OpenSSH

All, I have looked through the archives and could not find a definitive answer. Can OpenSSH be built with the openssl fips canisters and if so does anyone have any documentation on how to accomplish that? Thanks in advance, JB

Re: win32 openssl w/o requiring the dreaded msvcr71.dll?

Bobby Krupczak wrote: Hi! I'm trying to build a multi-platform application using openssl. I'm using the win32 ssl libs built by Shining Path. However, those libs require msvcr71.dll whilst the rest of my apps are compiled such that they only require msvcr.dll Since I want my app to run out-

win32 openssl w/o requiring the dreaded msvcr71.dll?

Hi! I'm trying to build a multi-platform application using openssl. I'm using the win32 ssl libs built by Shining Path. However, those libs require msvcr71.dll whilst the rest of my apps are compiled such that they only require msvcr.dll Since I want my app to run out-of-box on win2k, winXP, w

Re: Help: problem with handshaking

陳秀虹 wrote: Thanks for the explanation. I am having problem with "Encrypted Alert". At first I thought it's because the Session ID length 0 is not correct. If this is not the problem, I really can't tell where it went wrong from packets I captured. I searched the web and I think "Encrypted Aler

Re: Client Side certification process through OpenSSL

You need to do this : On Client Side: SSL_CTX_use_certificate () SSL_CTX_use_private_key() On Server Side: SSL_CTX_load_verify_locations() SSL_CTX_verify()// Set the flag to (SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT) Paras On Thu, Mar 27, 2008 at 5:15 AM, vaibhav bindroo <[EMAIL PR

Re: Nagios plugin installation for check_http ssl

Hello again, I replied to this already on the openssl-dev list, although openssl-users is the more appropriate of the two lists. Please don't cross-post though. Thanks. Cheers, Geoff On Wed, 2008-03-26 at 17:07 -0400, Azam Syed wrote: > I loaded openssl 0.9.8g and when I complie Nagios plugin it

Re: Problem making shared libraries on Solaris

Joseph Felten wrote: Has anyone out there managed to compile openssl-0.9.8g shared libraries under Solaris 8? I've tried both gcc version 3.4.6 and the Sun Studio 11 Sparc compiler (the installation of which was an odyssey unto itself) and both puke on linking with the below error "relocations r

Re: Generating Keys in Triple-DES encryption

Ambarish Mitra wrote: Ambarish Mitra wrote: Hi Jimmy, Thanks for your response. Kindly find my thoughts inlined.. Question: So, the question is: How can we generate a key for Triple DES encryption and write out the same in a file? Simple answer for 'how to generate a key for a symmetric ciph

Re: Problem making shared libraries on Solaris

Has anyone out there managed to compile openssl-0.9.8g shared libraries under Solaris 8? I've tried both gcc version 3.4.6 and the Sun Studio 11 Sparc compiler (the installation of which was an odyssey unto itself) and both puke on linking with the below error "relocations remain against allocatab

Client Side certification process through OpenSSL

HI all, I hav got a ssl client and server running with single way certificate authentication presently implemented . I want to enable client side certificate authentication as well but am stuck regarding the appropriate use of client_cert_cb callback function and the related function void SSL_CT

RE: Generating Keys in Triple-DES encryption

Ambarish Mitra wrote: > Hi Jimmy, Thanks for your response. Kindly find my thoughts inlined.. > >> Question: >> So, the question is: How can we generate a key for Triple DES encryption and >> write out the same in a file? >> > > Simple answer for 'how to generate a key for a symmetric cipher' is

Re: CAFile

I'm not sure, but shouldn't it be possible to simply use cat? Something like: cat ca1.pem ca2.pem ... caN.pem > CAfile.pem But I might be wrong... Regards Carolin [EMAIL PROTECTED] wrote: > Hello everybody > > For some hours now I try to find out how to create CAfile (a file with > multiple CA

Re: CAFile

[EMAIL PROTECTED] schrieb: Hello everybody For some hours now I try to find out how to create CAfile (a file with multiple CAs inside, the one file counterpart of -CApath). I need such a file for HTTPS Client authentification together with the yaws webserver. In the yaws user guide they write t

Re: CAFile

* [EMAIL PROTECTED] wrote on Wed, Mar 26, 2008 at 18:26 +0100: > For some hours now I try to find out how to create CAfile (a > file with multiple CAs inside, the one file counterpart of > -CApath). > > Could anybody please give me an example Not sure if I understand you right, but if you want t

Nagios plugin installation for check_http ssl

I loaded openssl 0.9.8g and when I complie Nagios plugin it says yes next to openssl, but when I do the make I get the following. I complied Nagios plugin with "[EMAIL PROTECTED] nagios-plugins-1.4.11]# ./configure --prefix=/usr/local/nagios/libexec --with-ssl-dir=/usr/local/ssl --with-libs=-ldl"

CAFile

Hello everybody For some hours now I try to find out how to create CAfile (a file with multiple CAs inside, the one file counterpart of -CApath). I need such a file for HTTPS Client authentification together with the yaws webserver. In the yaws user guide they write that it is a plain old opens

Re: problem by d2i_ECDSA_SIG

Hi Jim, Thank you. You are absolutely correct. What is a my stupid. I didn't look carefully ecdsa stuff. Nguyen. On Tue, Mar 25, 2008 at 4:29 PM, jimmy bahuleyan <[EMAIL PROTECTED]> wrote: > Helios Nguyen wrote: > > Hi everyone, > > > > i have problem with ECDSA_do_sign() and ECDSA_do_verify(). >

Re: Help: problem with handshaking

Thanks for the explanation. I am having problem with "Encrypted Alert". At first I thought it's because the Session ID length 0 is not correct. If this is not the problem, I really can't tell where it went wrong from packets I captured. I searched the web and I think "Encrypted Alert" means that t

Re: Generating Keys in Triple-DES encryption

Ambarish Mitra wrote: Hi Jimmy, Thanks for your response. Kindly find my thoughts inlined.. Question: So, the question is: How can we generate a key for Triple DES encryption and write out the same in a file? Simple answer for 'how to generate a key for a symmetric cipher' is 'use a pseudo-