Re: ?ASN1 stuff

2005-03-03 Thread Zerg
Hi,all. Sorry for my english. Please help me to clarify the using of the such ASN1 structure in RDNSequence and in SubjectDirectoryAttributes. Why do they have different ASN1 structure, if they play the same role but in different contexts. For what reason there is SET OF? OpenSSL always used

RSA encryption/decryption time confusion (discrepancy?)

2005-03-03 Thread Vishwas
Dear SSLites, Please observe the following operations. I do the following:- key1 = RSA_generate_key(n, e1, NULL, NULL); num = RSA_private_encrypt(plen, ptext_ex, ctext, key1, RSA_PKCS1_PADDING); RSA_public_decrypt(num, ctext, ptext, key1, RSA_PKCS1_PADDING); Average encryption time is = 5463361

Re: RSA encryption/decryption time confusion (discrepancy?)

2005-03-03 Thread Nils Larsch
Vishwas wrote: Dear SSLites, Please observe the following operations. I do the following:- key1 = RSA_generate_key(n, e1, NULL, NULL); num = RSA_private_encrypt(plen, ptext_ex, ctext, key1, RSA_PKCS1_PADDING); RSA_public_decrypt(num, ctext, ptext, key1, RSA_PKCS1_PADDING); Average encryption time

Re: BIO chaining and closing

2005-03-03 Thread Dr. Stephen Henson
On Thu, Mar 03, 2005, Peter wrote: Thanks, So BIO_new_socket would create a BIO around the socket of my choosing which would be more portable than doing BIO_set_fd afterwards? But then the current code uses BIO_new_ssl_connect to create the bio in the first place. I assume I would

Re: ?ASN1 stuff

2005-03-03 Thread Dr. Stephen Henson
On Thu, Mar 03, 2005, Zerg wrote: Hi,all. Sorry for my english. Please help me to clarify the using of the such ASN1 structure in RDNSequence and in SubjectDirectoryAttributes. Why do they have different ASN1 structure, if they play the same role but in different contexts. For what

Job Opportunity

2005-03-03 Thread Porter, Mark
Hi All, A major insurance company (I won't say who, but you can probably figure it out pretty easily) has openings in Portsmouth, NH for people with a background in e-commerce software support. Ideally: UNIX based - Apache - WebSphere - Netegrity SiteMinder - MQ - Tuxedo - Watchfire

Re: Job Opportunity

2005-03-03 Thread Zerg
Hi. We have such ASN structre... I am doing PRIVATEKEY_new(). Is the memory allocated for all the member of this structure? The same question to PRIVATEKEY_free(). And what I have to write in callback in case of using ASN1_SEQUENCE_cb to allocate all nedeed memory for this structure at once.

Allocate memory at once

2005-03-03 Thread Zerg
Hi. We have such ASN structre... I am doing PRIVATEKEY_new(). Is the memory allocated for all the member of this structure? The same question to PRIVATEKEY_free(). And what I have to write in callback in case of using ASN1_SEQUENCE_cb to allocate all nedeed memory for this structure at once.

Re: Allocate memory at once

2005-03-03 Thread Dunceor .
Damnit, stop send everything twice and stop reply with a new topic to old mails. Damn. // Dunceor On Thu, 3 Mar 2005 15:09:11 +0200, Zerg [EMAIL PROTECTED] wrote: Hi. We have such ASN structre... I am doing PRIVATEKEY_new(). Is the memory allocated for all the member of this structure?

Re: Allocate memory at once

2005-03-03 Thread Dr. Stephen Henson
On Thu, Mar 03, 2005, Zerg wrote: Hi. We have such ASN structre... I am doing PRIVATEKEY_new(). Is the memory allocated for all the member of this structure? The same question to PRIVATEKEY_free(). And what I have to write in callback in case of using ASN1_SEQUENCE_cb to allocate all

cant start httpd with ssl

2005-03-03 Thread Plantier, Spencer
Title: cant start httpd with ssl I have reinstalled apache a few times with openssl. I can start httpd with ssl but cant access the page. I am attaching my ssl.conf. I am new to unix, apache and ssl and any help would be appreciated. ssl.conf Spencer Plantier System Network Administrator

Re: cant start httpd with ssl

2005-03-03 Thread Peter
Maybe you should also attach the httpd.conf. Also, as I recall, you have to start up apache with a special flag to get the ssl working. On Mar 3, 2005, at 10:18 AM, Plantier, Spencer wrote: I have reinstalled apache a few times with openssl. I can start httpd with ssl but cant access the page.

RE: cant start httpd with ssl

2005-03-03 Thread Plantier, Spencer
Here is my httpd. conf Thanks, Spencer From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Sent: Thursday, March 03, 2005 10:45 AM To: openssl-users@openssl.org Subject: Re: cant start httpd with ssl Maybe you should also attach the httpd.conf.

Re: cant start httpd with ssl

2005-03-03 Thread Peter
Alright, I remember monkeying around with this a lot before it worked. You should definitely thoroughly read the apache docs and read through the ssl.conf files that come with the install. You need to compile apache with SSL, and assuming thats done, you need to start it with -D SSL. As far as

Does anybody know where certs are installed on Windows?

2005-03-03 Thread Edward Chan
Title: Does anybody know where certs are installed on Windows? Is there a Win32 API or something that can tell me where certs get installed on Windows? Thanks, Ed

Re: Does anybody know where certs are installed on Windows?

2005-03-03 Thread Dr. Stephen Henson
On Thu, Mar 03, 2005, Edward Chan wrote: Is there a Win32 API or something that can tell me where certs get installed on Windows? They are installed in the registry. The precise location isn't officially documented. It is possible to search and access them using CryptoAPI. The relevant

computing square using BIGNUM

2005-03-03 Thread Vishwas
Dear SSLites, Please take a look at my code. It is meant for calculating square of a big number. To test the things I started by providing integers on command line and tried to obtain the values back in integer. But could not get success. Can you figure out my mistake? #includeopenssl/bn.h

Questions about digital signatures

2005-03-03 Thread Edward Chan
Title: Questions about digital signatures Below is code that I got from the Network Security with OpenSSL book to sign a piece of data using a certificate generated and signed by a CA I created (error checking left out). It seems to work. But I'm curious about what sort of information goes

ChangeCipherSpec.

2005-03-03 Thread Kumar, Sunil
Hi, I have a requirement to change CipherSpec periodically from between server and client. Is this same as doing re-negotiate? If so, can anyone tell me how to do it? I am struggling with OpenSSL renegotiate for the past two weeks. Data flows between Server and Client (possibly at the same

RE: cant start httpd with ssl

2005-03-03 Thread Frédéric Donnat
Hi I always buuild my test httpd-2.0.x as follow: [] CFLAGS=-DSSL_EXPERIMENTAL -DSSL_ENGINE ./configure \ --prefix=/path_to_apache_install \ --enable-ssl=shared \ --with-ssl=/path_to_openssl \ After i just get a certificate and a private key for my http 2.0 from an

Re: Questions about digital signatures

2005-03-03 Thread Nils Larsch
Edward Chan wrote: Below is code that I got from the Network Security with OpenSSL book to sign a piece of data using a certificate generated and signed by a CA I created (error checking left out). It seems to work. But I'm curious about what sort of information goes into the resulting

Re: Does anybody know where certs are installed on Windows?

2005-03-03 Thread Bernhard Froehlich
Edward Chan wrote: Is there a Win32 API or something that can tell me where certs get installed on Windows? Thanks, Ed I don't know the API (though I'd bet there is one), but you can use the Certificate Manager snapin for the MMC to check and import certificates. Start MMC, Click

Re: computing square using BIGNUM

2005-03-03 Thread Dr. Stephen Henson
On Thu, Mar 03, 2005, Vishwas wrote: Dear SSLites, Please take a look at my code. It is meant for calculating square of a big number. To test the things I started by providing integers on command line and tried to obtain the values back in integer. But could not get success. Can you

Questions about cert verification

2005-03-03 Thread Edward Chan
Title: Questions about cert verification I've been trying to follow the examples in Network Security with OpenSSL. But I just don't get it. I know, I'm an idiot. Can somebody point me in the right direction with the appropriate API's to use for doing the following: I have a digital signature