Problem with OpenSSL getpid() on RHEL 5.5

2011-12-05 Thread Patrick Mischler
We do have a serious problem with OpenSSL on RHEL 5.5. The installed version is 0.9.7 . Our application calls the function getpid() or whatever and this leads the application to crash. We've contacted our software vendor and they told us the root cause of the problem lies within the OpenSSL librari

RE: Help in Understanding

2011-12-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dave Thompson > Sent: Saturday, 03 December, 2011 20:44 > > 2. Is there any way to decrypt Application data (HTTP > > data) on wireshark itself ? > > If using kRSA and you have/get the server's private key, yes. > Edit / Preferences / Protoc

RE: Transferring DH public key from server to client

2011-12-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Odomae Bro > Sent: Saturday, 03 December, 2011 23:23 > I would like to generate my own DH private/public keys and > have the client/server exchange these values. The problem I am > having is that the openssl build I have is

RE: Decrypted buffer padding

2011-12-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Nico Flink > Sent: Monday, 05 December, 2011 06:31 > To avoid the padding problem I tried the AES OFB and CFB > streaming modes. Indeed this solves the padding problem. But > if I understand the concept of stream ciphers correctly every > bit

RE: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

2011-12-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of pankajy > Sent: Monday, 05 December, 2011 10:26 > I am doing SSL Communication having no certification > validations on client > and server side. So I skipped this validation and tried > SSL_connect with > host. Here I can successfully connect

OpenSSL FIPS Module 2.0 and OpenSSL 0.9.8x

2011-12-05 Thread Varma Dantuluri
Hi Can the new OpenSSL FIPS 2.0 module be used with OpenSSL 0.9.8 releases? Or can it only be used with OpenSSL 1.0.1 and later? Thanks Varma

Re: Problems with a setting certificates via OpenSSL in C++ (Windows)

2011-12-05 Thread Jeffrey Walton
On Mon, Dec 5, 2011 at 7:35 AM, wrote: > Hi, > > > > I am trying to make a simple C++ (64-bit) client program that can establish > a SSL connection with a remote server using OpenSSL on windows-7. I can > successfully execute the followings to create a new context block; > > > > SSL_library_init(

Problems with a setting certificates via OpenSSL in C++ (Windows)

2011-12-05 Thread Hamid.Shahid
Hi, I am trying to make a simple C++ (64-bit) client program that can establish a SSL connection with a remote server using OpenSSL on windows-7. I can successfully execute the followings to create a new context block; SSL_library_init(); SSL_load_error_strings(); meth=SSLv23_client_method(); c

error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

2011-12-05 Thread pankajy
Hi All, I am doing SSL Communication having no certification validations on client and server side. So I skipped this validation and tried SSL_connect with host. Here I can successfully connect with host using tcp socket but unable to connect with host using SSL_connect. It fails with errror "err

AW: Decrypted buffer padding

2011-12-05 Thread Nico Flink
Hi, thanks a lot for your detailed reply, Dave. To avoid the padding problem I tried the AES OFB and CFB streaming modes. Indeed this solves the padding problem. But if I understand the concept of stream ciphers correctly every bit is en/decrypted with a bit from the key stream. It seems to me

Re: Problems with a setting certificates via OpenSSL in C++ (Windows)

2011-12-05 Thread Jakob Bohm
On 12/3/2011 8:22 PM, Jeffrey Walton wrote: On Fri, Dec 2, 2011 at 1:55 PM, wrote: Hi, I am trying to make a simple C++ (64-bit) client program that can establish a SSL connection with a remote server using OpenSSL on windows-7. I can successfully execute the followings to create a new context

Openssl Fips mode Eclipse CDT

2011-12-05 Thread Jeremyc
Hello, We're students who have to realize a project for a company using openssl in fips mode. We're having some problems using the fips mode in Eclipse CDT. THe compilation of openssl in fips mode is ok but when we try to use it in eclipse we can't call the function FIPS_MODE_SET(1). However, we