Re: static openssl window libs in VC++

2007-05-30 Thread jimmy
gary clark wrote: Static libs are present in openssl-0.9.8e\out32dll. Thanks, garyc i thought the static libs are in openssl\out32 and the dynamic libs are in out32dll. -jb -- The biggest problem with communication is the illusion that it has occurred. _

Re: Urgent Help in regarding openssl library

2007-05-30 Thread jimmy
[EMAIL PROTECTED] wrote: Hi All, 1) We are using UNIX SLES 10. 2) When there are large number of TLS negotiations being done in as very short span of time this error comes. are you doing this in a multi-threaded app? in that case have you initialized the locking callbacks? P.S. such

configuring openSSL in Solaris

2007-05-30 Thread Sandip Patil
Hi All, I have configured openSSL on Win-XP successfully. Can anyyou please tell me how to configure openSSL on solaris.I am using tomcat 5.5 as server.(since while configuring with windows there are some .dll files there which I cannot use in solaris) Please help. Thanks in advanc

Re: AW: Database file structure

2007-05-30 Thread Bruno Costacurta
On Friday 25 May 2007 09:54:22 [EMAIL PROTECTED] wrote: > Bruno, > > A database line is structured as followed: > > 1. state of the cert (V=valid, R=revoked, E=expired where the state is not > changes automatically if a cert expires) 2. end of validity > 3. revocation time (empty when the cert ist

Re: AW: Database file structure

2007-05-30 Thread Bruno Costacurta
On Wednesday 30 May 2007 15:28:17 Bruno Costacurta wrote: > On Friday 25 May 2007 09:54:22 [EMAIL PROTECTED] wrote: > > Bruno, > > > > A database line is structured as followed: > > > > 1. state of the cert (V=valid, R=revoked, E=expired where the state is > > not changes automatically if a cert ex

Re: AW: Database file structure

2007-05-30 Thread Bernhard Froehlich
Bruno Costacurta schrieb: [...] Thanks for details. In fact, I expected to see the fingerprint of the certificate stored somewhere in index.txt file (as CN is not a unique id within the CA). Any reason not to store the fingerprint ? The serial number of a certificate is (must be!) unique f

Verify OpenSSL-0.9.8a install on Redhat enterprise linux 5

2007-05-30 Thread Brendan Kennedy
Hi All, I am trying to install OpenSSL-0.9.8a on RHEL5. Now, RHEL5 comes with it's own install of OpenSSL-0.9.8b (that I do not want to mess up as its libs are linked to by a number of applications). I'm downgrading as I must work with that version of the library. When I install OpenSSL - make,

Re: Verify OpenSSL-0.9.8a install on Redhat enterprise linux 5

2007-05-30 Thread Marek Marcola
Hello, > I am trying to install OpenSSL-0.9.8a on RHEL5. Now, RHEL5 comes with > it's own install of OpenSSL-0.9.8b (that I do not want to mess up as > its libs are linked to by a number of applications). I'm downgrading > as I must work with that version of the library. > > When I install OpenSSL

Re: configuring openSSL in Solaris

2007-05-30 Thread Marek Marcola
Hello, > > I have configured openSSL on Win-XP successfully. > Can anyyou please tell me how to configure openSSL on solaris.I am > using tomcat 5.5 as server.(since while configuring with windows there > are some .dll files there which I cannot use in solaris) Tomcat does not use OpenSSL for encr

Re: Verify OpenSSL-0.9.8a install on Redhat enterprise linux 5

2007-05-30 Thread Brendan Kennedy
Hi Marek, Thanks for replying so quickly! Running # ./config shared has updated the Makefile and the result was the generation of shared libraries and the other (b) install seems not to be effected. Thanks again, Brendan __ O

how create rsa key with encrypted

2007-05-30 Thread Tuan Minh Nguyen
hi everybody, I did this command: openssl req -newkey rsa:1024 -keyout testkey.pem -keyform PEM -out testreq.pem to create a pair of private key (testkey.pem) and a request certificate (testreq.pem). I read in book "Network Security with Openssl", it said that the gerenated rsa private key wi

Re: how create rsa key with encrypted

2007-05-30 Thread Marek Marcola
Hello, > > I did this command: > > openssl req -newkey rsa:1024 -keyout testkey.pem -keyform PEM -out > testreq.pem > > to create a pair of private key (testkey.pem) and a request > certificate (testreq.pem). > > I read in book "Network Security with Openssl", it said that the > gerenated rsa

RE: (SCL: 6) how create rsa key with encrypted

2007-05-30 Thread Bill Colvin
Add -nodes to your command line. -Original Message- hi everybody, I did this command: openssl req -newkey rsa:1024 -keyout testkey.pem -keyform PEM -out testreq.pem to create a pair of private key (testkey.pem) and a request certificate (testreq.pem). I read in book "Network Secur

RE: how create rsa key with encrypted

2007-05-30 Thread TAYLOR, TIM \(CONTRACTOR\)
Tuan you need to use the genrsa subcommand. Try openssl genrsa -out key.rsa regards, TT 317-510-7346 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tuan Minh Nguyen Sent: Wednesday, May 30, 2007 9:53 AM To: openssl-users@openssl.org Subject: how creat

OCF on RHEL5 ssl.patch, p.clear problem

2007-05-30 Thread Brendan Kennedy
Hi All, I could not find much info on this in the openssl-users archive, so sorry if I am creating a duplicate thread. First of all I am installing OpenSSL-0.9.8a, but first it is patched using ssl.patch from the Open Cryptographic Framework guys (hopefully there is some overlap in the users of

RE: Error building FIPS object module in Windows using MinGW and Msys

2007-05-30 Thread David Hartman
Is it possible you ran "config" instead of "config fips"? I can reproduce similar errors (different symbols) if I run "config" instead of "config fips" in my build environment. -David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hweeli Se

certificate chains API

2007-05-30 Thread jfhuynh
Hello everybody, My purpose is to build a ssl server which can handle multiple CA certificate and multiple server certificates too. The different SSL certificate files are not located in the same machine where the server will run but I have achieved to get them in a buffer in server side. I supp

Saving (and restoring) cipher context

2007-05-30 Thread Jim Wong
Folks, I apologize if this is a somewhat naïve or misinformed question, as I'm new to the OpenSSL APIs and not quite sure how things work yet. I'm developing an application in which we're using AES to encrypt files as they're transferred from another system and saved to disk. We'd like to provid

Re: configuring openSSL in Solaris

2007-05-30 Thread Andy Harrison
On 5/30/07, Sandip Patil <[EMAIL PROTECTED]> wrote: Hi All, I have configured openSSL on Win-XP successfully. Can anyyou please tell me how to configure openSSL on solaris.I am using tomcat 5.5 as server.(since while configuring with windows there are some .dll files there which I cannot use in

RE: Saving (and restoring) cipher context

2007-05-30 Thread David Schwartz
> I'm developing an application in which we're using AES > to encrypt files as they're transferred from another system > and saved to disk. We'd like to provide the ability for the > application to resume a transfer that was interrupted mid-stream, > but the encryption throws a bit of a wrench in

Test

2007-05-30 Thread Todd Arnold
This is a test message to see if I can append to the mailing list. Please ignore.

Re: Saving (and restoring) cipher context

2007-05-30 Thread bgiles
You may have already gotten this answer, but just in case you haven't... You're looking at two distinct problems. The first is protecting the data "in motion", and you basically need to look at the SSL routines and related authentication information (e.g., X.509 certificates). The data you put i

RE: Saving (and restoring) cipher context

2007-05-30 Thread Jim Wong
Thanks for the response. Sorry for the ambiguity in my original message: I thought keeping things abstract would make what we're doing easier to understand at a high level, but I probably left things too vague. The short version is that we're implementing a kind of remote file service that client

RE: Saving (and restoring) cipher context

2007-05-30 Thread Jim Wong
Thanks for the response. As I mentioned in my more detailed followup, we're planning to use SSL to protect the file data (and metadata) while it's in flight, and a separate encryption scheme for the data "at rest". Because the file upload might require several (or many) attempts, I was hoping

RE: Saving (and restoring) cipher context

2007-05-30 Thread David Schwartz
> Fortunately, we're not locked into any particular implementation > strategy, so if we're barking up the wrong tree, there's opportunity to > change. For example, we've also considered: > > - Having the client do the encryption, which makes resuming > uploads trivial, but complicates the c

Re: configuring openSSL in Solaris

2007-05-30 Thread Sandip Patil
Hi Marek, Thanks a lot for your reply. Actually I donot want to use default keytool from java/jre1.5.0_05/bin directory. I have configured openSSL in Win-XP by downloading Openssl-0.9.8d,tcnative-1.dll and runnig commands as, openssl req -config openssl.cnf -new -out server.