SSL Programming

2007-03-12 Thread Suchindra Chandrahas
Hi All, I have to write some ssl fuzzers for a web server. Any resources or links would be nice ! Thanks a lot for help, Suchindra Chandrahas - It's here! Your new message! Get new email alerts with the free Yahoo! Toolbar.

Re: OpenSSL with KDevelop

2007-03-12 Thread Victor Duchovni
On Tue, Mar 13, 2007 at 12:05:28AM +0100, timo.tolkki wrote: > Hi, > I'm working to my project using KDevelop and need to use > some OpenSSL functions! > > (OpenSSL seems to be correctly installed on my linux > but when I run my test, prova_SSL.cpp I receive the following message: > > /tmp/cc8cd

OpenSSL with KDevelop

2007-03-12 Thread timo\.tolkki
Hi, I'm working to my project using KDevelop and need to use some OpenSSL functions! (OpenSSL seems to be correctly installed on my linux but when I run my test, prova_SSL.cpp I receive the following message: /tmp/cc8cdyLJ.o: In function `main': prova_SSL.cpp:(.text+0x114): undefined reference to

How do I build fips under win32?

2007-03-12 Thread Wei Weng
Hi all. I followed every single step described in the User's guide about how to build FIPS under win32. I downloaded and installed MinGW and MSYS, started MSYS, untared the openfips-1.1.1.tar.gz, and then went in the directory and did a ./config fips; make; I got this error message after w

Re: Bug in ASN1_item_d2i?

2007-03-12 Thread Nils Larsch
William Lachance wrote: Hi, I'm using the ASN1_item_d2i method for getting extension info out of an x509 certificate. It _appears_ that it's changing the dereferenced address of the 'in' parameter, even though it's supposed to be const. ... ASN1_VALUE * ASN1_item_d2i(ASN1_VALUE **val, const uns

Bug in ASN1_item_d2i?

2007-03-12 Thread William Lachance
Hi, I'm using the ASN1_item_d2i method for getting extension info out of an x509 certificate. It _appears_ that it's changing the dereferenced address of the 'in' parameter, even though it's supposed to be const. This can cause memory corruption later, as it seems that "in" usually corresponds t

RE: Root Certificates dir

2007-03-12 Thread Marek Marcola
Hello, > I have basic question for Client-Sever using SSL. Both Client/Server > have to use SL_CTX_load_verify_locations to load "Trust Root". Yes. > But Client will load its own private/public key, does not need to load > "server" cert at all . Yes, client loads its private key (which has publi

RE: Root Certificates dir

2007-03-12 Thread Dinh, Thao V CIV NSWCDD, K72
Hi I have basic question for Client-Sever using SSL. Both Client/Server have to use SL_CTX_load_verify_locations to load "Trust Root". But Client will load its own private/public key, does not need to load "server" cert at all . Server will load its own private/public key, does not need to load

RE: Root Certificates dir

2007-03-12 Thread Dinh, Thao V CIV NSWCDD, K72
Hi Marek Thank you very, very much. I do not execute c_rehash, So it keep telling me " can not loading". Thank You. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marek Marcola Sent: Monday, March 12, 2007 13:30 To: openssl-users@openssl.org Subject: Re

Re: Root Certificates dir

2007-03-12 Thread Victor Duchovni
On Mon, Mar 12, 2007 at 06:29:36PM +0100, Marek Marcola wrote: > > 1) Do I have concatenant all "Trusted Root" in to one cert ?? ( cat > > root1 root2 root3 > root) ? > > No, but you should execute c_rehash in that directory. Speaking of "c_rehash" has anyone looked into fixing the script so tha

Re: Root Certificates dir

2007-03-12 Thread Marek Marcola
Hello, > I am working on Client-Server applications using SSL. My Server has 3 > or 4 "Trust Root ' certs > I use SSL_CTX_load_verify_locations pointing to a directory which > stores all "Trust Root ' certs . > I created a directory ( T1) and load all "Trust Root" certs into > this T1 dir

Root Certificates dir

2007-03-12 Thread Dinh, Thao V CIV NSWCDD, K72
Hi I am working on Client-Server applications using SSL. My Server has 3 or 4 "Trust Root ' certs I use SSL_CTX_load_verify_locations pointing to a directory which stores all "Trust Root ' certs . I created a directory ( T1) and load all "Trust Root" certs into this T1 directory. My questio

RE: keep alive in ssl programming

2007-03-12 Thread richard zhao
thanks a lot --- David Schwartz <[EMAIL PROTECTED]> wrote: > > > hello,all, > > does anybody know how to set up keep alive signal > in > > openssl programming and how to know the connection > is > > losing by using keep alive signal? thans a lot. > > The same way you do that in TCP. > > DS > >

Re: Compiling openssl command-line tool as a static executable

2007-03-12 Thread Steven Beeckman
On 3/12/07, Victor B. Wagner <[EMAIL PROTECTED]> wrote: On 2007.03.11 at 18:10:01 +0100, Steven Beeckman wrote: >Hi, > >I'm trying to get the openssl command-line tool built as a statically >linked executable (for an ARM simulator), but it appears to be >non-trivial. Running "./

Re: Compiling openssl command-line tool as a static executable

2007-03-12 Thread Victor B. Wagner
On 2007.03.11 at 18:10:01 +0100, Steven Beeckman wrote: >Hi, > >I'm trying to get the openssl command-line tool built as a statically >linked executable (for an ARM simulator), but it appears to be >non-trivial. Running "./Configure no-shared linux-generic32" or even >"./confi