FIPS Certification

2003-12-31 Thread Tal Mozes
s of NIST and OSSI, this rumour is greatly exaggerated. Could you give me an authoritative answer? Thanks. Tal Mozes __ OpenSSL Project http://www.openssl.org User Support Mailing List

Openssl-0.9.7c changes cause SSL handshake failure

2003-10-20 Thread Tal Mozes
Title: Openssl-0.9.7c changes cause SSL handshake failure Hi all, I need some help in figuring out how to solve a SSL handshake failure that started after upgrading (from 0.9.7b) to 0.9.7c. Here are the symptoms: SSL_connect breaks with SSL_R_MISSING_EXPORT_TMP_RSA_KEY. This happens because

BN_mod_exp arguments

2003-08-04 Thread Tal Mozes
Hi, Is it safe to call BN_mod_exp() with the first ('r') argument being also one of the input arguments ('a' or 'p')? Same question about BN_mod_sub_quick and BN_mod_add_quick... Thanks. Tal. __ OpenSSL Project

Building multithreaded openssl-0.9.7b on aix 5.1 with gcc 3.1

2003-06-18 Thread Tal Mozes
w and then)? Thanks. Tal Mozes Security & Research Team Leader Cyber-Ark Software Ltd. +972-8-920 7776 (ext. 224) www.cyber-ark.com __ OpenSSL Project

FW: make errors: no-ripemd, no-ssl2

2003-02-13 Thread Tal Mozes
Hi, I had some problems building 0.9.7 on win32 using masm and VC. I used the "no-ripemd no-ssl2" arguments to mk1mf.pl, and then tried to make. Apparently some ripemd files were still included in the makefile. To work around this, I changed mk1mf.pl in line 887 to the following: elsif (/^no-r

RE: 0.9.6g win2k linkage warning: duplicate advapi32 symbols

2002-08-27 Thread Tal Mozes
however. == Greg Stark [EMAIL PROTECTED] ====== ----- Original Message - From: "Tal Mozes" <[EMAIL PROTECTED]> To: "Openssl-Users Mailing List" <[EMAIL PROTECTED]> Sent: Monday, August 26, 2002 8:44 AM Subject: 0.9.6g win2k lin

0.9.6g win2k linkage warning: duplicate advapi32 symbols

2002-08-26 Thread Tal Mozes
static libs anyways? If I understand correctly, both openssl libs use dynamic linkage (in crypto\bio\bss_log.c and in crypto\rand\rand_win.c) and obtain function pointers to advapi32.dll. Tal Mozes Security & Research Team Leader Cyber-Ark Software Ltd. +

DES performance

2002-02-12 Thread Tal Mozes
mised for pentium (not even pentium pro). Are there more recent sources lurking around (I'm afraid I'm not such a bit expert to write one myself)? Or any tricks I could use to get even better performance? Thanks Tal Mozes

Write SSL_CTX_st, SSL_st to mem/disk

2001-11-20 Thread Tal Mozes
This may be a repost (I sent this mail once but haven't got it or any replies to it from the majordomo). My question, in short: Is there a way to serialize the contents of the SSL_CTX and SSL structs to a bio? Some more details: I'm trying to figure out a way to use SSL between the client and se

Sharing a SSL connection between processes

2001-11-20 Thread Tal Mozes
Hi, and sorry if this is a repost. My question, in short: Is there a way to serialize the contents of the SSL_CTX and SSL structs to a bio? Some more details: I'm trying to figure out a way to use SSL between the client and server of my application. The problem is that there are several differen

RE: how to setup SSL_CTX to use private keys from smartcards.. ??

2001-11-14 Thread Tal Mozes
Aslam, I had the same problem. I solved it in the following way: I got the certificate from CryptoAPI and created a X509 struct from it. For the privatekey, I created a RSA struct and filled it with as much data as I could from CryptoAPI. I couldn't get the private key, of course, so I got only

Sharing a SSL connection between processes

2001-11-12 Thread Tal Mozes
Hi, and sorry for the previous empty message. My question, in short: Is there a way to serialize the contents of the SSL_CTX and SSL structs to a bio? Some more details: I'm trying to figure out a way to use SSL between the client and server of my application. The problem is that there are sever

[no subject]

2001-11-12 Thread Tal Mozes
Hi all, I'm trying __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

RE: pkcs12 and CA cert ?

2001-04-11 Thread Tal Mozes
Hi, I think in order to import a certificate with a friendly name you should convert the X509 cert into a PKCS#7 one. You can then import the CERT.P7C file to IE. I never really tried that, so I looked now and found no way to convert to a PKCS#7 with the openssl utility. If there really no comman

RE: OPENSSL Documents

2001-03-29 Thread Tal Mozes
You can use pod2man.pl from the util directory (of openssl). I also remember using a pod2html.pl utility sometime, but it seems to have disappeared... Tal > -Original Message- > From: Albert Gallego [SMTP:[EMAIL PROTECTED]] > Sent: Wednesday, March 28, 2001 5:57 PM > To: '[EMAIL PROTEC