PSK usage( RFC 4279) - examples and docs

2007-04-12 Thread mahendra
Hi All. I am looking for some docs which explain how to use PSK based SSL connection ( RFC 4279). I tried executing the example apps, but they asked for certificates. My understanding is that PSK based SSL connection does not require certificates. Am I correct ? Where can I find exmaple implemten

Openssl config

2007-04-12 Thread John Dickinson
Hi, Does anyone have any examples/advice on configuring openssl on the fly. So far I have used OPENSSL_config() to load a config file like this. [openssl_def] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 dynamic_path = /opt/engine_pkcs11

Re: Openssl config

2007-04-12 Thread Dr. Stephen Henson
On Thu, Apr 12, 2007, John Dickinson wrote: > Hi, > > Does anyone have any examples/advice on configuring openssl on the fly. So > far I have used OPENSSL_config() to load a config file like this. > > [openssl_def] > engines = engine_section > > [engine_section] > pkcs11 = pkcs11_section > >

Re: long x509 validity causes date wrapping ?

2007-04-12 Thread Dr. Stephen Henson
On Thu, Apr 12, 2007, Ralf Hauser wrote: > to secure my mysql, I use Monty's script as per > http://dev.mysql.com/doc/refman/5.0/en/secure-create-certs.html > > openssl req -new -x509 -keyout $PRIV/cakey.pem -out $DIR/cacert.pem \ > -days $CADAYS -config $DIR/openssl.cnf > > > When I set t

RE: SSL_write and SSL_read

2007-04-12 Thread Soji VP
Hi David, Thanks for your sound replay :) I'll take care of this caveat in action... I understand that the same scenario would be applicable in the case of multiple threads handling the same fd even though we managed to get it synchronized using some mutex. Please correct me if I'm wrong :)

RE: SSL_write and SSL_read

2007-04-12 Thread David Schwartz
> Hi David, > > Thanks for your sound replay :) > I'll take care of this caveat in action... > > I understand that the same scenario would be applicable in the > case of multiple threads handling the same fd even though we > managed to get it synchronized using some mutex. > > Please correct

Re: howto generate RSA key from components?

2007-04-12 Thread Iain Pople
Thanks for this. I also found the Openssl perl module useful (http://search.cpan.org/dist/Crypt-OpenSSL-RSA/RSA.pm) as it has a function new_key_from_parameters which uses the rsa components to generate a key. Dr. Stephen Henson wrote: On Wed, Apr 11, 2007, Iain Pople wrote: Hi, I am tryin

CApath & CAfile, strange problem

2007-04-12 Thread Buffalo Dickens
Dear all, I encountered a strange problem. I generated self-signed certificates and want to test whether they work OK. [EMAIL PROTECTED] openssl verify -verbose -purpose sslclient -CApath /path/to/CA/ /path/to/cert.crt /path/to/cert.crt: /C=US/ST=America/L=CA/O=UC/OU=CS/CN=www.abc.org error 20 at

Re: CApath & CAfile, strange problem

2007-04-12 Thread Bernhard Froehlich
Buffalo Dickens schrieb: Dear all, I encountered a strange problem. I generated self-signed certificates and want to test whether they work OK. [EMAIL PROTECTED] openssl verify -verbose -purpose sslclient -CApath /path/to/CA/ /path/to/cert.crt /path/to/cert.crt: /C=US/ST=America/L=CA/O=UC/OU=CS/