RE: possible SSL_write bug

2008-02-11 Thread David Schwartz
> If I close stunnel, the next SSL_write will return a positive value, > as if everything is ok, the second causes sudden application termination. Make a build with debugging symbols, get a core dump, and analyze it with 'gdb' or similar. Alternatively, post the smallest complete, compilable exam

Re: possible SSL_write bug

2008-02-11 Thread Alessandro Pivi - GLOBALcom engineering
Hi, I made more tests, I even adapted sample code from samples I got in the web, and I always have the same result. If I close stunnel, the next SSL_write will return a positive value, as if everything is ok, the second causes sudden application termination. Could anybody please verify this

AW: RSA_public_decrypt error

2008-02-11 Thread Wockenfuß , Frank
I'm not that good in OpenSSL. How do I create a RSA file if I only have a modulus and exponent. Programmatically I have set the 2 values with BN_bin2bn(), buit how do I save this to a file? I just add a working and a non working example to this mail. Modulus: A1 65 EE 74 8F 23 5E A4 4C 85 05 3D

Re: openssl server + smart card

2008-02-11 Thread Marek . Marcola
Hello, > > In SSL/TLS you encrypt pre_master_secret with server certificate. > > For that, you do not need smartcard, TLS server will send you certificate > > and (after verification) you (client) encrypt generated pre_master_secret > > with server public key send to you by server with certificat

-passout problem?

2008-02-11 Thread Mike -- EMAIL IGNORED
I am trying to use openssl to create a password protected key in openvpn, but not succeeding. I am not sure I am doing it correctly. With: # openssl version OpenSSL 0.9.8b 04 May 2006 # uname -a Linux mbrc32 2.6.22.1-41.fc7 #1 SMP Fri Jul 27 18:10:34 EDT 2007 i686 athlon i386 GNU/Linux # ec

key & iv generation?

2008-02-11 Thread Robert B. Williams
How is the key and iv generated? I am using enc -aes256 with a text based password. Is there an stand alone openssl command that will do this? I need to find the code that does this step so that I can replicate it in javascript. Cheers. ___

Re: RSA_public_decrypt error

2008-02-11 Thread Dr. Stephen Henson
On Mon, Feb 11, 2008, Wockenfu, Frank wrote: > Hi all, > > I have the following problem: > > I want to verify a signature that was created inside a smartcard. The > smartcard creates a digital signature with RSA 2048 bit over a hash that was > created using SHA-512 (OpenSSL). > To verify the s

Re: openssl server + smart card

2008-02-11 Thread Lars Kühl
Am Montag, 11. Februar 2008 14:22:39 schrieb [EMAIL PROTECTED]: > Hello, > > > I writing a TLS server application. That is the easy part. > > The server certificate is on a smart card. So I get only the public key > > and > > > the certificate but not the private key from the smart card. > > So I

Re: openssl server + smart card

2008-02-11 Thread Marek . Marcola
Hello, > I writing a TLS server application. That is the easy part. > The server certificate is on a smart card. So I get only the public key and > the certificate but not the private key from the smart card. > So I have to decrypt everything in the TLS handshake, which is encrypted with > se

RE: SSL specification -reg

2008-02-11 Thread Thanaraj, Udayakumar (STSD-OpenVMS)
I am able to specifications for SSL. This site works. Thank you so much, Uday. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mohamad Badra Sent: Friday, February 08, 2008 5:49 PM To: openssl-users@openssl.org Subject: Re: SSL specification -reg Try th

Re: FIPS 1.0 available?

2008-02-11 Thread Kyle Hamilton
FIPS 1.0 is no longer valid for procurement, thus to avoid confusion it is no longer available from the download site. -Kyle H On Feb 8, 2008 3:07 PM, Briones, Frank <[EMAIL PROTECTED]> wrote: > Hi there, > > I am looking for a previous version of OpenSSL, FIPS 1.0, but is not > available at the

FIPS 1.0 available?

2008-02-11 Thread Briones, Frank
Hi there, I am looking for a previous version of OpenSSL, FIPS 1.0, but is not available at the download site. Does anyone know if it is still available for download? Thanks for any help, Frank __ OpenSSL Project

RE: SSL_shutdown

2008-02-11 Thread Matthew Allen
-- Original Message -- To: (openssl-users@openssl.org) From: Saju ([EMAIL PROTECTED]) Subject: RE: SSL_shutdown Date: 10/2/2008 3:52:05p > Connection shutdown is just: > Library->BIO_ssl_shutdown(Bio); > Library->BIO_set_close(Bio,BIO_CLOSE); > Library->BIO_free_

Universisdad San Francisco de Quito Development

2008-02-11 Thread Juan Pablo Albuja Riofrío
Dear friends, I am a student and I am working in one investigation university project. With this project I am going to get my engineer title. I want to know if OpenSSl can create wap certificates and how Can I integrate it in one wap simulator. Please help me. I am studying wap security -- Salud

openssl server + smart card

2008-02-11 Thread Lars Kühl
Hi all, I writing a TLS server application. That is the easy part. The server certificate is on a smart card. So I get only the public key and the certificate but not the private key from the smart card. So I have to decrypt everything in the TLS handshake, which is encrypted with server publi

RE: RSA_verify problem

2008-02-11 Thread Chris Brown
Hi, I have made the modifications you suggested and run the sample code for RSA_public_decrypt. I get the same error that I receive with RSA_verify- "error:0306E06C:bignum routines:BN_mod_inverse:no inverse". Do you have any further suggestions? I do not understand what I am doing wrong. Thank