ECDH parameters

2011-07-01 Thread yyy
Hello! s_server (and probably other TLS servers), requires ECDH parameters, if using ECDH ciphersuites. (probably similarily as for DH parameters with DH ciphersuites). It seems, that these are supposed to be generated using: ecparam -name 'name_of_named_curve', but this always generates the

Re: ECDH parameters

2011-07-01 Thread Jeffrey Walton
2011/7/1 yyy y...@inbox.lv: Hello! s_server (and probably other TLS servers), requires ECDH parameters, if using ECDH ciphersuites. (probably similarily as for DH parameters with DH ciphersuites). It seems, that these are supposed to be generated using: ecparam -name 'name_of_named_curve',

State Machine with Managed C++

2011-07-01 Thread Harshvir Sidhu
Hi, I have implemented the state machine in my managed C++ application. Everything works fine for sometime, but after a while Asynchronous socket call beginreceive hangs, it never come out of that. I do not see any relation to this with SSL but this happens only when i am calling SSL routines in

RAND_seed RAND_bytes on Windows. How many random bytes I must give for function RAND_seed to seed PRNG properly?

2011-07-01 Thread Vladimir Belov
Hello. I'll collect entropy(random bytes) myself on Windows. How many random bytes I must give for function RAND_seed to seed PRNG properly in two cases: 1) Generating RSA keys. 2) Programming SSL-TLS. And where I must call RAND_seed during SSL-TLS programming? I think internal

Re: State Machine with Managed C++

2011-07-01 Thread Gayathri Sundar
Did you implement fd timeouts and appropriate cleanups after some expiration? It's impossible for non blocking sockets to hang..so I am assuming ur having a lot of unused fds on ur poll table. On Friday, July 1, 2011, Harshvir Sidhu hvssi...@gmail.com wrote: Hi,   I have implemented the state

Re: RAND_seed RAND_bytes on Windows. How many random bytes I must give for function RAND_seed to seed PRNG properly?

2011-07-01 Thread Jeffrey Walton
On Fri, Jul 1, 2011 at 1:14 PM, Vladimir Belov ml.vladimbe...@gmail.com wrote: Hello. I'll collect entropy(random bytes)  myself on Windows.  How many random bytes I must give for function RAND_seed to seed PRNG properly in two cases: Why not allow OpenSSL to auto seed itself? If you have an

Re: State Machine with Managed C++

2011-07-01 Thread Harshvir Sidhu
I am using Managed Sockets, and the socket is not hanging, BeginReceive function sets the callback function receive data, and that callback function is printing the log entry, so i assume the callback setting was successful, but the BeginReceive function call never returns. On Fri, Jul 1, 2011 at

extracting and decrypting certificate digest

2011-07-01 Thread Michal Strasburger
Hi all, For common uses with PKI I would like to do the following with openssl command line tool: 1. Create CA 2. Create Client 3. Verify Client in One Way Authentication (OWA) Now, I have successfully did first 2 steps using: ./CA.sh -newca ./CA.sh -newreq ./CA.sh

SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:293

2011-07-01 Thread islam
Hi Guys i have some problems using openssl to implement a pop3s (over tls). The code is here : http://stackoverflow.com/questions/6520676/pop3s-implementation-using-openssl-library pls this is very urgent. __ OpenSSL

How is key calculated from passphrase

2011-07-01 Thread Daniel Wambold
Hello list. Sorry for what is likely a simple question but I'm running out of time and could use a quick hand. I have a program that encrypts data using AES256 CBC mode and a 256 bit (obviously) key provided directly to the encryption engine as-is. I need our Windows-using counterpart to

Re: SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:293

2011-07-01 Thread Michael S. Zick
On Fri July 1 2011, islam wrote: Hi Guys i have some problems using openssl to implement a pop3s (over tls). The code is here : http://stackoverflow.com/questions/6520676/pop3s-implementation-using-openssl-library pls this is very urgent. Then send money. Open Source software

Re: How is key calculated from passphrase

2011-07-01 Thread Jeffrey Walton
On Fri, Jul 1, 2011 at 8:58 AM, Daniel Wambold wambo...@gmail.com wrote: Hello list. Sorry for what is likely a simple question but I'm running out of time and could use a quick hand. I have a program that encrypts data using AES256 CBC mode and a 256 bit (obviously) key provided directly to

Re: How is key calculated from passphrase

2011-07-01 Thread Michael S. Zick
On Fri July 1 2011, Jeffrey Walton wrote: On Fri, Jul 1, 2011 at 8:58 AM, Daniel Wambold wambo...@gmail.com wrote: Hello list. Sorry for what is likely a simple question but I'm running out of time and could use a quick hand. I have a program that encrypts data using AES256 CBC mode and a

Re: RAND_seed RAND_bytes on Windows. How many random bytes I must give for function RAND_seed to seed PRNG properly?

2011-07-01 Thread Vladimir Belov
Thanks for answers, Jeff. But I still have questions: Why not allow OpenSSL to auto seed itself? Because on Windows we have not /dev/random and that's why I think that auto seed will be worse. But if OpenSSL seed PRNG automatically and I must not do anything else, why in FAQ I see: On other