keys, certs and PRNG

hi! i posted earlier about an error when running OpenSSL on WinCE random number generator:SSLEAY_RAND_BYTES:PRNG not seeded. what is the random number generator used for? is it possible not to use the random number generator, or provide your own random number? thanks cheers ---

error running client

hi! i have written an application using OpenSSL for WinCE. when i run it, i get an error saying random number generator:SSLEAY_RAND_BYTES:PRNG not seeded. from the doc, it seems the only soln i have is to use a .rnd file (WinCE doesn't have a /dev/urandom as far as i know). The problem is i am

lh_insert() error on multi-threaded application (BUG)

Nobody responded, but for the sake of record posterity (in case anyone searches for said bug), I fixed the issue by placing a mutex around the initialization code. This way each thread initializes the CTX without competing. This eliminates the bug. Someone more familiar with the library, and with m

expected FIN

My configuration: I had a webserver with SSL accelerator on that. I wrote a program, which try to get one page back as fast as possible. One a laptop machine, I run 10 threads for the above program, then I always get some strange error for my connection. I installed ssldump (thanks for the h

RAND_status says ok, server key write fails in md_rand...

If RAND_status() returns success (1), can I trust it?    In my server running on AIX, I call RAND_seed followed by RAND_status.  if RAND_status returns success I don't try any other methods to seed the PRNG.    Later during handshake with a client, md_rand.c returns an error complaining there is

Re: Question about IMPLICIT Tagging .

Think you Egon. I will see the mailing list, I've tried some modules but it doesn't work :) . have a nice day . Abdou, Vous manquez d’espace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail sur http://fr.benefits.

Re: Question about IMPLICIT Tagging .

El hallabi-Kettani Abderrahmane wrote: --- Frank Balluffi <[EMAIL PROTECTED]> a écrit : Abdou, I will try to answer at least some of your questions ... If the sixth most significant bit of the identifier octet is 1, the encoding is constructed. Otherwise, the encoding is primitive. when i sai

Re: Question about IMPLICIT Tagging .

--- Frank Balluffi <[EMAIL PROTECTED]> a écrit : > Abdou, > > I will try to answer at least some of your questions > ... > > If the sixth most significant bit of the identifier > octet is 1, the > encoding is constructed. Otherwise, the encoding is > primitive. when i said that i have a cons

Re: Question about IMPLICIT Tagging .

Abdou, I will try to answer at least some of your questions ... If the sixth most significant bit of the identifier octet is 1, the encoding is constructed. Otherwise, the encoding is primitive. You can control the default tagging method at the top of your ASN.1 module. IMPLICIT changes the ta

RSA key size.

Hello. We're trying to get as small RSA private key as possible, because we are short in space (we want to store it on a smart card, so every byte is important). We found a way to cut it a bit by NULLing some pointers inside RSA structure: RSA *key; key->p = NULL; key->q

RE: Secure and non secure connection

Hi: This must be common for an existing c/s application to which SSL must be added. This is exactly what we faced earlier this year. Our server has been around a long time, and has a very strong cross-release capability. We had to accept both secure and non-secure connections, in particular wher

Question about IMPLICIT Tagging .

Hi friends, Im dealing with decoding a BER format, and i want to know if we can have an implicit tag in a constructive method, insted of explicit tag, or it can be used just for primitive method, because i don't have the keyword EXPLICIT or IMPLICIT in a tag "[0]{" as an example , wich is tagged as

Secure and non secure connection

Hi all ! I must secure a daemon with openssl. I would like to be able to accept secure and non secure connections on the same port. Someone has also done something like that ? TIA Frédéric __ OpenSSL Project

unknown protocol, wrong version number, handshake failure

Hi, I'd like to connect an openssl smtp client to a sendmail server (OSF1, sendmail 8.12.10, openssl 0.9.7c) Could anybody help me? When I start sendmail it's all right, sendmail is able to STARTTLS. I checked it with command telnet 25 too. x # /sbin/init.d