Re: c/c++ & and GOST is russian ciphers.

2011-09-24 Thread Andrey Kulikov
You need to initiualie engine first: static ENGINE *e = NULL; e = ENGINE_by_id("gost"); if (!e){ printf("Can't find engine \n"); return 1; } if (!ENGINE_init(e)){ printf("Engine initialization failed!\n"); ENGINE_free(e); return 1; }

Re: Unable to enable GOST ciphers support

2011-09-24 Thread Andrey Kulikov
You config file is incorrect. It should looks something like this: == openssl_conf = openssl_def [openssl_def] engines = engine_section [engine_section] gost = gost_section == On 19 September 2011 12:31, Peter Volkov wrote: > Hi! I'm trying to e

certificate problems http://www.rtfm.com/openssl-examples/

2011-09-24 Thread mattj610
In regards to the examples given at http://www.rtfm.com/openssl-examples/ I have been trying to set up pem files so that the connection will work by self signed certificates. I can get the wclient to connect only with the -i option, as I understand the example pem files expired long ago. I have be

Re: TLS 1.0 "cracked"...

2011-09-24 Thread Ben Laurie
On Fri, Sep 23, 2011 at 4:54 PM, Dr. Stephen Henson wrote: > On Fri, Sep 23, 2011, Jakob Bohm wrote: > >> >> Is openssl running out of bit values for SSL_OP_ constants? >> > > Well more ran out of contants. When a new flag was needed for TLS v1.2 all 32 > bits were used but fortunately two ancient

query reg disabling hanshake and key exchange mechanism openssl

2011-09-24 Thread Siddharth Sharma
Hi, I am a network security researcher. We have designed and developed a multifactor authentication and secure key exchange protocol that can counter man in the middle attack. I want to integrate my protocol with SSL on apache. I have written my own protocol for authentication and key exchange.