Re: what happens to the IV for aes-128-ecb

Correction, the IV is taken as a parameter on init i.e. would EVP_EncryptInit(&ctx, EVP_aes_128_ecb(), key, NULL) be the correct thing to do? On 3/22/07, Gabriel Maganis <[EMAIL PROTECTED]> wrote: Hello, I believe using the ECB mode for encryption does not make use of an IV but EVP_Encrypt

Re: what happens to the IV for aes-128-ecb

Gabriel Maganis wrote: Correction, the IV is taken as a parameter on init i.e. would EVP_EncryptInit(&ctx, EVP_aes_128_ecb(), key, NULL) be the correct thing to do? ECB mode doesn't need IV. So providing no IV in *_init() wud be the right thing to do. (easier way to find out, just try it in

RE: Process getting locked on Win32

Hi, > I have downloaded & built openssl-0.9.8e.tar.gz on WinXP using > VCExpress 2005. Everything builds fine but when I compile & run a > program using the library, it remains locked even after it > exits. i.e. I can never delete the exe till I reboot the machine Are you sure that the progra

Re: Process getting locked on Win32

On 3/23/07, Mark <[EMAIL PROTECTED]> wrote: Hi, > I have downloaded & built openssl-0.9.8e.tar.gz on WinXP using > VCExpress 2005. Everything builds fine but when I compile & run a > program using the library, it remains locked even after it > exits. i.e. I can never delete the exe till I reb

RE: Process getting locked on Win32

Hi, > From: [EMAIL PROTECTED] > > On 3/23/07, Mark <[EMAIL PROTECTED]> wrote: > > Hi, > > > > > I have downloaded & built openssl-0.9.8e.tar.gz on WinXP using > > > VCExpress 2005. Everything builds fine but when I compile & run a > > > program using the library, it remains locked even after

Re: source code of function i2d_X509()

On 2007.03.22 at 17:45:33 -0700, LIDA WANG wrote: > Could anyone tell me where i can find the source code of function > i2d_X509()? File crypto/asn1/x_x509.c contain macro IMPLEMENT_ASN1_FUNCTIONS(X509) in the line 136 (as of 0.9.8e) This macro is expanded during compilation into definitions of

import a private key in PEM mode to a keystore

Hi all, I want to know how I can import a private key made with openSSL to a Java keystore, is it possible? The private key is made in PEM format. I need it because I have creted the private key with OpenSSL and now I need to use it with a keystore. Thanks, César. _

Need confirmation on a few thoughts abut FIPS and OpenSSH

Hi Folks, With Bill Colvin's help and reading past posts I was able to compile the FIPS module and OpenSSL 0.9.7m and install it successfully on Solaris 10. Thank you. Now I just need confirmation on the following thoughts concerning SSH and using FIPS mode. The default SSH on Solaris 10 is

Re: openssl

On Thu, Mar 22, 2007 at 11:52:25PM -0400, Michael Fedor wrote: > I setup up openssl on RHEl4.. I configure sendmail... But I need to > get a trusted CA.. (The install I used CA.pl).. so they sent me the > following four file > > 1 AddTrustExternalCARoot.crt > 2 UTNAddTrustServer_CA.crt > 3 Networ

Re: Process getting locked on Win32

On Fri, Mar 23, 2007, Rocky S wrote: > Hi, > I have downloaded & built openssl-0.9.8e.tar.gz on WinXP using > VCExpress 2005. Everything builds fine but when I compile & run a > program using the library, it remains locked even after it exits. i.e. I can > never delete the exe till I reboot the

RE: Need confirmation on a few thoughts abut FIPS and OpenSSH

Ron Maltz wrote: > I assume OpenSSH doesn't know about FIPS because there are no configure > options to include if I compile it, thus the precompiled binary is > affected the same way (no FIPS configure options when it was created). Correct your OpenSSH will not operate in FIPS mode unless cha

RE: Root Certificates dir

Hi Marek 1) Can I able to do both EPHEMERAL RSA and DH EPHEMERAL same time ?? Will Openssl call either EPHEMERAL RSA or DH EPHEMERAL depend what ciphers using ?? 2) what do you mean some compatibility problem ?? If SSSLv2 or SSLv3 try to connect my Server (TLS_RSA_WITH_3DES_EDE_CBC_SHA1) will

Re: openssl smime -enc speed question

Hello again, can anybody even confirm that encrypting files via "openssl smime" command consumes very much memory? Regards, Harald Am 22.03.2007 um 19:29 schrieb Harald Latzko: Hi! I encrypt files via openssl on commandline using the following command: openssl smime -encrypt -in /tmp/t

Re: openssl smime -enc speed question

On Friday March 23rd 2007 at 18:55 Harald Latzko wrote: > can anybody even confirm that encrypting files via "openssl smime" > command consumes very much memory? Yes. The PKCS7_encrypt(3ssl) function needs to hold all the data in memory as specified in the BUGS section of its man page. As far a

RE: Root Certificates dir

Hello, > 1) Can I able to do both EPHEMERAL RSA and DH EPHEMERAL same time ?? No, in this situation both algorithms are use for the same purpose (key exchange) so one may be used. > Will Openssl call either EPHEMERAL RSA or DH EPHEMERAL depend what > ciphers using ?? Depending on cipher suites.

Creating an array of values for generated certificates?

Hi All, I'm working on a PERL script that creates the key, then req, then gets cert signed then makes a p12 file using a randomly generated password etc. I have also writting a PERL script that reads through directories looking for files with "BEGIN CERTIFICATE" and then calls x509 to convert the

Re: Import private key with d2i_AutoPrivateKey

Hellstern, Thomas (LfSt) wrote: ... [exec] d2i_AutoPrivateKey returned a key at 0x [exec] ERR_get_error()=218783872 (0x0d0a6080) [exec] ERR_lib_error_string(rc)=asn1 encoding routines [exec] ERR_func_error_string(rc)=LONG_C2I [exec] ERR

Re: source code of function i2d_X509()

i got it. thank you very much From: "Victor B. Wagner" <[EMAIL PROTECTED]> Reply-To: openssl-users@openssl.org To: openssl-users@openssl.org Subject: Re: source code of function i2d_X509() Date: Fri, 23 Mar 2007 13:59:27 +0300 On 2007.03.22 at 17:45:33 -0700, LIDA WANG wrote: > Could anyone t