Problems with sending RSA public keys.

2009-02-20 Thread Mrigank
Hi All! I wanted to write an application wherein I had to "send" a server's public key (RSA) to a client. So I generated the RSA keys with RSA_generate_key and checked it with RSA_check_key. I then tried copying the "entire" RSA structure pointer returned by RSA_generate_key to a send buffer

Re: Install openssl

2009-02-20 Thread Victor B. Wagner
On 2009.02.19 at 12:38:27 -0800, Database System wrote: > > Hi, > > I'm new to openSSL/SSL. I downloaded the file. It is If you are new to openSSL, it is better to use version which is provided by your Linux distribution. Every linux distribution out there already includes OpenSSL, and applic

Re: static openssl on mingw (undefined reference on bss_sock.c)

2009-02-20 Thread Tomasz Kolaj
Hello, Dnia czwartek 19 luty 2009 o 14:57:56 napisałeś: > > Those functions are in secur32.lib Unfortunetly I need still compile shared version also and make fails with that: - cut -- gcc -O2 -Wall -Wmissing-prototypes -Wpointer-arith -Winline -Wdeclaration- after-statement -Wendif-labels -fno-

RE: Install openssl

2009-02-20 Thread Mark
> There is also O'Reilly book "Securing applications with OpenSSL". > But I haven't read it so don't know if it suites you. If you mean "Network Security with OpenSSL" then this is a good basic starter to OpenSSL, but it does not contain everything you need to know. AFAIK there is no single sourc

Re: static openssl on mingw (undefined reference on bss_sock.c)

2009-02-20 Thread carlyoung
>>On Fri 20/02/09 10:17 AM , Tomasz Kolaj m...@abp.pl sent: >>Hello, >> >>Unfortunetly I need still compile shared version also and make fails with >>that: >> >>C:/msys/1.0/local/ssl/lib/libssleay32.a(ssl_lib.o)(.text+0x4ab):ssl_lib.c: >>undefined reference to `BIO_s_socket' That's part of opens

Re: static openssl on mingw (undefined reference on bss_sock.c)

2009-02-20 Thread Tomasz Kolaj
Dnia piątek 20 luty 2009 o 12:28:59 napisałeś: > >>On Fri 20/02/09 10:17 AM , Tomasz Kolaj m...@abp.pl sent: > >>Hello, > >> > >>Unfortunetly I need still compile shared version also and make fails with > >>that: > >> > >>C:/msys/1.0/local/ssl/lib/libssleay32.a(ssl_lib.o)(.text+0x4ab):ssl_lib.c > >

Re: Install openssl

2009-02-20 Thread Database System
Hi Victor, Thank you so much for your valuable information. I will as our admin about the openSSL with our Linux. Lisa --- On Fri, 2/20/09, Victor B. Wagner wrote: > From: Victor B. Wagner > Subject: Re: Install openssl > To: openssl-users@openssl.org > Date: Friday, February 20, 2009, 2:52

RE: FIPS Server

2009-02-20 Thread David Schwartz
> Hello all, > I have a general query regarding FIPS mode. I am running an simple openssl > https server based on openssl that services https requests from window > clients. I have the following setting in my windows XP "Use FIPS comliant > algorithms for encryption, hashing and signing set to 1"

request certificate

2009-02-20 Thread sarym binome
hi,there I'm trying to create a request certificate, but i don't know how to create req.cnf (wich information I've to put in this file ,I'm new and i've no idea) i tried this command openssl req -config req.cnf -new -key macle.pem mareq.pem and i've these errors : req [options] outfil

Re: question about generating keys/certs to go with Rescorla's book examples

2009-02-20 Thread Kevin D. Clark
A few months ago I asked: > I am having some trouble with the examples in Rescorla's _SSL and TLS: > Designing and Building Secure Systems_ book. I feel like I am making > a minor mistake somewhere, but I'm just overlooking where. I would > appreciate another set of eyes to tell me where I am g

Extra character from X509_get_subject_name

2009-02-20 Thread Carol Wu
Hi, Do you know why an extra charater "/" is attached in front of the subject name? X509_NAME_oneline(X509_get_subject_name(cert), data, 256); fprintf(stderr, " Subject = %s\n", data); The output is like "/CN=XXX.hp.com". Carol ___

Re: FIPS Server

2009-02-20 Thread Kyle Hamilton
Default OpenSSL can understand and speak the cryptographic algorithms that FIPS can validate. This does not mean that it is FIPS validated. (For example, if it can accept MD5 for anything other than establishing the premaster secret, it's not FIPS validated or even FIPS validatable.) This is an

Creating a CA cert with explicit start/end date

2009-02-20 Thread Oliver Martin
Hello, I'm trying to create a CA cert with explicit notBefore and notAfter dates. I've tried to follow the advice given in an old mailing list post [1], but haven't been successful so far. The commands I'm using are these: openssl req -nodes -config ca/openssl.cnf -days 1825 -x509 -newkey \ rsa:

RE: Extra character from X509_get_subject_name

2009-02-20 Thread David Schwartz
> Hi, > > > Do you know why an extra charater "/" is attached in front of the > subject name? > > X509_NAME_oneline(X509_get_subject_name(cert), data, 256); > > fprintf(stderr, " Subject = %s\n", data); > > The output is like "/CN=XXX.hp.com". > > Carol X509_NAME_online is known to be buggy and