Re: SSLv3 handshake timeouts over slow communication

2012-06-12 Thread Jayant Dusane
SO_RCVTIMEO and SO_SNDTIMEO didnt work! and also nothing related to certifacte, firewall, authentication. because it works with 0.6 ms latency and stopped working in ~100ms latency network. logs are : SSL_connect:error in SSLv2/v3 write client hello B

Re: symmetric key generation..

2012-06-12 Thread vinayak.T.K
presently i m working on the project which includes the generation of symmetric key from the public keyi m just a begginerso can u please help me out. Victor Duchovni wrote: On Wed, Nov 21, 2007 at 04:21:18AM -0800, Ramkumar Ganapathy wrote: I am trying to use the OpenSSL

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread exvance
Hi Erik, Here is the output: ~~# which openssl /usr/bin/openssl root@ph:~# openssl version OpenSSL 1.0.1c 10 May 2012 (Library: OpenSSL 1.0.0e 6 Sep 2011) Thanks for any info you can provide! Eric Erik Tkal wrote: What's the output of 'which openssl' and 'openssl version'?

Re: symmetric key generation..

2012-06-12 Thread Joshua Bowman
On 6/10/2012 11:18 PM, vinayak.T.K wrote: presently i m working on the project which includes the generation of symmetric key from the public keyi m just a begginerso can u please help me out. Victor Duchovni wrote: On Wed, Nov 21, 2007 at 04:21:18AM -0800, Ramkumar Ganapathy

Re: symmetric key generation..

2012-06-12 Thread Michel
Hi Mr Newbie, Joshua is right when saying you should be carefull using tech's you might not fully understand ( just like me, ;-) ) Perhaps RAND_bytes() is enough for your needs ? http://www.openssl.org/docs/crypto/RAND_bytes.html I am guessing it could be profitable for you to read :

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread Erik Tkal
Hi Eric, So it looks like your /usr/bin/openssl binary is built from OpenSSL 1.0.1, but the shared libraries in /usr/lib are from 1.0.0? I'm not too familiar with how linux library resolution works, but don't you need the 1.0.1 libs copied to the /usr/lib folder? I don't think 1.0.1 and

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread Erik Tkal
In fact a quick compare of x509.h shows that the X509_sign_ctx entry point is new in OpenSSL 1.0.1. Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On

About signing RSA-SHA1(RSASSA-PKCS1-v1_5)

2012-06-12 Thread Neko
I'm trying to use OpenSSL to do RSA-SHA1(RSASSA-PKCS1-v1_5), which is used in xml signature. But the result doesn't match with the one comes from xmlsec. How I did it: RSA_sign(NID_sha1, *digestvalue*, 20, signvalue, siglen, *rsa*); where *digestvalue* is the direct output of SHA1() without

RE: Configure OpenSSL to skip SSL1 SSL2?

2012-06-12 Thread Garrison, Jim (ETW)
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Monday, June 11, 2012 8:38 PM To: openssl-users@openssl.org Subject: Re: Configure OpenSSL to skip SSL1 SSL2? On Mon, Jun 11, 2012 at 4:32 PM,

RE: Error: can't resolve symbol 'X509_sign_ctx'

2012-06-12 Thread exvance
That was it! Thanks for your help. I just uninstalled the libopenssl package and installed the correct version. It now works. Thanks! Erik Tkal wrote: In fact a quick compare of x509.h shows that the X509_sign_ctx entry point is new in OpenSSL 1.0.1.

RE: Configure OpenSSL to skip SSL1 SSL2?

2012-06-12 Thread Garrison, Jim (ETW)
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Garrison, Jim (ETW) Sent: Tuesday, June 12, 2012 10:41 AM To: openssl-users@openssl.org Subject: RE: Configure OpenSSL to skip SSL1 SSL2? -Original Message-

Re: Configure OpenSSL to skip SSL1 SSL2?

2012-06-12 Thread Jeffrey Walton
On Tue, Jun 12, 2012 at 3:04 PM, Garrison, Jim (ETW) jim.garri...@nike.com wrote: -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Garrison, Jim (ETW) Sent: Tuesday, June 12, 2012 10:41 AM To: openssl-users@openssl.org