Fwd: OpenSSL Mailing List Question

2011-11-07 Thread Curt Sampson
Folks, I'm developing a distributed application for which I'm currently planning to use OpenSSL to handle the security needs, which include a (privately-run) PKI. I can't divulge the details of the application, but this vendor's systems would be installed at individual client sites as well as hav

RE: Difference b/w TLS Connection and TLS Session

2011-11-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Wim Lewis > Sent: Friday, 04 November, 2011 15:44 > On 4 Nov 2011, at 7:12 AM, Mr.Rout wrote: > > Can any body please let me know "what is the difference between TLS > > Connection and TLS Session ? > > If a client makes a connection to a serv

RE: help please: commandline & DOS basics

2011-11-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Abdulhadi Abulzahab > Sent: Saturday, 05 November, 2011 12:32 > 1 - I want to use the " sha1" command but I need the result to go > into txt file not only to appear on the screen > otherwise I need to print the result o

RE: Open SSL API's Support For IPv6.

2011-11-07 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Akanksha Shukla > Sent: Thursday, 03 November, 2011 11:25 > I want to summarize > I am using the SSL API's for client application to get connect > to server and that worked fine over IPv4. Now my requirement is to > ha

Re: decrypt certificates signature

2011-11-07 Thread Dr. Stephen Henson
On Sun, Nov 06, 2011, Maurice Mahieu wrote: > I want to know if it is possible to decrypt the signature from a > server certicate with the issuers public key using openssl. > An additional data point to the comprehensive replies you've received so far. If you literally want to "decrypt the signa

Re: Difference b/w TLS Connection and TLS Session

2011-11-07 Thread Mr.Rout
Thanks Wim & Richard. But still i donot understand why I am seeing "Encryption Alert" ? My TLS Client is " 10.220.4.50" & My TLS Server is "10.204.4.69". If you see the packets #16,#31,#50 then an Encryption Alert is being sent by TLS Client. As of this Connection is getting closed and new hands

group certificate

2011-11-07 Thread prabhu kalyan rout
Hi all, I need to setup a testCA which will be able to issue group certificate. Can somebody tell me what will be the openssl commands or steps i need to do. Thanks & Regards __ OpenSSL Project http

Re: decrypt certificates signature

2011-11-07 Thread Jakob Bohm
For the RSA algorithm ONLY: The signature is the digest (plus some clever padding etc.) encrypted with the private key. RSA verification starts with decrypting the signature with the public key, then comparing the result to the expected padded value. For most other algorithms (such as DSA, ElGam

Re: decrypt certificates signature

2011-11-07 Thread Jeffrey Walton
Hi Maurice, On Mon, Nov 7, 2011 at 8:01 AM, Maurice Mahieu wrote: > I mean the first case, to verify the signature. > As I  understand the signature is the encyrpted digest of the certificate, I > was wondering if it is possible to decrypt the digest using the public key > of the issuer. 'Decrypt

Re: decrypt certificates signature

2011-11-07 Thread Maurice Mahieu
Thanks for the answer, I mean the first case, to verify the signature. As I understand the signature is the encyrpted digest of the certificate, I was wondering if it is possible to decrypt the digest using the public key of the issuer. with kind regards, Maurice On 11/07/2011 01:51 AM,

Re: help please

2011-11-07 Thread John Doe
From: Abdulhadi Abulzahab > 1 - I want to use the " sha1" command but I need the result to go into txt file Search for any dos/windows shell tutorial... And then search about redirections (> file). > 2 - I want to create a simple batch file  contains the sha1 command I typed > in the cmd : >

Re: Support for ECDH-RSA cipher suites in 0.9.8

2011-11-07 Thread Bodo Moeller
On Fri, Nov 4, 2011 at 5:23 PM, John Foley wrote: > None of the ECDH-RSA cipher suites appear to work in 0.9.8r. Yet they > work in 1.0.0. Is this expected? > Yes -- the OpenSSL 0.9.8 branch includes basic support for elliptic-curve cryptography, but TLS integration wasn't finished. This is b

Re: test vectors for CTR DRBG

2011-11-07 Thread Jiri Hladky
Hi Julien, thanks for the hint, I'm going to try it! Sorry for the long delay in response, I was quite sometime off-line and now I'm going through all the e-mails... Thanks! Jirka On Wed, Oct 19, 2011 at 7:06 PM, nimou wrote: > > > Jiri Hladky-2 wrote: > > > > Hello, > > > > I'm looking for