adding extensions to certificates

hi, i've been looking at the archives list trying to search how to add additional extensions to certificates. i found the thread Adding Application Attributes to X509 Certificates? that is about what i'm asking but using openssl commands and openssl configuration file. eventhoug, i don't know if

Re: adding extensions to certificates

On Fri, Mar 14, 2003, Aleix Conchillo Flaque wrote: hi, i've been looking at the archives list trying to search how to add additional extensions to certificates. i found the thread Adding Application Attributes to X509 Certificates? that is about what i'm asking but using openssl

Strange Problem using RSA PublicEncryption with RSA_NO_PADDING

Hello, I have a problem, I cannot really cover. I'm using public key encryption together with RSA_NO_PADDING. The Key-/Modulus-Size is 128Byte and the message to be encrypted are also 128Byte sized. Now my problem: Using the same (!) binary code (running in a debugging environment or not) it

scatter/gather buffers and SSL_write

Are there any plans to offer a scatter/gather version of the SSL_{read,write} interface? Sometimes openSSL is used as a component in a stream and it gets to the openSSL bit and finds a bottleneck where a scatter-gather buffer has to be put into one contigous block so it can call SSL_write. I

Compiling on Solaris8 x86

I'm trying to get ssh onto my Solaris 8 x86 system. I've installed gcc, binutils, make and some other packages but can not find where the math library is located. Can someone tell me where to get it? gcc -I.. -I../.. -I../../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H

Re: Strange Problem using RSA PublicEncryption with RSA_NO_PADDING

Hello Christoph, Christoph Hansen wrote: I have a problem, I cannot really cover. I'm using public key encryption together with RSA_NO_PADDING. The Key-/Modulus-Size is 128Byte and the message to be encrypted are also 128Byte sized. There exist choosen plain text attacks against RSA... Now my

Re: scatter/gather buffers and SSL_write

the openSSL bit and finds a bottleneck where a scatter-gather buffer has to be put into one contigous block so it can call SSL_write. You don't have to do that -- just loop calling SSL_write multiple times. /r$ __ OpenSSL

Re: Problem changing key/iv on a CIPHER bio

This isn't something I've had to do personally however... It's not something I've wanted to do... Popping and pushing the BIO should work provided you get it right. For this to work properly of course you need change keys and IVs only after a multiple of the block length has been sent,

Proper way to encrypt and decrypt to/from socket BIO

(Note: this question is completely unrelated to the previous re-keying one, since I've taken out the re-key code for now.) I have a socket bio to which I'd like to attach an decrypting bio for reading and encrypting bio for writing. When I attempt this I get the following error roughly 22% of

RE: introduction

On Thu, 13 Mar 2003, Boyle Owen wrote: SSL and mail? Usually, SSL is used to secure the communications between a webserver and its clients. I guess you could encrypt SMTP traffic but I've never done it (no doubt someone else will comment on this). The SMTP verb is STARTTLS. See RFC 3207.

Re: Proper way to encrypt and decrypt to/from socket BIO

On Fri, Mar 14, 2003, Brian Hatch wrote: (Note: this question is completely unrelated to the previous re-keying one, since I've taken out the re-key code for now.) I have a socket bio to which I'd like to attach an decrypting bio for reading and encrypting bio for writing. When I

Re: introduction

The OpenSSL Developers have already done this. Look at the smime command for the openssl program at http://www.openssl.org/docs/apps/smime.html# Also look at http://www.openssl.org/docs/crypto/SMIME_write_PKCS7.html You can sign messages using your private key which allows recipients to verify

Re: ftp implicit ssl connection

It is very unclear to me what type of help you are looking for. There are many SSL/TLS FTP client and server implementations available as open source in addition to the specifications for the protocol which are available as an Internet-Draft. What do you need? well, in the previous 2

Handshake Failure due to bad record mac

hi, I am using a sample client appli on an embedded platform trying to connect to s_server on the linux. client code has set cipher(ALL); there is no client certificate. client side SSL_connect() return -1; Its very strange, some times client sends Alert message with bad mac code and some

Re: ftp implicit ssl connection

I think the question was this: why are you trying to invent another secure FTP protocol when there is already a draft IETF standard for bringing up SSL/TLS command and/or data channels in FTP, as well as several open source implementations of that draft protocol. Caveat: I am not an expert on

Re: Handshake Failure due to bad record mac

Sorry!! SSL_connect is returning with SSL_ERROR_SYSCALL(5) not -1 as previously mentioned and i tried to look at errno it shows 0. Can anyone please point out where i am wrong? client() SSLeay_add_ssl_algorithms(); meth = SSLv3_client_method(); SSL_load_error_strings(); ctx = SSL_CTX_new

Windows does not have enough information to verify this certificate

When we view a certificate issued by some CA, windows may tell us this: Windows does not have enough information to verify this certificate. What does this mean? Does it mean that I have not installed the CA cert as a trusted root CA? __ Do you