Re: Compiling openssl code - ca.c

2009-04-15 Thread starfish Trousers
Hi again,I googled and found some familiar solutions about my problem and the solution is to make symbolic link due to the missing link:copy it from lib/libssl to lib/libssl/includehowever I could not find my libssl in any of my directory. can somebody help me on this? I have also tried to edit my

Compiling openssl code - ca.c

2009-04-15 Thread starfish Trousers
Hi All, I'm trying to compile /apps/ca.c from the openssl in the process to create a single binary for revocation. I have initially face this problem whereby I received below error: In file included from ca.c:91:apps.h:115:18: error: e_os.h: No such file or directoryca.c: In function ‘main’:ca.c

Win-32 build problem

2009-04-15 Thread Bob Barnes
I apologize up front if these questions seem particularly basic, but I'm not a Windows developer and I'm not familiar with Visual Studio, makefiles, Perl, etc. I'm trying to build a debug version on Win-32 (Windows XP) and getting build errors. I was able to successfully run the initial Configur

Certificate validation failed

2009-04-15 Thread Vladimir Nicolici
We are currently implementing file time stamping for our invoices and we are using a time stamping service that implements RFC3161, Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP), over HTTP. Three days ago I started looking at the openssl as a

RE: Query on OpenSSL for Certificate verification

2009-04-15 Thread Vijay Kothamasu (vikotham)
Hi Kyle, We would have surely done that if the implementation is from scratch. But currently we are just trying to add a small enhancement to the existing functionality...:) Thanks for your help. Regards Vijay -Original Message- From: Kyle Hamilton [mailto:aerow...@gmail.com] Sent: W

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Victor Duchovni
On Wed, Apr 15, 2009 at 08:19:34PM +0300, Atti wrote: > Okay, well as I said, I compiled and ran the example from the OpenSSL > docs (http://openssl.org/docs/crypto/EVP_EncryptInit.html#EXAMPLES), > which has an IV, and the application still behaves the same. What key and IV sizes does the follow

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Atti
Okay, well as I said, I compiled and ran the example from the OpenSSL docs (http://openssl.org/docs/crypto/EVP_EncryptInit.html#EXAMPLES), which has an IV, and the application still behaves the same. On Wed, Apr 15, 2009 at 8:15 PM, Victor Duchovni wrote: > On Wed, Apr 15, 2009 at 08:05:55PM +030

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Victor Duchovni
On Wed, Apr 15, 2009 at 08:05:55PM +0300, Atti wrote: > I get always the same output for debug / and the "different" same each > time for the release, if I use the same key and the same input data. Clearly you have a constant IV with the debug library and a "random" IV otherwise. > I'm using the

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Atti
I get always the same output for debug / and the "different" same each time for the release, if I use the same key and the same input data. I'm using the following EVP_* functions: EncryptInit(), EncryptUpdate(), EncryptFinal(). Using the 3DES cbc algorithm, but I tried the blowfish too, with the s

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Victor Duchovni
On Wed, Apr 15, 2009 at 11:46:56AM +0300, Atti wrote: > I built the new OpenSSL (1.0.0) and tried to run the blowfish > encryption example from the OpenSSL docs > (http://openssl.org/docs/crypto/EVP_EncryptInit.html#EXAMPLES) but > this time I used the same library to compile the application, beca

Re: Query on OpenSSL for Certificate verification

2009-04-15 Thread Dr. Stephen Henson
On Wed, Apr 15, 2009, Vijay Kothamasu (vikotham) wrote: > Hi Kyle, > > Thanks for your valuable inputs, find my response inline. > > > Then don't return from the original SSL_CTX_set_verify callback until you > either: > a) receive a valid OCSP response that says it's okay, > b) receive a val

Installing/using OpenSSL

2009-04-15 Thread Atti
Hello, I'm having some weird problems with all of my OpenSSL applications (as a described in my previous mail), and they're most probably caused by me using the wrong libs/DLL's. My OpenSSL version is the newest (1.0.0beta), i built it just like the install instructions say, on a WIN32 machine. The

SSLVerifyClient in apache + openssl

2009-04-15 Thread Mike Pechkin
hi, Is it a bug ? This is scenarion for CentOS 5.3 (apache 2.2.3 + openssl-0.9.8e) 1. Simple httpd.conf (nothing special) + ssl part, selfsigned certs + CA: SSLRandomSeed startup file:/dev/urandom 512 SSLRandomSeed connect file:/dev/urandom 512 SSLSessionCache shmcb:/var/cache/mod_ssl/ssl_scache

Re: RFC 4680 implementation

2009-04-15 Thread nhack
Hi, I need this library to test some client puzzles to protect HTTPS Servers from DoS. I have taken a second look to the 4680 RFC and the TLS RFC and I can send the puzzles after the SERVER_DONE state. Thank you for your answer, I will look now for the newest version of your code. Marius Eman

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Atti
I built the new OpenSSL (1.0.0) and tried to run the blowfish encryption example from the OpenSSL docs (http://openssl.org/docs/crypto/EVP_EncryptInit.html#EXAMPLES) but this time I used the same library to compile the application, because this build only made this one. I made one debug and one rel

Re: Open SSL via dyndns.org

2009-04-15 Thread Steffen DETTMER
* tobias.sem...@diemer-ing.de wrote on Tue, Apr 14, 2009 at 15:04 +0200: > Is there a chance to create a certification on the intern server called by > the extern https://name.dyndns.org adress ? It depends on the software you are using and on the setup... If you use some non-routable IP for your

Re: OpenSSL cryptography fails in release mode, but no in debug

2009-04-15 Thread Atti
I built the new OpenSSL (1.0.0) and tried to run the blowfish encryption example from the OpenSSL docs ( http://openssl.org/docs/crypto/EVP_EncryptInit.html#EXAMPLES) but this time I used the same library to compile the application, because this build only made this one. I made one debug and one re

Re: Linkpoint giving SSLEAY_RAND_BYTES:PRNG not seeded

2009-04-15 Thread Kyle Hamilton
In the System environment variables, set the RANDFILE parameter to a file that has a lot of entropy. You must be an Administrator to do this. -Kyle H On Tue, Apr 14, 2009 at 8:30 PM, seanlennon wrote: > > Did this fix the problem.  I'm having the same problem.  How exactly do you > "set RANDFIL

Re: Linkpoint giving SSLEAY_RAND_BYTES:PRNG not seeded

2009-04-15 Thread seanlennon
Did this fix the problem. I'm having the same problem. How exactly do you "set RANDFILE environment variable in the service process" Is that the same as the environment variables. I bet this is a windows 2003 server. I actually called linkpoint about this. They had no solution. wolfofth

RE: Query on OpenSSL for Certificate verification

2009-04-15 Thread Vijay Kothamasu (vikotham)
Hi Kyle, Thanks for your valuable inputs, find my response inline. Then don't return from the original SSL_CTX_set_verify callback until you either: a) receive a valid OCSP response that says it's okay, b) receive a valid OCSP response that says it's not okay, c) receive an invalid OCSP respon