Support for CryptoSwift PCI cards

2005-03-21 Thread Edward Chan
Title: Support for CryptoSwift PCI cards I was told that the CryptoSwift card from SafeNet is no longer being marketed and has been replaced with something called Luna PCI.  Does OpenSSL 0.9.7d support this card?  And if so, do you use the same engine string as used for the CryptoSwift card?

Re: EVP API for symetric encryption - problem

2005-03-21 Thread Dr. Stephen Henson
On Mon, Mar 21, 2005, Rafael Cividanes wrote: > I'm doing a little program to encrypt and decrypt a string using > the EVP API. I couldn't understand if I have to use EVP_DecryptFinal_ex( > ) or just EVP_DecryptUpdate( ) in the decryption operation. The second > function return the entire

X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error

2005-03-21 Thread Riaz Rahaman
Hi, I am facing a quite peculiar issue. I have obtained a certificate from a CA installed it on my Windows machine and had no issues with it. When I install the same cert on my embedded webserver running openssl and connect to it from my windows machine I get the error "X509_V_ERR_UNABLE_TO_

Email address change

2005-03-21 Thread bdoherty
I will be out of the office starting 03/20/2005 and will not return until 12/31/2007. Please start using [EMAIL PROTECTED] thank you _ Confidentiality Notice: The information in this document and attachments is confidentia

EVP API for symetric encryption - problem

2005-03-21 Thread Rafael Cividanes
I'm doing a little program to encrypt and decrypt a string using the EVP API. I couldn't understand if I have to use EVP_DecryptFinal_ex( ) or just EVP_DecryptUpdate( ) in the decryption operation. The second function return the entire recovered plaintext, then I can't understand why EVP_D

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Dr. Stephen Henson
On Mon, Mar 21, 2005, Victor Duchovni wrote: > On Mon, Mar 21, 2005 at 07:28:24PM +0100, Dr. Stephen Henson wrote: > > > > I request client certificates because I need to authenticate a small > > > number of clients (currently 1). When I ask for client certificates, all > > > clients that have a

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Victor Duchovni
On Mon, Mar 21, 2005 at 07:28:24PM +0100, Dr. Stephen Henson wrote: > > I request client certificates because I need to authenticate a small > > number of clients (currently 1). When I ask for client certificates, all > > clients that have a client certificate (often self-signed) volunteer their >

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Dr. Stephen Henson
On Mon, Mar 21, 2005, Victor Duchovni wrote: > On Mon, Mar 21, 2005 at 05:41:56PM +0100, Dr. Stephen Henson wrote: > > > > In my server cache I have: 1900 entries occupying 2.4MBytes (in a btree > > > totaling 7MB on disk) with an average size of 1300 bytes per entry > > > (key + value). 977 of t

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Victor Duchovni
On Mon, Mar 21, 2005 at 05:41:56PM +0100, Dr. Stephen Henson wrote: > > In my server cache I have: 1900 entries occupying 2.4MBytes (in a btree > > totaling 7MB on disk) with an average size of 1300 bytes per entry > > (key + value). 977 of these entries are a mere 327 bytes long (no client > > ce

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Dr. Stephen Henson
On Mon, Mar 21, 2005, Victor Duchovni wrote: > > In my server cache I have: 1900 entries occupying 2.4MBytes (in a btree > totaling 7MB on disk) with an average size of 1300 bytes per entry > (key + value). 977 of these entries are a mere 327 bytes long (no client > cert), the rest of the session

openssl.exe and ssltest.exe returns error

2005-03-21 Thread Peter Norton
Hi All, I have built OpenSSL from the sources (openssl-0.9.7e.tar) on Windows98SE box with VS C++ V5.0 and Masm61. All test programs work except ssltest.exe and openssl.exe. This two seems have problems with LIBEAY32.DLL 0048EC62 - 0xC005 Access Violation: OPENSSL caused an invalid page fault

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Victor Duchovni
On Mon, Mar 21, 2005 at 09:43:06AM +0100, Lutz Jaenicke wrote: > Note: I did not see any other request for such a change of behaviour, > so I do not think that an option to either save the peer certificate > (or not) within the session will be implemented in a later OpenSSL release. > I am askin

Re: Question about bio pairs

2005-03-21 Thread Prashant Kumar
Hello Edward,   Lutz Jaenicke postfix tls (pfixtls.c) explains BIO pair very well. As I understand the internal BIO is used by the SSL API's, that is when you do "SSL_write" [that is feeding the unecrypted data to the SSL engine], you read the encrypted data through the network bio. Similarly, you

OpenSSL 0.9.7d on Solaris 10 -Any known issues

2005-03-21 Thread Alaka Pathy
Hi All, I'm using OpenSSL 0.9.7d binaries on Solaris 10 platform. From the sanity testing it seems to be working on Solaris 10. Is anybody aware of OpenSSL officially supporting Solaris 10 ? Also can you please share your experience, if anyone of you had come across any issues with OpenSSL binari

Re: Any way to not cache peer cert for unverified clients?

2005-03-21 Thread Lutz Jaenicke
On Fri, Mar 18, 2005 at 12:21:08PM -0500, Victor Duchovni wrote: > On Fri, Mar 18, 2005 at 06:02:06PM +0100, Lutz Jaenicke wrote: > > > > I could void the warranty by: > > > > > > #ifdef DONT_TRY_THIS_AT_HOME > > > X509_free(session->peer); > > > session->peer = 0; > > > #endif > > >