Problems with s_client - client-authentication on command line

2006-10-23 Thread Sebastian
Hi all, I'm trying to automate a test against a server with client authentication. I created a self signed certificate, put it into the servers key database and imported it into a browsers key store (e.g. M$IE cert store). Everything's fine - I'm able to sign on against the server. So far, so

RE: RE: Multithreading problem

2006-10-23 Thread David Schwartz
> I am somewhat confused. Network Security with OpenSSL states quite > clearly that OpenSSL handles multithreading and blocking sockets > fine as long as you give it proper callbacks to acquire locks as > needed. If you go to the book's site and download the code examples > ( http://www.opensslboo

RE: RE: Multithreading problem

2006-10-23 Thread David Schwartz
> > Actually, it's extremely complicated. For example, what do you > > do if you call 'write' and it doesn't return in a reasonable > > amount of time? > > You cannot use 'select' with blocking sockets. If you do, and > > your 'write' blocks (say because only a few bytes could be > written at

Re: openssl default path

2006-10-23 Thread Dr. Stephen Henson
On Mon, Oct 23, 2006, Karthik R wrote: > Can anyone help me to figure out the default installation path for > openssl, i checked the folders under /usr/local > > bin/ games/ lib/ man/ sbin/ > src/ > etc/ include/ libexec/ share/ > > but

Re: [Fwd: Minimal configuration]

2006-10-23 Thread Grant Mills
On 10/23/06, Grant Mills <[EMAIL PROTECTED]> wrote: On 10/23/06, Rodney Thayer <[EMAIL PROTECTED]> wrote: > try libtomcrypt ;-) > > Original Message > Subject: Minimal configuration > Date: Fri, 20 Oct 2006 16:58:15 -0700 > From: Grant Mills <[EMAIL PROTECTED]> > Reply-To: opens

RE: openssl default path

2006-10-23 Thread Behnam Rashidian
Hi,   Maybe use find to search for openssl...   for example    find /* -name "*openssl*" From: Karthik R [mailto:[EMAIL PROTECTED] Sent: Monday, October 23, 2006 1:50 PMTo: openssl-users@openssl.orgSubject: openssl default path Can anyone help me to figure out the default installation path

openssl default path

2006-10-23 Thread Karthik R
Can anyone help me to figure out the default installation path for openssl, i checked the folders under /usr/local   bin/   games/ lib/   man/   sbin/  src/etc/   include/   libexec/  share/   but i couldnt find any. But under /usr/local/bin t

Re: ecdsa certificates and sha256

2006-10-23 Thread Max Pritikin
Hi Nils, This is excellent. It means I don't need to worry about it; which dramatically improves my patience levels. :) (Otherwise I'd have worry about finding time to dig into the code etc and not being an openssl-dev type yet that might be more time than I'd like). I'll give the pat

Re: RE: Multithreading problem

2006-10-23 Thread Richard Conlan
I am somewhat confused. Network Security with OpenSSL states quite clearly that OpenSSL handles multithreading and blocking sockets fine as long as you give it proper callbacks to acquire locks as needed. If you go to the book's site and download the code examples ( http://www.opensslbook.com/) it

RE: RE: Multithreading problem

2006-10-23 Thread Dinh, Thao V CIV B32-Branch
I try to develop a client-server ( not WEB Base) using openssl. What the certificates do I need to load for my client and my server?. Assume that I am a ROOT CA, having root certificate and root private certificate. Please help. I think that my client needs client cert and private key. My server n

Re: ecdsa certificates and sha256

2006-10-23 Thread Nils Larsch
Max Pritikin wrote: (Hello, I'm asking again. Please let me know if you think this would be more appropriately addressed to the openssl-dev list or something.) In summary: Is it possible to use sha256 when generating an ecdsa certificate? I'm currently working on it so please have a little

Re: Performance issues with MIPS 4Kc

2006-10-23 Thread Rick Jones
David Peat wrote: Hi, I’m trying to build some openssl functionality into a product using a MIPS 4Kc based processor running at 225 mips and coming up against significant performance problems. For example, to generate RSA keys (using the call RSA_generate_key()) takes approx 50 seconds. Ba

Re: [Fwd: Minimal configuration]

2006-10-23 Thread Grant Mills
On 10/23/06, Rodney Thayer <[EMAIL PROTECTED]> wrote: try libtomcrypt ;-) Original Message Subject: Minimal configuration Date: Fri, 20 Oct 2006 16:58:15 -0700 From: Grant Mills <[EMAIL PROTECTED]> Reply-To: openssl-dev@openssl.org To: openssl-dev@openssl.org First, sorry for

ecdsa certificates and sha256

2006-10-23 Thread Max Pritikin
(Hello, I'm asking again. Please let me know if you think this would be more appropriately addressed to the openssl-dev list or something.) In summary: Is it possible to use sha256 when generating an ecdsa certificate? Thanks, - max On Oct 19, 2006, at 10:52 AM, Max Pritikin wrote: F

Re: BN_bin2bn problem

2006-10-23 Thread Kevin Coffman
On 10/20/06, Nils Larsch <[EMAIL PROTECTED]> wrote: Olga Kornievskaia wrote: ... > Ok. Thanks. I was hoping that a leading zero was the answer to my real > problem which is. I'm using the above "p" and a generator "g" = 2 (both > are well-known group 2 DH parameters described in the RFC 2412).

Performance issues with MIPS 4Kc

2006-10-23 Thread David Peat
Hi,   I’m trying to build some openssl functionality into a product using a MIPS 4Kc based processor running at 225 mips and coming up against significant performance problems.   For example, to generate RSA keys (using the call RSA_generate_key()) takes approx 50 seconds.   Based on