openssl smime bug on linux kernel 2.6.8-2

2005-05-19 Thread Eddy Tan
Is it a bug on the kernel or openssl? $ openssl smime -encrypt -in in.txt -out out.enc cert.pem Segmentation fault I´m running debian linux (kernel 2.6.8-2-386) with openssl 0.9.7e-3 (tried to upgrade openssl to 0.9.7g-1 did not help). the same command (same version of openssl) but on

Re: openssl smime bug on linux kernel 2.6.8-2

2005-05-19 Thread Marco Roeland
On Wednesday May 18th 2005 Eddy Tan wrote: Is it a bug on the kernel or openssl? $ openssl smime -encrypt -in in.txt -out out.enc cert.pem Segmentation fault At any rate this is an application bug, not a kernel bug. I?m running debian linux (kernel 2.6.8-2-386) with openssl 0.9.7e-3

openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Hi, There seems to be a very small limit on the size of data that can be handled. Using OpenSSL 0.9.7f 22 March 2005 on windows. Don't know if this is reproducible on Linux. I get the following result signing and encrypting a reasonably small file - a.txt (~5K attached). Note that the

Re: simple question again

2005-05-19 Thread alok
Hello :( As usual trolling.. The particular pages or components retrieved over the SSL link (the one retrieved through URLs beginning with 'https'), will be sent over encrypted links. In addition, the endpoint will be validated. So that if you retrieve

RE: simple question again

2005-05-19 Thread david
The particular pages or components retrieved over the SSL link (the one retrieved through URLs beginning with 'https'), will be sent over encrypted links. In addition, the endpoint will be validated. So that if you retrieve 'https://www.amazon.com/anything/goes/here', you will receive a

Re: simple question again

2005-05-19 Thread Mathias Sundman
On Wed, 18 May 2005, Ken Goldman wrote: All correct for authentication. There are times that public keys or certificates are encrypted using a DH protocol for privacy. You might not want a man in the middle to track where you go, and a certificate is your identity. Correct me if I'm wrong, but

Re: openssl smime data corruption bug

2005-05-19 Thread Dr. Stephen Henson
On Thu, May 19, 2005, Simon McMahon wrote: Hi, There seems to be a very small limit on the size of data that can be handled. Using OpenSSL 0.9.7f 22 March 2005 on windows. Don't know if this is reproducible on Linux. I get the following result signing and encrypting a reasonably small

Problems with the function i2d_DSA_PUBKEY(...)

2005-05-19 Thread Tyler Durden
Hellos, I have some problems with the function i2d_DSA_PUBKEY. I want serialize the public key to send this to a client Java for this can read this public key. I get serialize with openSSL, but the Java client throw an exception of the bad encoded when read this. Java have some functions to read

Re: Problems with the function i2d_DSA_PUBKEY(...)

2005-05-19 Thread Nils Larsch
Tyler Durden wrote: Hellos, I have some problems with the function i2d_DSA_PUBKEY. I want serialize the public key to send this to a client Java for this can read this public key. I get serialize with openSSL, but the Java client throw an exception of the bad encoded when read this. Java have

mini-ASN.1 compiler 0.9.8-dev

2005-05-19 Thread pana
Hi, I don't know how to use the mini-ASN.1 compiler in the openssl 0.9.8-dev version. I need to obtain DER octets to insert in my custom extensions. Their structure is very simple, I use IA5String and BMPString. For example I want something like ...=DER:00:55:00:... Someone can help me? bye pana

Re: simple question again

2005-05-19 Thread Vadym Fedyukovych
Joshua Juran wrote: On May 18, 2005, at 2:45 PM, Miles Bradford wrote: My question on top of that was - How could someone intercept an encrypted message and get to the information inside the certificate without corrupting the encryption that the data is wrapped in - since once the perpetrator

RE: simple question again

2005-05-19 Thread Miles Bradford
So when you send the CSR including the Public Key - you would send them the (your) Private Key, also? Then they sign it with a Private Key they've created? and send it back? -Original Message- From: david [mailto:[EMAIL PROTECTED] Sent: Thursday, May 19, 2005 2:11 AM To: David Schwartz

[ANNOUNCE] OpenSSL 0.9.8 beta 1 released

2005-05-19 Thread Richard Levitte - VMS Whacker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 0.9.8 Beta 1 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The first beta is now released. The beta release is available for

Re: Valgrind suppressions?

2005-05-19 Thread Brad Hards
On Mon, 16 May 2005 02:04 am, Nils Larsch wrote: a lot of these warnings are caused by the fact that openssl uses uninitialized memory when creating random numbers etc. . They should be harmless but you may try to build openssl with the -DPURIFY to reduce the number of warnings Thanks Nils -

Re: simple question again

2005-05-19 Thread Joshua Juran
On May 19, 2005, at 4:03 PM, Miles Bradford wrote: So when you send the CSR including the Public Key - you would send them the (your) Private Key, also? Then they sign it with a Private Key they've created? and send it back? You don't give away your private key to anybody, not even the

bio connect via proxy

2005-05-19 Thread rburchett
Hi Folks, I'm trying to talk (as a client) through a proxy server using OpenSSL bio's in windows. I see where it's possible to set up a bio using BIO_set_proxies and I tried doing BIO_set_proxies(myBio, myProxy) where myBio is a bio and myProxy is a hostname:port (e.g. localhost:80). I cannot

Certificate Authentication - SQL?

2005-05-19 Thread Mike Koponick
Hello Everyone, Please forgive me, I am a newbie. I would like to authenticate my users to a website SQL database via a certificate. Could I create a certificate that would allow a specific user (that the certificate was created for) to authenticate to a website that has the username/password

Re: openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedure. I did not build OpenSSL from source, I just downloaded the windows binary. Is it easy to upgrade to the snapshot? Is there an FAQ or instructions for this for Windows? Cheers, Simon. Simon

Re: openssl smime data corruption bug

2005-05-19 Thread Simon McMahon
Got it built under windows and is working fine now. Thanks very much! Simon. Simon McMahon Work: (07) 31311420 Mobile: (043) 2294180 [EMAIL PROTECTED] 05/20/05 08:58am Hi Steve, Thanks very much for the reply! I am a bit new to OpenSSL and the release procedure. I did not build OpenSSL

Re: mini-ASN.1 compiler 0.9.8-dev

2005-05-19 Thread Dr. Stephen Henson
On Thu, May 19, 2005, pana wrote: Hi, I don't know how to use the mini-ASN.1 compiler in the openssl 0.9.8-dev version. I need to obtain DER octets to insert in my custom extensions. Their structure is very simple, I use IA5String and BMPString. For example I want something like