How to add new objects?

2008-11-28 Thread F.
Hello, When I try to sign a certificate (previous NID skipped): > businessCategory:unknown object type in 'policy' configuration #IDENTIFIER ::= {id-at 14} id-at-businessCategory OBJECT \ I do not see businessCategory in openssl objects.txt file. Any way to add this OID to certificat

Re: 2way SSL Handling Dynamic and Randomly generated Self-signed RSA pairs to all peers

2008-11-28 Thread Peter Sysko
Michael S. Zick wrote: Two things that occur to me - *) Doesn't Diffie-Hillman already do that? Without the file exchange. *) Have you considered this plan from the viewpoint of a zero-knowledge proof? Mike thanks for the reference. i had no prior knowledge to Diffie-Hillman. looked it

Re: FIXED - CRYPTO_set_dynlock_* mystery ... (was: Engine Issue: nShield 500)

2008-11-28 Thread Geoff Thorpe
On Friday 21 November 2008 14:50:41 Sander Temme wrote: [snip] > I would suggest a > documentation fix, like so: > > Index: engines/e_chil.c > === > RCS file: /home/openssl/cvs/openssl/engines/e_chil.c,v > retrieving revision 1.9 > dif

Asynchronous SSL_accept error. Openssl documentation not clear.

2008-11-28 Thread BiGNoRm6969
Hi, I am trying to develop a SSL server with asynchronous socket. I am able to make the asynchronous socket connection but it failed at the handshake step. In fact, SSL_accept returns < 0 error. In the OpenSSL documentation, for the < 0 error of the SSL_accept function, we can read "It can also

Re: 2way SSL Handling Dynamic and Randomly generated Self-signed RSA pairs to all peers

2008-11-28 Thread Michael S. Zick
On Fri November 28 2008, Peter Sysko wrote: > Hello. > Two things that occur to me - *) Doesn't Diffie-Hillman already do that? Without the file exchange. *) Have you considered this plan from the viewpoint of a zero-knowledge proof? Mike > I've read over the majority of the information about w

Re: RSA "standalone"

2008-11-28 Thread Ger Hobbelt
OpenSSL comes as two parts already: crypto and SSL library. Extracting the RSA code from crypto/RSA/ and compiling it as is is relatively simple - at least at a level of what I consider simple; the biggest part of work is related the e_os.h/e_os2.h header files which contain all the system-depende

2way SSL Handling Dynamic and Randomly generated Self-signed RSA pairs to all peers

2008-11-28 Thread Peter Sysko
Hello. I've read over the majority of the information about what the OpenSSL project is for and is striving to become, and, being not a hardcore coder, I must say I a little overwhelmed with some technical details that I won't be addressing right now, this post is just to introduce an idea, if

[FWD] Bug report

2008-11-28 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from Swaraj G Tati <[EMAIL PROTECTED]> - To: [EMAIL PROTECTED] Cc: Sudarshan Yeddula <[EMAIL PROTECTED]>, Chalapathy Sarangapani <[EMAIL PROTECTED]> Subject: Bug report From: Swaraj

RSA "standalone"

2008-11-28 Thread Clemens26
Hi I have probably a very stupid question but anyway there we go. I am just wondering if it is simple to extract the RSA functionality from the OpenSSL library? I have heard that it should be possible to compile and run the crypto part of OpenSSL alone so I assume it shouldnt be a big to do the s

Fips-1.2 make fails

2008-11-28 Thread Stan R Turner
Hello I am a novice at this so I am looking for some assistance. I am trying to build the fips-1.2 module on a SUN x86 server running Solaris 10 64-bit. I tried the standard config program but got the following msg. from make. # ./config fips Operating system: i86pc-whatever-solaris2 Configur