RE: How to prevent SSL from blocking from Network interruption

2007-07-20 Thread David Schwartz
> Not to beat a dead horse, but I forgot to mention that the application > does work "properly" when performing the same operations on non-SSL > connections. In other-words if I use telnet to connect to the server on > the non-SSL port and type nothing in the console and then have a second > clien

RE: How to prevent SSL from blocking from Network interruption

2007-07-20 Thread David Schwartz
> Having only done minimal socket programming, I'm in a bit of a steep > learning curve right now. Other then understanding what a blocking and > non-blocking operation is, I don't fully understand the ramifications of > switching to non-blocking I/O. Compounding this issue is the third party > co

RE: How to prevent SSL from blocking from Network interruption

2007-07-20 Thread Simon Edwards
Or to put it another way you can use combinations of... Use select() to check network level traffic arrival prior to making the appropriate SSL calls to handle it. Use SSL_Pending() to check if any SSL traffic is in the local buffers before calling select Set all sockets that you open to non-block

OpenSSL Visual Studio Workspace

2007-07-20 Thread Abhishek Tripathi
Hi Friends , Can any body tell me from where I can get the MS DEV Visual Studio Workspace for OpenSSL. Best, Abhishek

need help:run des on mips32 and vxworks

2007-07-20 Thread zhangyao
hi,all i meet a problem.when i plant the DES to my voip gateway for the purpose of snmpv3 support, it shows decryption error. My gateway is running on vxworks and processor is mips32. i guess it should be something wrong with architecture concerned choice, such as big(little)endian? in md32_co

LDAP instead of /etc/ssl/certs ?

2007-07-20 Thread Hadmut Danisch
Hi, is there a way to retrieve certificates from LDAP instead from /etc/ssl/certs ? Didn't find anything in FAQs and man pages... regards Hadmut __ OpenSSL Project http://www.openssl.org User Suppo

Thanks...Re: How to prevent SSL from blocking from Network interruption

2007-07-20 Thread Jim Marshall
David Schwartz wrote: Not to beat a dead horse, but I forgot to mention that the application does work "properly" when performing the same operations on non-SSL connections. In other-words if I use telnet to connect to the server on the non-SSL port and type nothing in the console and then have a

Re: OpenSSL Visual Studio Workspace

2007-07-20 Thread Krishna M Singh
Hi there is install.w32 file that is used to build dlls on windows platform. I am not aware of any workspace file for OpenSSL and also I never needed one as well.. thanks and regards Krishna On 7/20/07, Abhishek Tripathi <[EMAIL PROTECTED]> wrote: Hi Friends , Can any body tell

Passwords for S/MIME certs?

2007-07-20 Thread nobody
Hi, I want to create S/MIME certs that require a password to use. I've created an RSA key with the -des3 option. It prompted for a password and I entered it. Then I created a CSR and signed it with my CA's cert. Then I exported it in pkcs12 format and imported it into Internet Explorer and Thunder

Re: LDAP instead of /etc/ssl/certs ?

2007-07-20 Thread Bernhard Froehlich
Hadmut Danisch schrieb: Hi, is there a way to retrieve certificates from LDAP instead from /etc/ssl/certs ? Didn't find anything in FAQs and man pages... regards Hadmut AFAIK LDAP is not used in OpenSSL tools or library functions. Of course it would be possible (though probably a good bit o

Re: LDAP instead of /etc/ssl/certs ?

2007-07-20 Thread Hadmut Danisch
On Fri, Jul 20, 2007 at 04:32:08PM +0200, Bernhard Froehlich wrote: > Of course it would be possible (though probably a good bit of coding work) > to use a LDAP library like OpenLDAP to fetch the certificates and then use > them with OpenSSL library functions. > > Hope it helps. Not really, thi

Problem with EVP_CipherFinal_ex

2007-07-20 Thread Jorge Fernandez
Hi all, i'm trying to write a function to encrypt/decrypt binary buffers using different algorithms. I'm getting an error when decrypting it, on the EVP_CipherFinal_ex function. The error basically is WRONG_FINAL_BLOCK_LENGTH and triggers when i try to decrypt a buffer that is not multiple of the

Re: Problem with EVP_CipherFinal_ex

2007-07-20 Thread Jim Fox
I understand that, when encrypting, the last block have to be padded to encrypt it and so i do, but i dont save to the encrypted file the padded bytes, because i need the encrypted data to be the same size than original. You have to save the entire encrypted block. cipher_final will tell you

Re: Problem with EVP_CipherFinal_ex

2007-07-20 Thread Jorge Fernandez
Thank you for the response, Jim 2007/7/20, Jim Fox <[EMAIL PROTECTED]>: You have to save the entire encrypted block. cipher_final will tell you the length of the padded and encrypted block. So, should i assume that encrypted buffer will always be a multiple of block_size ... I would say th

Re: LDAP instead of /etc/ssl/certs ?

2007-07-20 Thread Patrick Patterson
Hi Hadmut; On Friday 20 July 2007 11:05:37 you wrote: > On Fri, Jul 20, 2007 at 04:32:08PM +0200, Bernhard Froehlich wrote: > > Of course it would be possible (though probably a good bit of coding > > work) to use a LDAP library like OpenLDAP to fetch the certificates and > > then use them with Op

Re: Problem with EVP_CipherFinal_ex

2007-07-20 Thread Jim Fox
You have to save the entire encrypted block. cipher_final will tell you the length of the padded and encrypted block. So, should i assume that encrypted buffer will always be a multiple of block_size ... I would say that my application can't allow that though. Why do you care at all? Jus

Re: Passwords for S/MIME certs?

2007-07-20 Thread Goetz Babin-Ebell
Hello, --On Freitag, Juli 20, 2007 14:49:54 + nobody <[EMAIL PROTECTED]> wrote: [...] Then I exported it in pkcs12 format and imported it into Internet Explorer and Thunderbird. I've sent encrypted and signed mails with Thunderbird and Outlook, they verify and decrypt fine at the other end

Re: LDAP instead of /etc/ssl/certs ?

2007-07-20 Thread Mark H. Wood
On Fri, Jul 20, 2007 at 12:04:18PM -0400, Patrick Patterson wrote: > Hi Hadmut; > > On Friday 20 July 2007 11:05:37 you wrote: > > On Fri, Jul 20, 2007 at 04:32:08PM +0200, Bernhard Froehlich wrote: > > > Of course it would be possible (though probably a good bit of coding > > > work) to use a LDA

Re: Passwords for S/MIME certs?

2007-07-20 Thread Dr. Stephen Henson
On Fri, Jul 20, 2007, Goetz Babin-Ebell wrote: > Hello, > > --On Freitag, Juli 20, 2007 14:49:54 + nobody <[EMAIL PROTECTED]> wrote: > > [...] > >Then I exported it in pkcs12 format and imported it into Internet > >Explorer and Thunderbird. I've sent encrypted and signed mails with > >Thunde