Re: last parameter of AES_ofb128_encrypt

2013-01-08 Thread jeetendra gangele
when I use AES_ofb128_encrypt for decrpyting 2 bytes of data. Actually I have 18 bytes of data so 16 bytes I am decryting with CBC and 2 bytes with OFB mode. For this 2 bytes I am using IV as 16 bytes of decrypted data(means plaintext),but this 2 bytes data is not maching. what will be the key her

openssl RPM package

2013-01-08 Thread Walter H.
Hello, is there an openssl RPM package with version 0.9.8 or better for CentOS 4.x? (upgrade to CentOS 5.x or 6.x is impossible) Thanks, Walter smime.p7s Description: S/MIME Cryptographic Signature

Re: References to NSS libraries

2013-01-08 Thread Jeffrey Walton
On Tue, Jan 8, 2013 at 1:14 PM, Carson Gaspar wrote: > On 1/8/13 9:52 AM, Jeffrey Walton wrote: >> >> That seems like a really odd requirement. Is there any reading on the >> topic? > > man nsswitch.conf > >> Generally, I prefer static linking in high integrity software. And I >> oppose "plug-in"

Re: References to NSS libraries

2013-01-08 Thread Carson Gaspar
On 1/8/13 9:52 AM, Jeffrey Walton wrote: That seems like a really odd requirement. Is there any reading on the topic? man nsswitch.conf Generally, I prefer static linking in high integrity software. And I oppose "plug-in" like functionality. Then you need to not run on Linux or Solaris, or

Re: References to NSS libraries

2013-01-08 Thread Jeffrey Walton
On Tue, Jan 8, 2013 at 11:13 AM, Florian Weimer wrote: > On 01/08/2013 04:34 PM, Serhiy Ivanov wrote: >> >> Is there way to get some 3rd party documentation about advanced >> configuration of ssl. >> I need to >> 1) Get rid from linkage >> b75d6000-b75e6000 r-xp 08:03 54611 >> /lib/i386-l

OpenSSl / SMIME and header : Disposition-Notification-To

2013-01-08 Thread Nicolas de La Fortelle
Hi, I used to send openssl SMIME with no problem. I needed to add a header : Disposition-Notification-To : [email adress] But I could not figure out how to send it correctly. If I use sendmail, it removes the header Disposition-Notification-To, and when I tried other mailer (Mutt) it adds the cryp

References to NSS libraries

2013-01-08 Thread Florian Weimer
On 01/08/2013 04:34 PM, Serhiy Ivanov wrote: Is there way to get some 3rd party documentation about advanced configuration of ssl. I need to 1) Get rid from linkage b75d6000-b75e6000 r-xp 08:03 54611 /lib/i386-linux-gnu/i686/cmov/libresolv-2.13.so b75e6000-b75e7000 r--p 0001 08:03 54

Re: last parameter of AES_ofb128_encrypt

2013-01-08 Thread jeetendra gangele
when I use AES_ofb128_encrypt for decrpyting 2 bytes of data. Actually I have 18 bytes of data so 16 bytes I am decryting with CBC and 2 bytes with OFB mode. For this 2 bytes I am using IV as 16 bytes of decrypted data(means plaintext),but this 2 bytes data is not maching. what will be the key her

Re: RSA_PKCS1_PSS_PADDING and CMS_verify (repost)

2013-01-08 Thread Dr. Stephen Henson
On Tue, Jan 08, 2013, Chris Bare wrote: > Sorry to repost this, but I didn't see a reply and though it might have > gotten lost in the shuffle of recent server changes. > > I saw the message below on the mailing list. I have run into a situation > where I have a CMS using the PSS padding and I wa

[no subject]

2013-01-08 Thread Serhiy Ivanov
Is there way to get some 3rd party documentation about advanced configuration of ssl. I need to 1) Get rid from linkage b75d6000-b75e6000 r-xp 08:03 54611 /lib/i386-linux-gnu/i686/cmov/libresolv-2.13.so b75e6000-b75e7000 r--p 0001 08:03 54611 /lib/i386-linux-gnu/i686/cmov/libresolv-2.1

RSA_PKCS1_PSS_PADDING and CMS_verify (repost)

2013-01-08 Thread Chris Bare
Sorry to repost this, but I didn't see a reply and though it might have gotten lost in the shuffle of recent server changes. I saw the message below on the mailing list. I have run into a situation where I have a CMS using the PSS padding and I wanted to see if this might be implemented by now in

Re: full static linkage

2013-01-08 Thread Serhiy Ivanov
Let's close question with full path for library (simply no -l option need). On Tue, Jan 8, 2013 at 2:36 PM, Jakob Bohm wrote: > On 1/8/2013 10:03 AM, Serhiy Ivanov wrote: >> >> I built my simple project with -lssl option, so libsssl.a qattached >> statically. However as i see from map report i s

Re: full static linkage

2013-01-08 Thread Jakob Bohm
On 1/8/2013 2:43 PM, Serhiy Ivanov wrote: Could you kindly explain how to explicitly point out to linker some library. Line "-l /usr/local/ssl/lib/libssl.a" of course fails. At least -l is not meant to point out explicit library. Can i reconfigure my openssl library in that way that no ".so" out

Re: full static linkage

2013-01-08 Thread Serhiy Ivanov
Could you kindly explain how to explicitly point out to linker some library. Line "-l /usr/local/ssl/lib/libssl.a" of course fails. At least -l is not meant to point out explicit library. Can i reconfigure my openssl library in that way that no ".so" output will generated at all? On Tue, Jan 8, 2

Re: full static linkage

2013-01-08 Thread Jakob Bohm
On 1/8/2013 10:03 AM, Serhiy Ivanov wrote: I built my simple project with -lssl option, so libsssl.a qattached statically. However as i see from map report i see next pages: The command cc -lssl tells the compiler and linker to look for either libssl.a or libssl.so along its library search pa

OPENSSL TS - verify problem time-stamping

2013-01-08 Thread kapetr
Hello, I have tried many TSA services with the same (error) result. -- openssl ts -query -data file2.txt >file2.tsq openssl ts -query -data file2.txt -cert >file2-cert.tsq /usr/lib/ssl/misc/tsget -d -h http://timestamp.comodoca.com/rfc3161 -o file2.tsr file2.tsq /u

full static linkage

2013-01-08 Thread Serhiy Ivanov
I built my simple project with -lssl option, so libsssl.a qattached statically. However as i see from map report i see next pages: b7396000-b7539000 r-xp 08:03 332998 /usr/lib/i386-linux-gnu/i686/cmov/libcrypto.so.1.0.0 b7539000-b753a000 ---p 001a3000 08:03 332998 /usr/lib/i386-linux-gnu/i