MGF1 function

2006-03-09 Thread Ken Goldman
Is there some reason that the MGF1 function is not exposed? In the Unix port, one can simply create a prototype and use the function. However, Windows requires explicit export. So unless I rebuild openSSL for Windows, I can't get to the function. -- Ken Goldman [EMAIL PROTECTED] 914-784-76

Re: Encryption / Decryption from file

2006-03-09 Thread Dr. Stephen Henson
On Thu, Mar 09, 2006, Manuel Arguelles wrote: > you mean like this? > > $ openssl enc -d -rc4 -in out.bin -k mysecretkey -nosalt > ¨Å¥ > óVRCÑÆMðù6o > > or maybe using the -K -iv options > > key[0]=0xA0; key[1]=0xA1; > iv[0]=0xB0; iv[1]=0xB1; > BIO_set_cipher(cipher, EVP_rc4(), key, iv, 1); >

Re: Encryption / Decryption from file

2006-03-09 Thread Manuel Arguelles
you mean like this? $ openssl enc -d -rc4 -in out.bin -k mysecretkey -nosalt ¨Å¥ óVRCÑÆMðù6o or maybe using the -K -iv options key[0]=0xA0; key[1]=0xA1; iv[0]=0xB0; iv[1]=0xB1; BIO_set_cipher(cipher, EVP_rc4(), key, iv, 1); can I use openssl enc -d -rc4 -in out.bin -K A0A1 -iv B0B1 ?? On Thu

Re: Encryption / Decryption from file

2006-03-09 Thread Manuel Arguelles
well yes: $ cat in.txt hello $ openssl enc -e -rc4 -out out.bin -k mysecretkey -in in.txt $ openssl enc -d -rc4 -in out.bin -k mysecretkey hello and the openssl api should be compatible with the binary cli right?? Regards On Thu 09 Mar 2006 18:05, Kyle Hamilton wrote: > 'bad magic number' could

Re: Encryption / Decryption from file

2006-03-09 Thread Dr. Stephen Henson
On Thu, Mar 09, 2006, Manuel Arguelles wrote: > > $ openssl enc -d -rc4 -in out.bin -k mysecretkey > bad magic number > > what I'm I doing wrong? maybe the -k -K -iv options? as BIO_set_cipher as > well > maybe? > With the default options the 'enc' command uses a salted key derivation algori

Re: Encryption / Decryption from file

2006-03-09 Thread Kyle Hamilton
'bad magic number' could actually be an OS error. Has that openssl binary worked for you before on other commands? -Kyle H On 3/9/06, Manuel Arguelles <[EMAIL PROTECTED]> wrote: > Hello list, > > I'm new here, I'm trying to encrypt / decrypt text in a file using the rc4, > the problem is that I'

Encryption / Decryption from file

2006-03-09 Thread Manuel Arguelles
Hello list, I'm new here, I'm trying to encrypt / decrypt text in a file using the rc4, the problem is that I'm not getting good results, here's what I'm doing for encryption: #include #include #include #include int main(void) { char buf[1024]; int total, len, written;

Re: Choice of CAs in SSL/TLS handshake

2006-03-09 Thread Peter Sylvester
I think you are right about the current behaviour When filling up the intermediate stack, the x609 verify cert break when the verifydepth is reached as far as I see from the code, but it seems that the ssl library doesn't set a verify depth? But in this case the verifydepth would work I think

Kerberos support

2006-03-09 Thread Prashant Kumar
Hello All,   Does OpenSsl has support for Kerberos Ciphers? Is ther any documentation or example how to use the Kerberos ciphers ?   Thank you for your help.   Regards, Prashant. Yahoo! Mail Bring photos to life! New PhotoMail makes sharing a breeze.

Re: X509 cetificate! HELP!D!=!-!)

2006-03-09 Thread Doug Frippon
Thx Brian that's exactly what I was trying to figure out. For the part on where cert goes and how to tell apps to use it it's ok but almost from the begining, I though that my cert have been made incorrectly so that's why I was postinghere. From that point I should be able to make it work. thanks t

SSL_ERROR_SSL on SSL_write

2006-03-09 Thread CHIN, LEY-HUA \(Ginger\), ALABS
Hi,   I need help in SSL_ERROR_SSL error ..   I got "SSL_ERROR_SSL" often in SSL_write(), I don't know what causes this error and I don't know how to reset or correct this condition.  The docs I found just said it's a "protocol error" and can anyone elaborate more what's "protocol error"?  

Re: X509 cetificate! HELP!D!=!-!)

2006-03-09 Thread Brian Candler
On Thu, Mar 09, 2006 at 10:46:51AM -0500, Doug Frippon wrote: > I'm not sure that I should post it on a OpenBSD mailling list because > my ISAKMPD is working well with pre-shared key. The only bog come from > the certificate. I know that I should create a CA certificate, a > certificate for the OBS

Re: X509 cetificate! HELP!D!=!-!)

2006-03-09 Thread Doug Frippon
I'm not sure that I should post it on a OpenBSD mailling list because my ISAKMPD is working well with pre-shared key. The only bog come from the certificate. I know that I should create a CA certificate, a certificate for the OBSD and one for the remote user. but what should I export to OpenBSD and

Use of engines in 0.9.8a -- "can't use that engine" errors

2006-03-09 Thread Warren Gavin
Hello, I have installed OpenSSL 0.9.8a and have been trying to get it to work with an nCipher nShield HSM. I get the following error when running various openssl commands, e.g. $ openssl genrsa -engine chil 512 can't use that engine 2258:error:84067072:CHIL engine:HWCRHK_INIT:locking missing

Re: X509 cetificate! HELP!D!=!-!)

2006-03-09 Thread Brian Candler
On Thu, Mar 09, 2006 at 09:13:05AM -0500, Doug Frippon wrote: > I most admit that I haven`t tried that search exactly but I ve got > this error with ISAKMPD adn try with that instead of openssl. > Thx > But I'd like to know what should I do with all the certs that I have > to create. Which should g

Re: X509 cetificate! HELP!D!=!-!)

2006-03-09 Thread Doug Frippon
I most admit that I haven`t tried that search exactly but I ve got this error with ISAKMPD adn try with that instead of openssl. Thx But I'd like to know what should I do with all the certs that I have to create. Which should go on the host pc (my OBSD where the CA is and etc...) and wich on the us

RE: Question about password-based encryption key generation

2006-03-09 Thread uno wand
Never mind, I found the function PKCS5_PBKDF2_HMAC_SHA1(). Hi, Could someone point me to an example on how to generate encryption from password using Openssl? I have a java application that uses HmacSHA to generate encryption key from a password, and the encrypted msg is send to the C ap

Re: Question about password-based encryption key generation

2006-03-09 Thread Brian Candler
On Thu, Mar 09, 2006 at 05:33:42AM -0600, uno wand wrote: > I have a java application that uses HmacSHA to generate encryption key from > a > password, and the encrypted msg is send to the C application. Both Java and > C apps shared the same password and salt, and the Java app is using > AES/128

Question about password-based encryption key generation

2006-03-09 Thread uno wand
Hi, Could someone point me to an example on how to generate encryption from password using Openssl? I have a java application that uses HmacSHA to generate encryption key from a password, and the encrypted msg is send to the C application. Both Java and C apps shared the same password and sa

Re: 9.8a Debug version

2006-03-09 Thread jimmy
Venkata Sairam wrote: Hi I am encountering certain problems when building it for 9.8a. I am currently able to get only about 30 pdb files for the 9.8a debug version. I believe it is not the complete set as I am not able to perform any debug operations in the openssl code. Can anyone who has bui

RE: PKCS7_verify with CRL

2006-03-09 Thread Venkata Sairam
Hi, Thanks for the reply. I want to perform only a CRL check and not a chain verification. My CRL is present in the store parameter. I have set the flag for CRL_CHECK for the store parameter. May I know the flag that needs to be set for the int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X50

RE: 9.8a Debug version

2006-03-09 Thread Venkata Sairam
Hi I am encountering certain problems when building it for 9.8a. I am currently able to get only about 30 pdb files for the 9.8a debug version. I believe it is not the complete set as I am not able to perform any debug operations in the openssl code. Can anyone who has build the debug version for

Re: 9.8a Debug version

2006-03-09 Thread jimmy
Venkata Sairam wrote: Hi, I am currently using the debug version of Open SSL 9.7e. I am encountering some problems in getting the debug version of 9.8a. I currently have the dlls for the 9.8a but I don't have the pdb files. I would need to use RSA-PSS using the new dell and perform some debug op