Error using BN_rand_range() function

2005-04-27 Thread Angel Martinez Gonzalez
Hello: I want to generate a random number making use of BN_rand_range() function. But I obtain an error at execution time. This is my code: error = BN_rand_range(A, claveDSA_TTP->q); if (error == 1) printf ("A obtenido correctamente\n"); else printf ("Error al obtener A\n"); printf

Re: How to link statically openssl in a dylib

2005-04-27 Thread Qadeer Baig
Thank you Joseph, I also wondered to see ssl libraries in /usr/lib on my machine, when I started using ssl, but before seeing them there I had tried to compile Openssl on my machine so I thought this compilation has placed them there. But still, client says link them statically :( Regards, -- Qad

Re: How to link statically openssl in a dylib

2005-04-27 Thread Qadeer Baig
Hi Rush, Thank you very much for your detailed answer, I'll try this solution. Regards, -- Qadeer On 4/27/05, Rush Manbert <[EMAIL PROTECTED]> wrote: > Hi Qadeer, > > I believe you can just statically link the openssl libraries while > creating a dynamic library. Your dynamic library will just

Re: Missing header on creating smime

2005-04-27 Thread Eddy Tan
> > Content-Type: application/x-pkcs7-mime; > > smime-type=enveloped-data; > > name="smime.p7m" > > > > I certainly wouldn't say that that was "essential". Its an > optional hint as to the PKCS#7 type of the message. OpenSSL > currently doesn't include that header

Re: Smime and aes decryption corruption

2005-04-27 Thread Alex Heatley
Dr. Stephen Henson wrote: Yes I can reproduce your problem. I've applied a fix to OpenSSL and it will appear in the next stable snapshot and 0.9.7h onwards. Thanks for the report. Many thanks. We are quite keen to get the patch, what is the ETA of the next stable snapshot? -- Alex Heatley Unix Sy

Re: openSSL web interface

2005-04-27 Thread Joseph Bruni
http://www.openca.org/ The last time I checked however, the documentation is quite difficult to follow being a rough translation from either German or Klingon. On Apr 27, 2005, at 3:46 PM, Andy Cravens wrote: Is there a free or commercial web interface for openSSL? I'm managing my own CA from t

Re: Smime and aes decryption corruption

2005-04-27 Thread Dr. Stephen Henson
On Fri, Apr 22, 2005, Alex Heatley wrote: > > Running OpenSSL 0.9.7g 11 Apr 2005 on a HP server using HPUX 11.00 compiled > with gcc, I'm seeing a problem with decrypting smime messages that have > been encrypted with aes128. The problem is that at around the 4111 byte > mark the message has a

openSSL web interface

2005-04-27 Thread Andy Cravens
Is there a free or commercial web interface for openSSL? I'm managing my own CA from the command line using CA.pl. It would be nice to have a web interface for managing certificates and maintaining the revocation list from a web browser. I've found a fairly crude set of CGI scripts on the unicor

Re: Usage of DSA parameters p, q and g with DSA_verify() and DSA_sign()

2005-04-27 Thread Nils Larsch
Erik Leunissen wrote: L.S. It is unclear to me whether a DSA object used for signing (using DSA_sign() ), need the parameters p, q and g filled in, or just the private key? An analogous question regarding a DSA object used for verifying (using DSA_verify() ). Does it need the parameters filled i

Usage of DSA parameters p, q and g with DSA_verify() and DSA_sign()

2005-04-27 Thread Erik Leunissen
L.S. It is unclear to me whether a DSA object used for signing (using DSA_sign() ), need the parameters p, q and g filled in, or just the private key? An analogous question regarding a DSA object used for verifying (using DSA_verify() ). Does it need the parameters filled in or just the public

Re: How to link statically openssl in a dylib

2005-04-27 Thread Rush Manbert
Hi Qadeer, I believe you can just statically link the openssl libraries while creating a dynamic library. Your dynamic library will just be bigger than it would be otherwise. The libraries that are named *.a are the static versions. Everything I'm about to say applies to the GNU tool set on Mac

Re: SSLVerifyClient

2005-04-27 Thread Goetz Babin-Ebell
Sven Löschner wrote: You set this with SSLCACertificateFile... Sorry, but didn't help. Hm. What result do you get by an openssl s_client -connect test.net:443 \ -CAfile cacert.pem -verify 5 \ -cert user.pem -key user.key \ -reconnect -showcerts -state -bugs ? with a i

Re: Using ripemd160 causes "nonvalid digital signature" CA

2005-04-27 Thread Sean Covel
Windows 2003 Server, SP1. List of Crypto Providers: Listing Provider 'Default' 1 Algorithm Name Default Key len Min lenMax len RC2 128 40 128 RC4 128 40 128 DES 56 56 56 3

RE: FW: openssl verify conflicts with SSL_connect

2005-04-27 Thread John Hoel
I didn't know about those either. Thanks! __ John Hoel Product Author Skywire Software 2401 Internet Blvd., Suite 201 Frisco, Texas 75034 (972)377-1110 main (425)396-4687 direct [EMAIL PROTECTED] www.skywiresoftware.com -Original Message- From: [EMAIL PROTE

Re: FW: openssl verify conflicts with SSL_connect

2005-04-27 Thread Dr. Stephen Henson
On Tue, Apr 26, 2005, John Hoel wrote: > I also created the server certificate based on the same book and chapter. It > is using the same trusted certificate (root.pem) as the client. This is an > application that connects to itself, outbound as a client and inbound as a > server. Makes for com

Re: Using ripemd160 causes "nonvalid digital signature" CA

2005-04-27 Thread Dr. Stephen Henson
On Wed, Apr 27, 2005, Oliver wrote: > This is what I was beginning to question, I read something that through .NET > V2 ripemd160 appears to be supported in Windows; though research doesn't > produce much at this moment as to whether Windows does or does not support > ripemd160. > The dialog box

Re: How to link statically openssl in a dylib

2005-04-27 Thread Joseph Bruni
OS X ships with openssl pre-installed so you will never find a machine that does not have the dylib's available in /usr/lib. However, the version shipped is 0.9.7b. -Original Message- From: Qadeer Baig <[EMAIL PROTECTED]> Sent: Apr 27, 2005 7:43 AM To: openssl-users@openssl.org Subject:

RE: Using ripemd160 causes "nonvalid digital signature" CA

2005-04-27 Thread Oliver
This is what I was beginning to question, I read something that through .NET V2 ripemd160 appears to be supported in Windows; though research doesn't produce much at this moment as to whether Windows does or does not support ripemd160. Oliver -Original Message- From: [EMAIL PROTECTED] [m

Re: Using ripemd160 causes "nonvalid digital signature" CA

2005-04-27 Thread Nils Larsch
Oliver wrote: Would anyone be aware whether a problem exists using "ripemd160" message digests when creating a self-signed CA in OpenSSL, as opposed to using SHA1. I recently created a self-signed CA using ripemd160 as opposed to SHA1 using Win32 OpenSSL v0.9.7f on a WinXP system; however, when att

Using ripemd160 causes "nonvalid digital signature" CA

2005-04-27 Thread Oliver
Would anyone be aware whether a problem exists using "ripemd160" message digests when creating a self-signed CA in OpenSSL, as opposed to using SHA1. I recently created a self-signed CA using ripemd160 as opposed to SHA1 using Win32 OpenSSL v0.9.7f on a WinXP system; however, when attempting to

How to link statically openssl in a dylib

2005-04-27 Thread Qadeer Baig
Hi, I am using openssl in an application (this application actually is a ".dylib" on Mac OSX). Currently I am linking openssl calls by using "-lssl -lcrypto" linker options. Since this links openssl calls dynamcally therefor I can only use resulting application on the computers where "libssl.dylib

RE: RFC3852 CMS specification

2005-04-27 Thread David C. Partridge
At this stage I'm just sniffing the air to see what options are a available for a small project. D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: 26 April 2005 18:05 To: openssl-users@openssl.org Subject: Re: RFC3852 CMS specif

RE: SSLVerifyClient

2005-04-27 Thread Sven Löschner
> You set this with SSLCACertificateFile... Sorry, but didn't help. Sven __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated