Re: camellia and uint

2007-01-12 Thread Masashi FUJITA
Hi, On Thu, 20 Jul 2006 08:31:35 -0600 The Doctor <[EMAIL PROTECTED]> wrote: > Upon this mornings compile on my BSD boxes, > > camellia was found to have uint's and inttypes.h which has > to be corrected to U-int's and commenting out respectively. I think you can compile on the BSD with Camelli

about problem on asn1_item_ex_combine_new

2007-01-12 Thread Satoru Kanno
Dear All, We found code which may be a bug at asn1_item_ex_combine_new on crypto\asn1\tasn_new.c in OpenSSL0.9.8b. (The lastest version also has same problem.) Following: static int asn1_item_ex_combine_new(ASN1_VALUE *

Re: RSA vs ECC: relative bruteforceability?

2007-01-12 Thread Philippe Bulens
This website might also interest you if you want to get some ideas about relative security of cryptosystems : http://www.keylength.com/ I'm told that EC (elliptic curve) crypto with 256 bit keys may be as strong as the RSA with 16000 bit keys. Sounds incredible to me. Could someone

Re: Problems with ciphers (handshake failure)

2007-01-12 Thread caplechu
Marek Marcola wrote: > > Hello, >> I am having problems using a certificate created with OpenSSL. I have >> created a PEM certificated with its private key using the next commands: >> - openssl genrsa -des3 -out Privatekey.pem 1024 >> - openssl req -new -x509 -key Privatekey.pem -out MyCertifica

Diffie-Hellman Auth Example

2007-01-12 Thread Fernandes Gabardo
Hi, Does anyone have a Diffie-Hellman authentication example? Thanks, Fernandes. Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/gree

SSLv23_method and TLSv1 client hello

2007-01-12 Thread Philipp Hancke
Hi, I have a question about the creation of SSL contexts, client hello and zlib compression. For example, executing `openssl s_server -accept ... -key ... -cert ...` uses SSLv23_server_method by default. (note: I use openssl 0.9.8d) Connecting to this server using `openssl s_client -connect ...

-X64 not -X 64 for AIX 5.3

2007-01-12 Thread Justin Johnson
Hello, When trying to build openssl 0.9.8d on AIX 5.3 using IBM's compiler I get the following error. I include my config output first, followed by the error, followed by the way I resolved it and the bug I think I found. svnadm /svn/static/build/openssl-0.9.8d>env CC=cc ./Configure aix64-cc no

PRNGD home page has moved

2007-01-12 Thread Lutz Jaenicke
Hi, the homepage of the PRNGD (Pseudo Random Number Generator Daemon) has moved. It can now be found at http://prngd.sourceforge.net/ Best regards, Lutz __ OpenSSL Project http://www.openssl.

Problem building Apache2 with openSSL

2007-01-12 Thread craig
I have a problem with building Apache2, but it may be more familiar to the folks at this forum than the general Apache2 community. My server has OpenSSL/0.9.7e-p1, and I'm trying to upgrade Apache2 from 2.2.3 to 2.2.4. My Apache2 configuration command can be as simple as ./configure --pre

Re: speed test with cavium engine

2007-01-12 Thread Elwin Stelzer Eliazer
Thank you for all the useful input, and sorry about my delay in response. The problem i noticed was some of the cavium related IOCTLs are failing in my setup, and it seemlessly falls back to the default algorithms. By default, only RSA is offloaded, and you are right DSA is not offloaded to hardwa

with Cavium Engine, hitting unable-to-get-issuer-cert-locally

2007-01-12 Thread Elwin Stelzer Eliazer
Hi, I tried the s_client and s_server programs with cavium acceleration, and i am getting the following error at the client side: X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY, and the handshake aborts. Shown below is how i invoked the client and server side. # ./openssl s_server # ./openssl s_cl

Re: with Cavium Engine, hitting unable-to-get-issuer-cert-locally

2007-01-12 Thread Elwin Stelzer Eliazer
Following is a summary of some more observations related to this, for your refence: Case-1: No engine used, both at s_client and s_server side In this case, the programs are working fine, and the client and server are able to send messages. Case-2: s_client with cavium engine, and s_server def

Escape sequence for Configure script's colon-delimited lines.

2007-01-12 Thread Manish Mehta
Hello: I am trying to customize "aix-cc" configuration for myself. In the Configure script in OpenSSL, the line reads as follows: "aix-cc", "cc:-q32 -O -DB_ENDIAN -qmaxmem=16384::-qthreaded:AIX::BN_LLONG RC4_CHAR::aix_ppc32.o::dlfcn:aix-shared::-q32:.so.\$(SHLIB_MAJOR ).\$(SHLIB_M

SSL_CTX_load_verify_locations on linux

2007-01-12 Thread Edward Chan
Hi there, Does anybody know where the trusted root certificates can be found on linux? I'm basically looking for the equivalent to the Windows certificate store on Linux so I can point SSL_CTX_load_verify_locations() to these trusted root ca certs. Or is there a way I can use a default locati