Re: is any documentation for programmers?

2006-04-21 Thread Christopher Fowler
This may or may not be a useful example: static int rn_crypto_bulk(char *buffer, char *out, BF_KEY *key, int cmd, size_t len) { int c = 0; // Temp counter char tmp[8] = { 0 };// Temp buffer char *ptr = out;// Pointer to out buffer while(c < len) { // Perfomr th

Re: multiple IP addresses

2006-04-20 Thread Christopher Fowler
On Thu, 2006-04-20 at 14:53 -0700, Joseph Bruni wrote: > Is BIO_do_connect() smart enough to try to connect to all IP addresses > if a name resolves to more than one? Isn't that a round robin DNS setup? Maybe not __ OpenSSL

RE: Licenses...

2006-04-11 Thread Christopher Fowler
On Tue, 2006-04-11 at 17:31, Ted Mittelstaedt wrote: > Once more, very fuzzy. If your code is a loader then how am I gonna load > my stuff into your device without it? All I have to do is take the > firmware > image for your device, separate out your loader, replace the GPL with > my own GPL, and

Re: Licenses...

2006-04-11 Thread Christopher Fowler
On Tue, 2006-04-11 at 08:07 -0400, Wes Kussmaul wrote: > Are you suggesting that if you embed software in a hardware product, > it's no longer software? > > The GPL most certainly applies to embedded versions of software > products > which it licenses. > > If that were not true then I would be

Re: 2nd Request for help Blackberry 7520 and failed in SSLv3 read client certificate A

2006-03-29 Thread Christopher Fowler
On Wed, 2006-03-29 at 11:19 -0500, David Gianndrea wrote: > Dr. Henson, have you a few minutes to spare a lost admin? There is one way to get the attention of those who know to stop what they are doing and spend cycles on your issue. That way is PayPal Many of us on this list are very busy a

Re: Multiple Certificates, 1 Web Server

2006-03-13 Thread Christopher Fowler
On Mon, 2006-03-13 at 08:35 -0500, [EMAIL PROTECTED] wrote: > > So for one group, they will give them a HTTPS URL for domainX, and for > another group, they will give them another HTTP URL for DomainY, but > they > will be hitting the same IP server. sounds like a virtual domain. If you have 2

Re: Header vs library version...

2005-11-03 Thread Christopher Fowler
I think --with-ssl-dir is meant for the development directory that includes the headers. But I guess I'm wrong. >From INSTALL: --with-ssl-dir=DIR allows you to specify where your OpenSSL libraries are installed. On Thu, 2005-11-03 at 18:09 -0500, Edward Carr wrote: > But I explicitly told it to

Re: Header vs library version...

2005-11-03 Thread Christopher Fowler
What is going on is that in /usr/lib you have OpenSSL 0.9.7g libraries installed. You are telling configure that you want it to use the headers in /opt/openssl which are 0.9.7i. configure checks to make sure that the libraries it will link into the application are the same version as the headers

RE: High CPU usage on dial-up connections

2005-07-31 Thread Christopher Fowler
On Sun, 2005-07-31 at 15:23 -0700, David Schwartz wrote: > Most likely you are using non-blocking sockets and spinning, waiting for > data to be received or sent. Broadband connections empty the buffers faster, > so you spend time waiting for handoffs rather than buffers. Profile and see > w

Re: SSL over Serial-link

2005-06-04 Thread Christopher Fowler
Setup each port in raw mode. This should allow the process that has the port open to treat is as a regular file. You may have eco turned on and that will cause problems. Setup the port in ram mode then turn on any flow control you need. On Sat, 2005-06-04 at 17:14, Philipp Gühring wrote: > Hi,

Re: Confusion about SSL_ERROR_WANT_READ/WRITE

2005-04-15 Thread Christopher Fowler
Whats wrong with select? Or are you using java that does not support select() On Fri, 2005-04-15 at 18:24, Edward Chan wrote: > I have an app where reads and writes happen from different threads. > Now, ideally, one would envision that I just replace the reads/writes > with SSL_read/SSL_write.

SSH Hangs

2004-09-02 Thread Christopher Fowler
I've configured 2 servers to communicate via on demand dial-up PPP links. telnet, http, ping, etc work fine but ssh hangs. The minute I execute the ssh command the modem dials but ssh hangs forever. On top of that pppd terminates and dials back due to inactivity. Apparently from the keepalive p

Re: HTML man pages

2004-06-04 Thread Christopher Fowler
wget can do it for you On Fri, 2004-06-04 at 09:17, Ken Goldman wrote: > I've found HTML versions of the openSSL man pages on the web, > including at the openSSL site itself. > > Is there a place to download all the HTML, so I can access it off > line? _

Re: about hostname in certificate

2003-09-04 Thread Christopher Fowler
This is a problem we have struggled with. I do not use host names on much of our equipment. I would like to use IP addresses. I believe the certificates require hostnames On Thu, Sep 04, 2003 at 07:35:31PM +0800, linux guy wrote: > I am using java to test my ssl supported web server, > I always

Re: FQDN

2003-07-21 Thread Christopher Fowler
21, 2003 at 07:28:51PM +0300, Vadim Fedukovich wrote: > On Mon, Jul 21, 2003 at 12:20:05PM -0400, Christopher Fowler wrote: > > There is no functino in OpenSSL I beleive that does such a thing. > > > > What you need to do is get the sockaddr sin_addr data from the accept() &

Re: FQDN

2003-07-21 Thread Christopher Fowler
There is no functino in OpenSSL I beleive that does such a thing. What you need to do is get the sockaddr sin_addr data from the accept() function. At that point you have a IP Address. Use gethostbyaddr() to convert that IP into a FQDN. You can then verify that the FQDN of the host matches that

Re: ISO book on SSL programming in Perl (or C)

2003-07-15 Thread Christopher Fowler
There is one O'Reilly products. I think it is called OpenSSL Programming or something like that. IT goes into some detail about the programming of network programs using SSL. On Tue, Jul 15, 2003 at 11:10:06AM -0400, [EMAIL PROTECTED] wrote: > > > > Can someone recommend a book on SSL progra

Re: SSL and c/c++ on unix

2003-03-20 Thread Christopher Fowler
O'Reilly just created a new book on OpenSSL development. From what I hear it is a good one. If you can not buy it, you can check it out on http://safari.oreilly.com On Mon, 2003-03-17 at 14:18, Gustavo Velasquez wrote: > I am new to SSL and I need to create a c/c++ program to connect to a server

Re: [ADVISORY] Timing Attack on OpenSSL

2003-03-17 Thread Christopher Fowler
Is this a new advisory. I've patched for a previous timing attack 2 weeks ago. On Mon, 2003-03-17 at 03:47, Ben Laurie wrote: > I expect a release to follow shortly. > > -- > http://www.apache-ssl.org/ben.html http://www.thebunker.net/ > > "There is no limit to what a man can do or how fa

Compiling on Solaris8 x86

2003-03-14 Thread Christopher Fowler
I'm trying to get ssh onto my Solaris 8 x86 system. I've installed gcc, binutils, make and some other packages but can not find where the math library is located. Can someone tell me where to get it? gcc -I.. -I../.. -I../../include -fPIC -DTHREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -O3

Timing attack

2003-03-10 Thread Christopher Fowler
I'm using the openssl source and not redhat packages. I recently got an email from Red Hat that had this header: Security Advisory - RHSA-2003:062-11 -- Summary: Updated OpenSSL packages fix timing attack Since I'm