RE: Licenses...

2006-04-10 Thread Ted Mittelstaedt
Hi Eric, I hope you leave the license alone. I have seen increasing examples of GPL code used in embedded products, and for all the philosophizing the GPL people do, they roll over when it comes to suing people. Take for example the ActionTec DSL modem, this is sold by ActionTec and runs

CA embeded in Java client

2006-04-10 Thread Severine
Hi all and thanks in advance for your answers. Here is my problem : I have a c++ ssl webserver and I want to connect to it using a java client. I have manually (with keytool) imported my CA and everything works fine like that. But when my java client is installed, I'd like that no manual things

RE: CA embeded in Java client

2006-04-10 Thread Ambarish Mitra
Yes, the JVM has a keystore for all the trusted certificates, the path is jre/lib/security/cacerts. This file has all the trusted root CA certs. Please import the CA cert in here, and it should work. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Severine

Re: CA embeded in Java client

2006-04-10 Thread Severine
Thx for you answer. Yeah, That is was I did, but what I'm looking for is to do it in my java class. I'm looking for java code to do that. And I eventually would like to hard code the content of the CA in my code. and import the string in the keystore using java code. Ambarish Mitra a écrit

Re: Licenses...

2006-04-10 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Sun, 09 Apr 2006 11:04:12 -0700, Tyler MacDonald <[EMAIL PROTECTED]> said: tyler> I think that these programmers could be more happy and productive tyler> and get back to moving our planet forward if they didn't have tyler> to spend so much time thinking about li

Re: CA embeded in Java client

2006-04-10 Thread Sukanta Kumar Panigrahi
Yeah you can do that using CertificateFactory class which can generate the certificate on the fly from an InputStream. And then you can add the Certificate to the Keystore using setCertificateEntry(...) method. And lastly use the same keystore object with TrustManagerFactory to get the TrustMan

Re: CA embeded in Java client

2006-04-10 Thread Severine
Great, that helps. In fact, I have an external CA file that I use in both my C++ server and my java client. So I'll just need the setCertificateEntry. and the following stuff. Thanks again Sukanta Kumar Panigrahi a écrit : Yeah you can do that using CertificateFactory class which can generate

What are the requirements for using Openssl crypto algorithms without openssl installation?

2006-04-10 Thread Aidaros Dev
Dear all, What are the requirements for using Openssl crypto algorithms without openssl installation? For instance, i want to seperate and compile HMAC code without errors. Thanks in advance.

Re: What are the requirements for using Openssl crypto algorithms without openssl installation?

2006-04-10 Thread Girish Venkatachalam
openssl-0.9.8a/crypto/hmac directory has the hmac interface code. openssl-0.9.8a/crypto/sha directory has the sha implementation and openssl-0.9.8a/crypto/md5 directory has the md5 implementation. Now you take the relevant files, remove the dependencies and compile... All the best! regards,

Re: What are the requirements for using Openssl crypto algorithms without openssl installation?

2006-04-10 Thread Marek Marcola
Hello, > openssl-0.9.8a/crypto/sha directory has the sha > implementation and Yes, but you must pay attention on target platform. For example with ssh256-512 there are some defines which are enabled with "configure" step and are different on different platforms (for example SHA_LONG, SHA_LONG_LOG

snort/postgresql remote ssl logging verification?

2006-04-10 Thread Stefan Kuttler
Hello List, according to some snort/postgresql Howto, I managed to get snort remote logging into a postgresql database. now I have the problem of verification, if the traffic really is SSL-traffic. Doing the following gives some SSL Handshake data: $ lynx https://blade $ $ [EMAIL PROTECTED]

Memory handling bug in 0.9.8a AES assembler code for x86 ?

2006-04-10 Thread Leif Thuresson
When I run the the openssl evptest suite in purify runtime memory usage analysis tool it reports lots of memory segment errors in the AES crypto functions. If I build openssl with AES assembler code disabled the same test runs without any errors from purify. Anyone seen this before? The test was

Re: snort/postgresql remote ssl logging verification?

2006-04-10 Thread Marek Marcola
Hello, 0x 4500 0072 e2df 4000 3d06 3180 0a0a 0a89 [EMAIL PROTECTED] 0x0010 0a0a 0a8a 123a 1538 6f91 5f6f 7e85 bc4b .:.8o._o~..K 0x0020 5018 e420 bd14 1703 0100 20b3 65a3 P.e. ^^ 0x0030 203a 9ed2 6273 2140 d581 ae89 8b1e 2467 .:[

Re: snort/postgresql remote ssl logging verification?

2006-04-10 Thread Stefan Kuttler
Thank you very much for the quick reply. :) On 0, Marek Marcola <[EMAIL PROTECTED]> writes: > Hello, > > 0x 4500 0072 e2df 4000 3d06 3180 0a0a 0a89 [EMAIL PROTECTED] > 0x0010 0a0a 0a8a 123a 1538 6f91 5f6f 7e85 bc4b .:.8o._o~..K > 0x0020 5018 e420 bd14 1703 0100 20b3 65a

OpenSSL, EVP_Digests, memory allocations

2006-04-10 Thread Mikhail Kruk
I'm looking into very high number of memory allocations in our app using OpenSSL. We are doing a lot of SSL_write()s of small chunks of data and each call to SSL_write seems to result in a malloc. We are getting around 10 thousand CRYPTO_malloc() calls a second and I assume that this is very

Using SSL_CTX_load_verify_locations ( )

2006-04-10 Thread Ivander Greco Júnior
Hello, I'm using openssl with a especific hardware using an engine to access it. The engine returns the certificates that I convert to x509 format. I want to add an CA certificate like the SSL_CTX_load_verify_locations does, but i don't have it in a file. How can I do it using the x509 structure ?

RE: Licenses...

2006-04-10 Thread David Schwartz
> Take for example the ActionTec DSL modem, this is sold by ActionTec and > runs embedded Linux. It is the standard modem Qwest sends out for DSL > there > are probably 100,000 or more of these in service in the Western United > States. > Yet you cannot obtain the modified GNU code from the Actio

Re: Licenses...

2006-04-10 Thread Jeffrey Altman
Tyler MacDonald wrote: > And it's not always even that simple: for example, the freeradius > project's postgresql plugin links against the postgresql client library > (naturally). Postgresql may or may not link against OpenSSL. If it does, > then the freeradius-postgresql plugin is breaking

Re: Licenses...

2006-04-10 Thread Tyler MacDonald
Jeffrey Altman <[EMAIL PROTECTED]> wrote: > > And it's not always even that simple: for example, the freeradius > > project's postgresql plugin links against the postgresql client library > > (naturally). Postgresql may or may not link against OpenSSL. If it does, > > then the freeradius-postgr

Re: What are the requirements for using Openssl crypto algorithms without openssl installation?

2006-04-10 Thread Aidaros Dev
 Thanks Girish, Marek and all Girish, what you mean " remove dependencies"? I start the main function from hmactest.c I gathered relevant included files such as  hmac md5 evp.h e_os but each calls other include files...until when I compile without error but i show you some of linking errors : cry

RE: Licenses...

2006-04-10 Thread David Schwartz
> Tyler MacDonald wrote: > > And it's not always even that simple: for example, the freeradius > > project's postgresql plugin links against the postgresql client library > > (naturally). Postgresql may or may not link against OpenSSL. If it does, > > then the freeradius-postgresql plugin is