Re: Problem compiling OpenSSL 0.9.7g for Solaris & Apache?

2005-04-25 Thread Joseph Bruni
Just a shot in the dark, but shouldn't your LD_LIBRARY_PATH be set to /usr/local/openssl/lib? (I appended the "lib" part). -Joe On Apr 25, 2005, at 11:36 PM, ohaya wrote: I set the LD_LIBRARY_PATH to "/usr/local/openssl:$LD_LIBRARY_PATH" before doing the Apache build, and used: smime.p7s Descri

Problem compiling OpenSSL 0.9.7g for Solaris & Apache?

2005-04-25 Thread ohaya
Hi, I am trying to build Apache with SSL support, and so I compiled OpenSSL 0.9.7g using gcc 2.95.3 on a Solaris 9 system. The config I used was: ./config -fPIC shared -prefix=/usr/local/openssl -openssldir=/usr/local/openssl The OpenSSL compile/build seemed like it went ok (no errors), and the

Re: SSLVerifyClient

2005-04-25 Thread Goetz Babin-Ebell
Sven Löschner wrote: Hello, I am using openSSL 0.9.7b on a SuSE 9.0 machine. I try to configure a site using Client-Verify. But in IE I get an endless loop, and in Firefox I get "Error -8101". The Log-File says [error] Re-negotiation handshake failed: Not accepted by client!? chid pid 10800 exi

Re: Problem with BN_rand_range

2005-04-25 Thread Angel Martinez Gonzalez
Hello: The error that I obtained is at execution time: "The instruction in "0x1002a31a" make a reference to memory in "0xd4c0ada7". The memory can not be "read"." I send, too, an image of the error. Thanks. - Original Message - From: "Nils Larsch" <[EMAIL PROTECTED]> To: Sent: Frida

Re: sk_X509_CRL_delete

2005-04-25 Thread Tan Eng Ten
How abt adding decreasing the iterator (i--) in the if-block so it looks like: for(i=0; i < num_crls; i++) { crl = sk_X509_CRL_value(crl_stack, i); . X509_verify_CRL(); if (above check fails) { sk_X509_CRL_delete(crl_stack, i) i--; } } Does it work for you? __

openSSL smime with file attachment

2005-04-25 Thread Eddy Tan
Hi all, anyone knows how to send s/mime with file attachment? It´s pretty simple to pipe openssl to sendmail with a normal message body: openssl smime [...] | sendmail [EMAIL PROTECTED] But what if I need to send the email with a secure attachment too? Thanks in advance, Eddy _

Client validation troubles on z/OS.

2005-04-25 Thread John Young
We are having an issue getting client validation to work on z/OS, with OpenSSL 0.9.7d. We have the same code running on several Xnix platforms and Windows, with no trouble. On z/OS, following SSL_do_handshake, we are receiving a -1 return. Following the failure we receive the following from ERR_

SSLVerifyClient

2005-04-25 Thread Sven Löschner
Hello, I am using openSSL 0.9.7b on a SuSE 9.0 machine. I try to configure a site using Client-Verify. But in IE I get an endless loop, and in Firefox I get "Error -8101". The Log-File says [error] Re-negotiation handshake failed: Not accepted by client!? chid pid 10800 exit signal Segmentatio

Re: Using RC4 vs EVP_CIPHER

2005-04-25 Thread Sean Covel
I'm continuing to test. I've noticed something else strange with the EVP_ functions... I have a test program that reads in text file "A" a chunk at a time, encrypts the chunk, then writes it out to "B". It then reads "B" back in a chunk at a time, decrypts it, and writes it back out to "C". Simp

Re: whats cswift engine error?

2005-04-25 Thread Prashant Kumar
cswift is one of the engine (hardware accelerator) module supported by openssl. Did you call any engine API in your code?   - Prashant.vijay basav <[EMAIL PROTECTED]> wrote: hi i am working on vxworks using openssl-0.9.7e . SSL_read is giving me problems. when checked with error number it says c

SMIME_read_PKCS7 error

2005-04-25 Thread John Moore
Hi: I'm an openssl newbie trying to write code to sign&encrypt followed by decrypt&verify. I'm able to do these functions individually and the sign&encrypt part works to produce an S/MIME encoded output. When I try to decrypt&verify, the decryption returns properly but when I try to parse the d

Re: RSA Public Key Cryptography.

2005-04-25 Thread Haikel Mejri
Hi, Yes Layala, you can use the following command line : openssl genrsa -out your_file 1024 where 1024 reprents the number of bits of your key. Best Regards Le lun 25/04/2005 à 09:47, Layla a écrit : > Hi all, > I would like to use RSA public key cryptography. My question is: Is it > possible

Re: What is openssl.so?

2005-04-25 Thread Herman
Marco Roeland wrote: On Monday April 25th 2005 Herman wrote: On my system, openssl.a is now the new version that I built from the tar ball and openssl.so is an old version that came with the original installation. Intuitively, it doesn't look like a good idea to have two different versions of t

Using RC4 vs EVP_CIPHER

2005-04-25 Thread Sean Covel
Now that I've updated to the latest OpenSSL (7g) I've got a question: I implemented some RC4 functionality using the low-level rc4 functions.( RC4_Set_Key, RC4), and its working fine. The OpenSSL documentation recommends using the EVP_* functions instead of the lower level functions. It seems li

Re: What is openssl.so?

2005-04-25 Thread Marco Roeland
On Monday April 25th 2005 Herman wrote: > On my system, openssl.a is now the new version that I built from the tar > ball and openssl.so is an old version that came with the original > installation. Intuitively, it doesn't look like a good idea to have two > different versions of the library in

Re: What is openssl.so?

2005-04-25 Thread Herman
Schneider John wrote: .so = shared object... like a DLL. .a is a static library. Sometimes people append the version to a .so library and then have a link pointing to whichever version they want. e.g. "ln -s openssl.so.0.9.6b openssl.so" This will create the link... then anything going after o

Re: RSA Public Key Cryptography.

2005-04-25 Thread Herman
Layla wrote: Hi all, I would like to use RSA public key cryptography. My question is: Is it possible to generate RSA keys from command line and have them stored in a file in order for a C application to access/use them? If not, then what is it the best way to go about this? Probably the easiest

Re: 0.9.7g doesn't compile on Win32

2005-04-25 Thread Sean Covel
Steve, Dr. Stephen Henson wrote: >>I was able to build 0.9.7f for Win32 successfully. >> >>Downloaded and tried to build 0.9.7g, and its a no-go. >> >>Is there a working mak file for Win32 for 0.9.7g? >> > > Compiles with no problems here. I'm assuming you are using VC++ since you > mention ntdll

Re: Encrypting binary files with evp symmetric cipher - Error

2005-04-25 Thread Rafael Cividanes
Thanks for your help. I'll try it! Rafael Nils Larsch wrote: Rafael Cividanes wrote: Hi, I'm trying to do a program to encrypt and decrypt a file using EVP API. I read the input file (plaintext) in binary mode using a buffer of 100 bytes to encrypt. The function restult_aes is the encrypt

whats cswift engine error?

2005-04-25 Thread vijay basav
hi i am working on vxworks using openssl-0.9.7e . SSL_read is giving me problems. when checked with error number it says cswift engine error? what could be the problem? could somebody help me out thaks in advance vijay Do you Yahoo!? Yahoo! Small Business - Try our new resources site!

how can i get the length of DES_ncbc_encrypt's output

2005-04-25 Thread luo bo
Hi When I call the DES_ncbc_encrypt to encrypt the cleartext.I sometimes find the output ciphertext has zero value in it,so i can't use strlen(output) to get the length of the ciphertext.how can i do to get the right length. this is the function's definition void DES_ncbc_encrypt(const unsigned

RE: What is openssl.so?

2005-04-25 Thread Schneider John
.so = shared object... like a DLL. .a is a static library. Sometimes people append the version to a .so library and then have a link pointing to whichever version they want. e.g. "ln -s openssl.so.0.9.6b openssl.so" This will create the link... then anything going after openssl.so (and able t

Re: Connection time out problem

2005-04-25 Thread Marco Roeland
On Monday April 25th 2005 Aftab Alam wrote: > i am using openssl for nonssl communicaton using BIO and ssl communication > using bio+ssl. > > It is working fine. But i have to set connection timeouts. Can anyone help > me how do i achieve that. > > For SSL i have used SSL_set_timeout for session

Connection time out problem

2005-04-25 Thread Aftab Alam
Hi All, i am using openssl for nonssl communicaton using BIO and ssl communication using bio+ssl. It is working fine. But i have to set connection timeouts. Can anyone help me how do i achieve that.   For SSL i have used SSL_set_timeout for session timeout from creation of session and i

Password Protected Keys

2005-04-25 Thread David Woodroffe
I am trying to access module protected keys with openSSL on an nCipher HSM. We have been able to do this both using the with-nfast predicate and through the openSSL code ENGINE_load_private_key. These both prompt interactively for the password to access the keys. Does anyone know of anyway that thi

RSA Public Key Cryptography.

2005-04-25 Thread Layla
Hi all, I would like to use RSA public key cryptography. My question is: Is it possible to generate RSA keys from command line and have them stored in a file in order for a C application to access/use them? If not, then what is it the best way to go about this?   Thanks in advance. Layla.__