Re: PKCS#7 bug in OpenSSL?

2001-07-11 Thread Dr S N Henson
> Alexander op de Weegh wrote: > > Hi all, > if I use the following code to generate a PKCS#7 signed and enveloped > message, I think the message created is not valid. > > X509 *signer, *recipient; > RSA *signkey; > p7 = PKCS7_new(); > PKCS7_set_type(p7, NID_pkcs7_signedAndEnveloped); > PKCS7_

RE: Return code from SSL_write

2001-07-11 Thread Shaw, George
Duhhh. Of course, a foolish code error, declaring bytesWritten as size_t rather than int and comparing with 0. Thanks for your tolerance. I'm regularly amazed by the good humour that you all show to idiot users. G. -Original Message- From: Lutz Jaenicke [mailto:[EMAIL PROTECTED]] Sent

Problems encrypting with RSA and RSA_NO_PADDING

2001-07-11 Thread Patrick Mackinlay
I am having problem encrytping and then decrypting messages using RSA withthe padding set to RSA_NO_PADDING. Most messages work, but some of them don't. By don't I mean the encryption/decryption process works fine except that the decrypted message is nothnig like the original! I have attached

ssl handshake state

2001-07-11 Thread Zhong Chen
In the ssl state machine, there are additional state with prefix "_MT_". Is this for multi-thread? In which case the state machine will go to these states? Is there a API to control it? Thanks. Zhong #define SSL3_MT_HELLO_REQUEST 0 #define SSL3_MT_CLIENT_HELLO

Installation problems with openssl-0.9.6b

2001-07-11 Thread J. Andrew Ozment
I am building and installing openssl-0.9.6b on a Solaris 8 box. I am getting an erro when I try to 'make install'. Any thoughts? I'm not hugely familiar with make files, so this could be pretty simple. # which make /usr/ccs/bin/make # which cc /opt/SUNWspro/bin/cc # ./config shared no-rc5 --pre

finding memory leaks

2001-07-11 Thread C. Gould
I've been tuning up my code and am now trying to locate sources of what appears to be some leaking memory. I've searched the archives and saw a bit of discussion about compiling with -DCRYPTO_MDEBUG set. When I did so there was no indication that any sort of leaks were even trying to be detected

HOW-TO signed applets with openSSL as CA

2001-07-11 Thread Michael Nitsche
hi, what is the trick that java plugin 1.3.0_02 recognizes the demoCA generated by "CA.pl -newca" as a valid CA? i included the demoCA-cert file "/usr/local/ssl/misc/demoCA/cacert.pem" into the global JDK keystore "jdk1.3.0_02\jre\lib\security\cacerts" as a trusted party. nevertheless keys ge

Re: Problems encrypting with RSA and RSA_NO_PADDING

2001-07-11 Thread Greg Stark
This question seems to be coming up more frequently! The message you encrypt must be *less* than the modulus. Greg Stark [EMAIL PROTECTED] - Original Message - From: "Patrick Mackinlay" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesd

Email Error Alert!!!

2001-07-11 Thread deademails
You have attempted to send email address at cardsoft that is not recognised. Please check the email address used. Cardsoft email addresses are either e.g. [EMAIL PROTECTED] for double names use "-"e.g. [EMAIL PROTECTED] for chinese names the double name format and place given names

Does openSSL-Engine offload both the Handshake and Bulk crypto tasks

2001-07-11 Thread Venkatesan, Ganesh
Hi: Could you help me answer this question? I was not able to conclude one way or the other by browsing the source (crypto/engine/vendor-defns). Which piece of code would I look to see how the offload is performed? Thanks, ganesh. ___ Ganesh Venkatesan LAN Access Divi

Hi

2001-07-11 Thread KishoreN
Title: Hi Hi 2 all,        I am a new subscriber to this mailing list. I just started my work on SSH i.e I am a novice to this field of encrytpion.     I want to port PKCS#1 ver 1.5 for my SSH ver 1. In the open source from SSL it's PKCS ver 2 which I can't use. Can any one of you

Extension checking

2001-07-11 Thread Filip Van de Velde
Hello,   Is there somewhere example source code available, how you do X509v3 extension checking with the ssleay library ? I am more specifically interested in which and how the data structures are allocated to check the extensions.   thanks,   Filip