specific

RSA keys

2000-12-12 Thread antonio . barrera
Hi, could someone tell me how to create a pair ob public+private RSA keys using the openssl utilities? Thanks! Toni __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: what is ISO 9796?

2000-12-12 Thread John . Airey
And anyway, if ISO9796 is a standard about digital signature, shouldn't it be examined to see if OpenSSL can support it? The interesting thing about the ISO is that it takes years to get around to making standards or changes to standards. Have a look at how often ISO 3166-1 gets changed.

Re: what is ISO 9796?

2000-12-12 Thread Holger Reif
ISO 9796 is been described in Menezes, Oorschot, Vanstone: Handbook of Applied Cryptography, CRC Press 1997. Be aware there was some flaw in one specific standard (they go from -1 to -4) discovered around a year ago. Martin Szotkowski schrieb: have anybody description (or short description)

No Subject

2000-12-12 Thread Dave Anderson
__ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Non-repudiation

2000-12-12 Thread J. Chong
Hi all, Does SSL provide non-repudiation service and if it does how? Thanks. Wish you all the best Best regards, Jordan CN CHONG __ OpenSSL Project http://www.openssl.org User Support

openssl.cnf file for NT

2000-12-12 Thread Andrej . Koman
Is there special config file openssl.cnf for NT? I'm having trouble reading this file on NT 4.0 (empty parameters and such messages) Can you give me some hints? Andrej Koman __ OpenSSL Project

how to set up a simple https between two PCs

2000-12-12 Thread Dave Anderson
Hi, I've had a good look through all the docs and tools available, and I think I'm nearly there, but it would be great if someone who knows more about this could help a bit, as I'm getting a bit confused. Basically, I have an Apache webserver, running on Linux. I want to make one secure site on

Equifax web server cert not validated by IE

2000-12-12 Thread Paulius Bulotas
Hello, a few days ago I generated CSR and sent it to Equifax, now we have web server certificate, and when connecting to server, hostname matches, but IE can't validate our cert using Equifax CA's public cert (which is distributed with IE) and our cert is signed by that CA. What could be wrong

Re: Non-repudiation

2000-12-12 Thread rsalz
Does SSL provide non-repudiation service and if it does how? Thanks. Wish you all the best The SSL protocol requires both sides to share a session key, so NR isn't possible using the protocol -- either side could claim the other (a) forged data; or (b) allowed the key to escape. The

Instalation

2000-12-12 Thread Andrey Tverdokhlebov
I'm trying to compile OpenSSL on NT machine. It runs for a while, but stops at this error: Building OpenSSL cl /Fotmp32dll.dbg\rand_win.obj -Iinc32 -Itmp32dll.dbg /MDd /W3 /WX /Zi /Yd /Od /nologo -DWIN32 -D_DEBUG -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -DDEBUG -DDSO _WIN32 /Fdout32dll /GD

Re: rsaref/crypto in openssl

2000-12-12 Thread Richard Levitte - VMS Whacker
From: "Mehmet M.Musa" [EMAIL PROTECTED] mmmusa Since the RSA patent has expired, we don't have to use rsaref mmmusa anymore within the US. Now is the openssl group gonna merge mmmusa rsaref.a and libcrypto.a? Merge? Why? Isn't tossing RSAref out the closest window a better idea? -- Richard

Re: Solaris 8 - SSH Bug

2000-12-12 Thread Lutz Jaenicke
This problem does not belong to openssl-dev. It probably does not even belong to openssl-users! Please check out the OpenSSH portable project with its own mailing list [EMAIL PROTECTED] Anyway, please check out the contents of "config.log" on the Solaris machine. You should find the reason why

Re: Random State problem

2000-12-12 Thread Doug Grove
The key might be the following: ... SSLEAY_RAND_BYTES:PRNG not seeded:md_ rand.c:474: ... EGD didn't provide enough entropy for my HPUX box. There is a program called PRNG out there somewhere. Solaris and HP don't have a built in random number generator like Linux. If you run EGD for a while

Re: rsaref/crypto in openssl

2000-12-12 Thread Scott Goodwin
Yeah, get rid of RSAREF. What I'd really like to see is the ability to compile OpenSSL with RSA's BSAFE Crypto-C toolkit right out of the box. You can do it with 0.9.5a if you apply a patch you'll find at http://www.lymeware.com/download_fw.html. Why not use the ciphers in OpenSSL? Because I

Re: Install on MacOSXServer

2000-12-12 Thread Chris
Hi, I got openssl 0.9.6 to build on OSX Server with the previous suggestion of adding -DUSE_TOD to the apps/Makefile CFLAGS= -DMONOLITH -DUSE_TOD $(INCLUDES) $(CFLAG) I previously had it at the end: CFLAGS= -DMONOLITH $(INCLUDES) $(CFLAG) -DUSE_TOD since this is all new stuff for me I

Re: rsaref/crypto in openssl

2000-12-12 Thread Cliff Sarginson
Hello, I recently posted a problem concerning the 64 bit HP port of OpenSSL, but received no replies. I take it therefore this is not the right list. I cannot compile HP 11.0 OpenSSL in 64 bit mode, does anyone have a clue which list or person I can ask about this ? Thanks you for your help