Re: client authentication

2005-09-22 Thread Bernhard Froehlich
Frans Gunawan wrote: Hello, How to test client auth with the "openssl s_server" and "openssl s_client" to show that the authentication is using the client auth. Thank you, Frans Quoted from s_server-manpage (http://www.openssl.org/docs/apps/s_server.html): * **-verify depth*, *-Verify

DH shared key generation using Oakley groups.

2005-09-22 Thread joseph k j
hello everyone, I am currently using the following functions,      a = DH_new();    DH_generate_parameters_ex(a, prime_len, generator, &cb ); here i see the prime generated is random, each time i call the function it genrerates a new prime. but how is it possible for me to use predefined p

client authentication

2005-09-22 Thread Frans Gunawan
Hello,How to test client auth with the "openssl s_server" and "openssl s_client"to show that the authentication is using the client auth.   Thank you,Frans  

RE: Reducing SSL3 Buffer Requirements

2005-09-22 Thread PeerSec Networks Inc.
The actual maximum buffer size in SSL is actually closer to 18K; 16K is the maximum plaintext record length, headers and (universally unimplemented) compression allows the record size to grow a bit more. The sockets layer in MatrixSSL is designed for a small memory footprint. The default buffer si

Re: Reducing SSL3 Buffer Requirements

2005-09-22 Thread Marton Anka
On 9/22/05, Martin Del Vecchio <[EMAIL PROTECTED]> wrote: On the transmit side, OpenSSL currently has the ability to sendarbitrarily large messages,one 16K record at a time.  Is there any harm in me deciding to sendlarge messages one 4K recordat a time? This should be perfectly fine. Implementing

SSL Protocol conformance test suite

2005-09-22 Thread Baskaran Mohandass
Hi all, Can you please let me know if there are any SSL protocol conformance test suite avaialable. I would root for Opensource but i will be content if i can get hands on commercial suites too.. Thanks in advance ..baski __

RE: Reducing SSL3 Buffer Requirements

2005-09-22 Thread Martin Del Vecchio
-Original Message- The cause is the maximum record size in the specifications, any compliant client or server might send a record of maximum size which would then reach the requirements stated. If the maximum record length is used an implementation can't do much about that because it has t

RE: Determining certificate type

2005-09-22 Thread Chevalier, Victor T.
Steve, I should have included with the warning, to check for loading errors/no loads after the attempted loading... I have not noticed anything negative from doing it, unless I don't properly error check! Sorry for being confusing. Victor -Original Message- From: [EMAIL PROTECTED] [mail

Re: Reducing SSL3 Buffer Requirements

2005-09-22 Thread Dr. Stephen Henson
On Thu, Sep 22, 2005, Marton Anka wrote: > On 9/13/05, Martin Del Vecchio <[EMAIL PROTECTED]> wrote: > > > > My application needs to support a large number (thousands) of > > connections, so this memory requirement is huge. And my application > > doesn't need to send 16K messages; 4K would be more

Re: Determining certificate type

2005-09-22 Thread Dr. Stephen Henson
On Thu, Sep 22, 2005, Chevalier, Victor T. wrote: > Areg, > > I haven't seen it looking though the 0.9.7 api...but you could try to > load the files into the object containers and see if it holds > it...WARNING: THIS MAY CAUSE YOUR APPLICATION TO NOT FUNCTION PROERLY! > That's what I suggested

RE: OpenSSL 0.9.8 w/ sendmail 8.13.4 (Sorry, last one was HTML)

2005-09-22 Thread Lester, Bob
Hi Victor, I'm new at this so please bear with me. Since the build fails, there's no sendmail executable to run ldd on. Is there something else I should be checking with ldd? Thanks! <*BobL*> | | Check the runpath of the resulting object, run ldd, ... Perhaps your | libraries ar

Re: OpenSSL 0.9.8 w/ sendmail 8.13.4 (Sorry, last one was HTML)

2005-09-22 Thread Victor Duchovni
On Thu, Sep 22, 2005 at 10:12:39AM -0600, Lester, Bob wrote: > Hi Viktor, > > Thanks for the pointer. Tried that and got the same error. Any idea > how to find out if these versions will work together? I've scanned the > sendmail & openSSL doc, but haven't found anything definitive. >

RE: OpenSSL 0.9.8 w/ sendmail 8.13.4 (Sorry, last one was HTML)

2005-09-22 Thread Lester, Bob
Hi Viktor, Thanks for the pointer. Tried that and got the same error. Any idea how to find out if these versions will work together? I've scanned the sendmail & openSSL doc, but haven't found anything definitive. Thanks! <*BobL*> | -Original Message- | From: [EMAIL PROTEC

RE: Determining certificate type

2005-09-22 Thread Chevalier, Victor T.
Areg,   I haven’t seen it looking though the 0.9.7 api…but you could try to load the files into the object containers and see if it holds it…WARNING: THIS MAY CAUSE YOUR APPLICATION TO NOT FUNCTION PROERLY! Hope this helps. Victor From: owner-openssl-users@openssl.org [mail

Re: Reducing SSL3 Buffer Requirements

2005-09-22 Thread Marton Anka
On 9/13/05, Martin Del Vecchio <[EMAIL PROTECTED]> wrote: My application needs to support a large number (thousands) ofconnections, so this memory requirement is huge.  And my applicationdoesn't need to send 16K messages; 4K would be more than enough. I wouldn't mind being able to reduce the size

Re: OpenSSL 0.9.8 w/ sendmail 8.13.4 (Sorry, last one was HTML)

2005-09-22 Thread Victor Duchovni
On Thu, Sep 22, 2005 at 09:30:08AM -0600, Lester, Bob wrote: > Hi All, > > I've cross-posted this on comp.mail.sendmail. Maybe folks here have an > idea? > > I'm running into a compile problem when trying to add TLS support to > sendmail. This is on a SunOS 5.9 box, GCC 3.3.2 (exis

OpenSSL 0.9.8 w/ sendmail 8.13.4 (Sorry, last one was HTML)

2005-09-22 Thread Lester, Bob
Hi All, I've cross-posted this on comp.mail.sendmail. Maybe folks here have an idea? I'm running into a compile problem when trying to add TLS support to sendmail. This is on a SunOS 5.9 box, GCC 3.3.2 (existing), with OpenSSL 0.9.8 (new install - seemed to install fine) and sendma

OpenSSL 0.9.8 w/ sendmail 8.13.4

2005-09-22 Thread Lester, Bob
Title: OpenSSL 0.9.8 w/ sendmail 8.13.4 Hi All, I've cross-posted this on comp.mail.sendmail.  Maybe folks here have an idea? I'm running into a compile problem when trying to add TLS support to sendmail.  This is on a SunOS 5.9 box, GCC 3.3.2 (existing), with OpenSSL 0.9.8 (new

Re: Crypto Blowfish in C++ Builder 5

2005-09-22 Thread Marco Roeland
On Thursday September 22nd 2005 Thomas Wieczorek wrote: > ... > > Is there any problem with the variable "ivec" or is the mistake somewhere > else? The initialisation pointer must point to the same character array (of 8 bytes for blowfish) for both encrypting and decrypting. In your case, by u

Crypto Blowfish in C++ Builder 5, sorry the last one was in HTML, this one is Text

2005-09-22 Thread Thomas Wieczorek
Hello, i want to implement the Blowfish encryption in a Borland C++ Builder project. But when i execute the function in different TForms, i get different encryptions, e.g. ín the first form i get password = "§" and in the other form i get password = "%" when i want to encrypt the same string.

Crypto Blowfish in C++ Builder 5

2005-09-22 Thread Thomas Wieczorek
Title: Nachricht Hello,   i want to implement the Blowfish encryption in a Borland C++ Builder project. But when i execute the function in different TForms, i get different encryptions, e.g. ín the first form i get password = "§" and in the other form i get password = "%" when i want to encr

RE: Crypto CTR (counter) mode question

2005-09-22 Thread Frédéric Donnat
Hi, Sorry but it seems that i forget to say that CTR is "counter" mode (not one of the basic ECB, OFB, CFB, CBC). regards Fred -Original Message- From: Frédéric Donnat Sent: Wed 9/21/2005 11:36 AM To: openssl-users@openssl.org Cc: Subject:Crypto CTR mode question H

RE: one question

2005-09-22 Thread Frédéric Donnat
Hi, > hello I have one questionDose creating a self-signed certificate using > OpenSSL for use with Microsoft Internet Information Services (IIS) 5, > give me 40-bit key or 128-bit key? As far as i know it the key in the certificate is an "asymmetric" one and is use for the authentication and k