Re: compiling openssl without support for sslv2

Hi, Steve wrote : I looked in the INSTALL file, and this is the information I received: no- Build without the specified cipher (bf, cast, des, dh, dsa, hmac, md2, md5, mdc2, rc2, rc4, rc5, rsa, sha). The crypto/ directory can be removed after running

Re: OpenSSL debug mode

On Thu, 2007-06-07 at 15:21 +0100, Brendan Kennedy wrote: > Hi All, > > Just some simple (newb) questions: > > How do I setup OpenSSL so as that I can debug into the library from my > application? You may use something like that: $ ./Configure threads shared \ --prefix=/usr/local/op

Re: OpenSSL debug mode

On 6/8/07, Marek Marcola <[EMAIL PROTECTED]> wrote: > > How do I setup OpenSSL so as that I can debug into the library from my > application? You may use something like that: $ ./Configure threads shared \ --prefix=/usr/local/openssl-0.9.8b-debug linux-elf -g Thank you Marek! That wo

Re: OCF on RHEL5 ssl.patch, p.clear problem

Hi all, Just an update on this - it seems on RHEL5 (kernel 2.6.18-8.el5), if you configure using: ./config threads shared There is no error from 'make test' (as described below). I do not know the reason, but maybe someone else here can enlighten us! Best Regards, Brendan On 5/30/07, Brendan

OAEP for signatures and PSS

Hi @ll, is it a security problem to use RSA-OAEP padding for RSA signatures? Is RSA-PSS new to OpenSSL and how can I use it? What's the security difference(s) between RSA-OAEP and RSA-PSS? Thanks. Philippe -- OAEP: Optimal Asymmetric Encoding Padding PSS: Probabilistic Signature Scheme ___

Re: OAEP for signatures and PSS

Hi Philippe, the PKCS #1 v2.1 standard [1] uses OAEP padding for encryption (I think the 'E' stands for 'encryption'). PSS adds probabilistic padding to the message to be signed. More information is available in papers by Bellare and Rogaway [2,3]. Regards, Steven [1] http://www.rsa.com/rsalab

Re: OAEP for signatures and PSS

Can I use PSS with openssl on command line, like OAEP? I cannot find any options. Thanks. Philippe * Steven Beeckman wrote: > > Hi Philippe, > > the PKCS #1 v2.1 standard [1] uses OAEP padding for encryption (I think the > 'E' stands for 'encryption'). PSS adds probabilistic padding to the mes

Encrypted and unencrypted handshaking

Hello, I would like to know if it is possible to have a port listening for both SSL and plain-text connections, and if yes... with what library functions can I achieve this? Example: - Port 12345 listening; - Client connects to port; - Server checks if it is requested a SSL or plain-text; - Serv

ssl connection problem ...... code inside

hi, i am doing following thing but den i am unable to connect to server using openssl with the same version. i am pasting the CLIENT code for the same. main() { ERR_load_BIO_strings(); SSL_load_error_strings(); SSL_library_init(); OpenSSL_add_all_algorithms(); /* Set up the

Linux version of Attribute certificate API

Hello, I have compiled the Attribute Certificate API on Linux and it is working with OpenSSL 0.9.8a (I didn't check other versions) The source can be downloaded at http://www.it.uc3m.es/dds/swRelease/pmi/pmi.xml There are 3 versions: Version 0.1 (Windows only) Version 0.1 (Linux/Windows) some

OpenSSL leak on Windows

Hello, Using openssl-0.9.8e on Windows XP. I am seeing a leak when running openSSL. Specifically OPENSSL_Applink: GetModuleFileNameA [C:\WINDOWS\system32\kernel32.dll] OPENSSL_AppLink[opensslclient.exe] malloc[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e8e3b_8.0.50727.762_x-ww_6b128700\

Re: ssl connection problem ...... code inside

bhateja 写道: hi, i am doing following thing but den i am unable to connect to server using openssl with the same version. i am pasting the CLIENT code for the same. main() { ERR_load_BIO_strings(); SSL_load_error_strings(); SSL_library_init(); OpenSSL_add_all_algorithms();

Re: Encrypted and unencrypted handshaking

Hello, > I would like to know if it is possible to have a port listening for > both SSL and plain-text connections, and if yes... with what library > functions can I achieve this? > Example: > > - Port 12345 listening; > - Client connects to port; > - Server checks if it is requested a SSL or plai

RE: Linux version of Attribute certificate API

The library works also with last openSSL version. I send also a complete trace of the execution with the last openSSL version on linux. Regards, Pervasive Computing Laboratory - - -- This program is a test tool for attribute certificate wrapper Cre

Re: OAEP for signatures and PSS

On Fri, Jun 08, 2007, Philippe Stellwag wrote: > Can I use PSS with openssl on command line, like OAEP? I cannot find > any options. > Yes but only in 0.9.9-dev. There you can use PSS with either the dgst utility or the pkeyutl utility (which is a generalized version of rsautl). Steve. -- Dr S

RE: Encrypted and unencrypted handshaking

> For example if client connects, you may recv(,,,MSG_PEEK) 5 bytes > from client socket and check if this bytes are valid SSL2/SSL3/TLS1 > record header (SSL2 and SSL3/TLS1 record headers are different). > If yes, then you can call SSL_accept() on client socket > if not, you can read()/write() T

RE: Encrypted and unencrypted handshaking

Hello, > > For example if client connects, you may recv(,,,MSG_PEEK) 5 bytes > > from client socket and check if this bytes are valid SSL2/SSL3/TLS1 > > record header (SSL2 and SSL3/TLS1 record headers are different). > > If yes, then you can call SSL_accept() on client socket > > if not, you can r

Re: Encrypted and unencrypted handshaking

Hey! Seems that recv(,,, MSG_PEEK); worked just fine for what I wanted to do! Thanks for your help guys! :-) On 6/9/07, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > > For example if client connects, you may recv(,,,MSG_PEEK) 5 bytes > > from client socket and check if this bytes are valid

RE: Encrypted and unencrypted handshaking

> Hey! Seems that recv(,,, MSG_PEEK); worked just fine for what I > wanted to do! > > Thanks for your help guys! :-) > > > What if your recv(,,,MSG_PEEK) only returns one byte? > > OK, will be enough. If you can make the decision with just one byte, I believe you are okay. DS _

session id callback failed on vxworks for pentium

I use openssl-0.9.8e to compile libraries both on WinXP and Vxworks with success. And run a simple handshake server demo with certificate.pem and private.key. To connect using openssl.exe on WinXP, run >openssl s_client -connect localhost:4422 It is ok, print the wanted Hello Openssl message sent

error regaring libssl.so

helo i m using fedora core 6 i got the following error helo my dynamic lib file is stored at /usr/src/lib/qt-3.3/lib/lhmail.so and it required support for libssl.so and libssl.so is in /usr/lib but when i run my application i got the following strange errors ../../liblhmail.so: undefined refere

Re: error regaring libssl.so

raj pansuria 写道: helo i m using fedora core 6 i got the following error helo my dynamic lib file is stored at /usr/src/lib/qt-3.3/lib/lhmail.so and it required support for libssl.so and libssl.so is in /usr/lib but when i run my application i got the following strange errors ../../liblhmail.so