RE: How to avoid patch of Solaris x86 linker

2008-02-04 Thread Ted Mittelstaedt
I thought at one time there was a patch for a gcc version that also worked around Sun's buggy linker. Ted > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of A V > Sent: Saturday, February 02, 2008 3:30 PM > To: openssl-users@openssl.org > Subject: Re: Ho

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-04 Thread Peter Van Biesen
-decrypt does not work without a key. I used an invalid key and I get following error : Error decrypting PKCS#7 structure 13136:error:21070092:PKCS7 routines:PKCS7_dataDecode:no recipient matches key:pk7_doit.c:482: 13136:error:21072077:PKCS7 routines:PKCS7_decrypt:decrypt error:pk7_smime.c:470

What stands EVP for

2008-02-04 Thread Thomas Mangold
I'm new to openssl trying to integrate encryption into my C code. Reading and trying to understand the concepts I wondered what EVP_* from the higlevel routines stands for. I could not find any explanation of this abbreviation in the documentation or on the web. Thank you Thomas __

verify a pdf document with a pkcs7 signature

2008-02-04 Thread Sebastian Patschorke
Hello! I don't know how to use openssl, that it verifies me a signature for a pdf document. This is what I tried: openssl smime -verify -in RGF131361240.pdf -signer 799562928.crt -out RGF131361240.pdf.pkcs7 RGF131361240.pdf is the original document, RGF131361240.pdf.pkcs7 the signature and

Compiling on a Mac

2008-02-04 Thread Joel Christner
Hi everyone, I'm having a build issue on a Mac (10.5) that resembles the problem mentioned on the FAQ page: http://www.openssl.org/support/faq.html#BUILD9 I searched my HDD for a 'PROBLEMS' file and the only one I found was for emacs. mac# openssl version OpenSSL 0.9.7l 28 Sep 2006 The issue I

Compilation failure on Solaris v10 for Sun SPARC

2008-02-04 Thread Morgan, Christopher-P54187
Hi, I'm getting failures to build the version 1.1.2 FIP version of OpenSSL. Here what I am doing (that results in the Make failing). Do you know what I am doing incorrectly? 1.) ./config fips shared --openssldir=$HOME/myOpensslBuild 2.) make Here is my Makefile that is generated and the compila

An OpenSSL server with NULL cipher support

2008-02-04 Thread JCA
I am trying to use the openssl command line utility in order to launch an SSL server supporting the NULL encryption cipher (I am trying to debug a simple SSL client.) To that effect, I launch openssl as follows: # openssl s_server -accept 443 -nocert -WWW -cipher 'ALL:NULL' The client is

Re: What stands EVP for

2008-02-04 Thread Jorge Fernandez
2008/2/2, Thomas Mangold <[EMAIL PROTECTED]>: > > I'm new to openssl trying to integrate encryption into my C code. > Reading and trying to understand the concepts I wondered what EVP_* from > the higlevel routines stands for. > I could not find any explanation of this abbreviation in the > documen

RE: Compiling on a Mac

2008-02-04 Thread Ted Mittelstaedt
Joel, Before compiling anything on the Mac you need to read the documents on the Apple website that discuss how to setup your environment properly and how to issue the correct C compilation commands. Also the make on MacOS X doesen't support all of the features that make on some other platforms

Re: verify a pdf document with a pkcs7 signature

2008-02-04 Thread Victor Duchovni
On Sat, Feb 02, 2008 at 08:33:40PM +0100, Sebastian Patschorke wrote: > I don't know how to use openssl, that it verifies me a signature for a > pdf document. This is what I tried: > > openssl smime -verify -in RGF131361240.pdf -signer 799562928.crt -out > RGF131361240.pdf.pkcs7 Why "smime". A

Re: Unable to verify or decrypt a smime message generated with bouncycastle

2008-02-04 Thread Victor Duchovni
On Mon, Feb 04, 2008 at 09:34:00AM +0100, Peter Van Biesen wrote: > -decrypt does not work without a key. I used an invalid key and I get > following error : > > Error decrypting PKCS#7 structure > 13136:error:21070092:PKCS7 routines:PKCS7_dataDecode:no recipient matches > key:pk7_doit.c:482: >

Re: Compiling on a Mac

2008-02-04 Thread Joel Christner
Hi Ted, Thanks, I will do that. Any pointers on a quick fix would be appreciated too. On Feb 4, 2008 3:07 AM, Ted Mittelstaedt <[EMAIL PROTECTED]> wrote: > Joel, > > Before compiling anything on the Mac you need to read the documents on > the Apple > website that discuss how to setup your e

Sample code to connect to stunnel server

2008-02-04 Thread Alessandro Pivi - GLOBALcom engineering
Hi, I need to make an SSL connectione between a client and a server application, both developed by me. On the server side I am going to use stunnel, while on the client side I can't use stunnel, I must use the ssl library. I tried to write the code to do it, but I can't connect. This is the o

Re: measure network throughput in openssl

2008-02-04 Thread Marek . Marcola
Hello, > is there any possibility of measuring network throughput using > openssl tool. if so can u please give details openssl is not very good tool to measure network throughput because transmitted data is encrypted which requires high CPU usage. You may have situation when your PC/computer wi

RE: Compiling on a Mac

2008-02-04 Thread David Schwartz
> Sorry I didn't update the list, but I tried with > -lssl and -lcrypto, as well as -I/usr/include/openssl. And what happened? Did you get the same error messages or different ones? > I've reinstalled openssl to no avail. What directories did you install to? And did you tell your compiler/linke

Re: Sample code to connect to stunnel server

2008-02-04 Thread Marek . Marcola
Hello, > I need to make an SSL connectione between a client and a server > application, both developed by me. > On the server side I am going to use stunnel, while on the client side I > can't use stunnel, I must use the ssl library. > > I tried to write the code to do it, but I can't connect.

RE: Compiling on a Mac

2008-02-04 Thread David Schwartz
>> On Feb 3, 2008 10:51 AM, David Schwartz <[EMAIL PROTECTED]> wrote: >>> mac# gcc blowfish.c -o blowfish >> Where did you get this command from and what >> was it supposed to accomplish? > blowfish.c is a progam I wrote which contained a series of methods for > initializing, encrypting, and dec

Re: Compiling on a Mac

2008-02-04 Thread Joel Christner
Sorry I didn't update the list, but I tried with -lssl and -lcrypto, as well as -I/usr/include/openssl. I've reinstalled openssl to no avail. Any other thoughts? Thanks On Feb 4, 2008 9:43 AM, David Schwartz <[EMAIL PROTECTED]> wrote: > > >> On Feb 3, 2008 10:51 AM, David Schwartz <[EMAIL PROT

Re: verify a pdf document with a pkcs7 signature

2008-02-04 Thread Dr. Stephen Henson
On Sat, Feb 02, 2008, Sebastian Patschorke wrote: > Hello! > > I don't know how to use openssl, that it verifies me a signature for a pdf > document. This is what I tried: > > openssl smime -verify -in RGF131361240.pdf -signer 799562928.crt -out > RGF131361240.pdf.pkcs7 > > RGF131361240.pdf is t

Fwd: An OpenSSL server with NULL cipher support

2008-02-04 Thread JCA
OK, I found it. In case this helps somebody out there, the way it works for me is the following: The client is invoked as openssl s_client -connect 127.0.0.1:443 -cipher COMPLEMENTOFALL:aNULL and the server as openssl s_server -msg -accept 443 -nocert -cipher COMPLEMENTOFALL:aNULL With

Re: An OpenSSL server with NULL cipher support

2008-02-04 Thread Victor Duchovni
On Sun, Feb 03, 2008 at 09:44:03AM -0800, JCA wrote: > I am trying to use the openssl command line utility in order to > launch an SSL server supporting the NULL encryption cipher (I am > trying to debug a simple SSL client.) To that effect, I launch openssl > as follows: You are not being sp

RE: RSA_verify problem

2008-02-04 Thread Marek . Marcola
Hello, > I am now consistently getting an error "0306E06C:bignum routines:BN_mod_inverse:no > inverse" when calling RSA_verify. > > I am still taking the following steps: > > 1) Extracting the 'SignedInfo' node and creating a 20 byte SHA1 hash of the value of it > and its contents. I am conf

RE: RSA_verify problem

2008-02-04 Thread Chris Brown
ature looks good. You should use RSA_public_decrypt() function and check output. I've attached simple test program which may be adapted for this purpose. As result you should get padded ASN1 structure. Best regards, -

Re: Fwd: An OpenSSL server with NULL cipher support

2008-02-04 Thread Victor Duchovni
On Mon, Feb 04, 2008 at 08:28:04AM -0800, JCA wrote: > OK, I found it. In case this helps somebody out there, the way it > works for me is the following: > > The client is invoked as > > openssl s_client -connect 127.0.0.1:443 -cipher COMPLEMENTOFALL:aNULL > > and the server as > > ope

Memory growth in OpenSSL socket server

2008-02-04 Thread ethrbunny
I have a simple server under WinXP that creates a thread for a 'listener' and spins off a new thread for each incoming client. Im limiting access to one client at a time at this point so it blocks on the listener until the client is closed. Im using a self-signed certificate for the server. The

Re: Compiling on a Mac

2008-02-04 Thread Joel Christner
Hi David, I'm down to symbol not defined for one item - incremental_send (and I can't find what file this is supposed to be in). I re-installed to /usr/include/openssl and used --prefix=/usr/include and --openssldir=/usr/include/openssl I'm trying to compile now with -lssl -lcrypto -L/usr/includ

Re: Sample code to connect to stunnel server

2008-02-04 Thread Alessandro Pivi - GLOBALcom engineering
You are right, now it works :-) The stunnel should have been the server, but was configured as client. Thankyou for your help. [EMAIL PROTECTED] ha scritto: Hello, I need to make an SSL connectione between a client and a server application, both developed by me. On the server s