What is the difference netween SSL connection and session?

2007-04-04 Thread Bhat, Jayalakshmi Manjunath
Hi All, Please can any one tell me relationship between SSL_CTX,SSL,SSL_SESSION. And also the difference netween SSL connection and session? Regards, Jaya, __ OpenSSL Project http://www.openssl.org

Unix connecting to MS AD certificate help

2007-04-04 Thread sal001
I require a Unix client to connect to a Windows Active Directory Server in querying various Active Directory fields. The issue I am having at the moment is making a secure connection over LDAPS (SSL). I can connect and query fine over LDAP, but there seems to be an issue with establishing a secure

RE: Fips - Solaris 10 error

2007-04-04 Thread capstone
Anyone have any insight as to what might be going on here? _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of capstone Sent: Monday, April 02, 2007 6:48 PM To: openssl-users@openssl.org Subject: Fips - Solaris 10 error I am trying to compile FIPS 1.1.1 in a full root

infinate loop with DTLS

2007-04-04 Thread badra
Dear all, I get a problem in reading and writing a buffer longer than 1500 octets when using DTLS. There is any message error, but when I call SSL_write or SSL_read, the client enter in an infinate loop. Any suggestion please? Best regards, Badra

Re: OCSP_basic_verify error

2007-04-04 Thread Marek Marcola
Hello, > I am getting the following error in calling OCSP_basic_verify(): > > error:04067084:rsa routines:RSA_EAY_PUBLIC_DECRYPT:data too large for modulus > > Could somebody advice what is going wrong? In RSA you can encrypt/decrypt only as much data as RSA key size (size of RSA key is the size

RE: EVP Envelope & PKI Confusion...

2007-04-04 Thread David Schwartz
> Sorry to be rude, but your post just told me what I already know :), If that's true, then you are asking the wrong questions. > my lack of knowledge at security, but didn't help me a bit :( > (not sure if the post was meant to be helpful). I told you exactly what you need to do. Spend several

OCSP_basic_verify error

2007-04-04 Thread Bin Lu
Hi, I am getting the following error in calling OCSP_basic_verify(): error:04067084:rsa routines:RSA_EAY_PUBLIC_DECRYPT:data too large for modulus Could somebody advice what is going wrong? Regards, -wenwu __ OpenSSL Project

Information about M_ASN1_I2D_len_IMP_opt and more

2007-04-04 Thread Bhat, Jayalakshmi Manjunath
Hi All, Where can I find more information about M_ASN1_I2D_len_IMP_opt M_ASN1_I2D_len_EXP_opt M_ASN1_D2I_get_IMP_opt M_ASN1_D2I_get_EXP_opt Functions. Regards, Jaya __ OpenSSL Project http://www

Re: Books on openssl

2007-04-04 Thread Marek Marcola
Hello, > I am a newbie with both openssl & crypto . Do you recommend on any > good books ( high level detail/process, without heavy math/theory) in > this area beside: > > 1) Network Security with openssl > > 2) SSL And TLS Design and building Security System. Look at: Secure Programming Cookboo

Re: openSSL generated crt file return error when i want to import it using keytool

2007-04-04 Thread Marek Marcola
Hello, > > Thank you for reading my post > > I have signed a private key using open ssl, the command i used is like: > > > > openssl ca -out server.crt -infiles server.csr > > > > now when i try to import it into keystore.jks using java keytool it return > > an error like: > > > > > > keytool

Re: openSSL generated crt file return error when i want to import it using keytool

2007-04-04 Thread legolas
legolas wrote: > > Hi > Thank you for reading my post > I have signed a private key using open ssl, the command i used is like: > > openssl ca -out server.crt -infiles server.csr > > now when i try to import it into keystore.jks using java keytool it return > an error like: > > > keytool -i

Books on openssl

2007-04-04 Thread Dinh, Thao V CIV NSWCDD, K72
Hi I am a newbie with both openssl & crypto . Do you recommend on any good books ( high level detail/process, without heavy math/theory) in this area beside: 1) Network Security with openssl 2) SSL And TLS Design and building Security System. Thank You TD

Re: EVP Envelope & PKI Confusion...

2007-04-04 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Usman Riaz schrieb: >Sorry to be rude, but your post just told me what I already know > :), > my lack of knowledge at security, but didn't help me a bit :( (not sure if > the > post was meant to be helpful). Davids post was meant in the

Re: Newbie Questions

2007-04-04 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rocky S schrieb: > 1) I have installed openssl sources. In the certs directory, > there are various certificates. I looked at a couple of > them - aol1.pem & vsign1.pem. > > The vsign1.pem starts with [...] > The aol1.pem directly starts with BEGIN_C

Re: EVP Envelope & PKI Confusion...

2007-04-04 Thread Usman Riaz
From:  Goetz Babin-Ebell <[EMAIL PROTECTED]>Reply-To:  openssl-users@openssl.orgTo:  openssl-users@openssl.orgSubject:  Re: EVP Envelope & PKI Confusion...Date:  Tue, 03 Apr 2007 21:13:22 +0200MIME-Version:  1.0X-Sender:  Goetz Babin-Ebell <[EMAIL PROTECTED]>Received:  from mmx1.engelschall.

RE: EVP Envelope & PKI Confusion...

2007-04-04 Thread Usman Riaz
Hi David,    Sorry to be rude, but your post just told me what I already know :), my lack of knowledge at security, but didn't help me a bit :( (not sure if the post was meant to be helpful). If you have spend the same amount of time writing *what* is wrong with my approch & why this shoul

Re: Trouble compiling and openssl 0.9.8 d or e on solari10

2007-04-04 Thread Laurent Blume
[EMAIL PROTECTED] a écrit : > I surely did something wrong, it's ok now. > Thanks for quick and efficient help. > Btw it seems that I have seen several people having the same problem. > Maybe adding a test for the right patches in the configuration step could be > fine. Wouldn't be portable. It w

Newbie Questions

2007-04-04 Thread Rocky S
I am a newbie with both openssl & security in general. So excuse me if my questions are naive. 1) I have installed openssl sources. In the certs directory, there are various certificates. I looked at a couple of them - aol1.pem & vsign1.pem. The vsign1.pem starts with subject=/C=US/O=VeriSign, I