Re: Convert perl file to asm fie

2011-06-30 Thread Tim Watts
l variables) by correct ARM register names. Best regards Andreas Müller ah-ha - all becomes clear now... -- Tim Watts Personal Blog: http://www.dionic.net/tim/ __ OpenSSL Project http://www.o

Re: Convert perl file to asm fie

2011-06-30 Thread Tim Watts
<http://aes-586.pl>. Best Wishes! Hawkes 2011/06/30 2011/6/30 Tim Watts mailto:t...@dionic.net>> On 30/06/11 09:43, ty hawk wrote: Hi : I want to use openssl on device that used arm. How could I convert aes-armv4.pl

Re: Convert perl file to asm fie

2011-06-30 Thread Tim Watts
ng ARM. Unless your embedded device is powerful enough to run the ARM compiled version of perl (or microperl) in which case just use your script. Cheers, Tim -- Tim Watts Personal Blog: http://www.dionic.net/tim/ __ OpenSSL P

Re: Quick eyeball requested - self generate openssl certs/CA

2011-05-26 Thread Tim Watts
On 19/05/11 10:44, Tim Watts wrote: Hi folks, I'm setting up a new CA/SSL infrastructure for work - the CA is self signed and all SSL certs (mostly server certs rather than client certs) will be signed off against this CA. Thanks for all your help - I've managed something that in

Re: [openssl-users] Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
On 19/05/11 17:38, Erwann ABALEA wrote: Hodie XIV Kal. Iun. MMXI, Tim Watts scripsit: On 19/05/11 16:46, Peter Sylvester wrote: another approach is to take the value of 'time' (the current second) and append to it the current process number, and, in case of several machines, s

Re: [openssl-users] Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
On 19/05/11 16:46, Peter Sylvester wrote: The problem with this scheme is that it doesn't deal well with parallel certificate signatures. You have one shared information that must be incremented in an atomic way. But for a "Junk CA" (that's how I call the set of scripts I use), that's not a pr

Re: [openssl-users] Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
On 19/05/11 16:09, Erwann ABALEA wrote: Bonjour Tim, Hi Erwann, I presume there is a slight possibility of a serial number clash with that? Not that it's a problem, but it would be wise to check index.txt to see if the number has been used before? Really, no. A counter is encrypted, and th

Re: [openssl-users] Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
On 19/05/11 14:48, Erwann ABALEA wrote: Bonjour Tim, Hodie XIV Kal. Iun. MMXI, Tim Watts scripsit: Thanks for that. I'm not sure how to do random serials (I let openssl manage those) but it interesting to know it makes a difference. This how I do this: - in the setup phase, after h

Re: [openssl-users] Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
Bonjour :) On 19/05/11 13:03, Erwann ABALEA wrote: Bonjour, Hodie XIV Kal. Iun. MMXI, Tim Watts scripsit: I do apologise - it's a long post. I'm just not totally sure if I have the correct attributes and extensions - and whether it meets the requirements of a v3 SSL cert (I think it

Re: Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
On 19/05/11 11:53, Jeffrey Walton wrote: I'm setting up a new CA/SSL infrastructure for work ... and whether it meets the requirements of a v3 SSL cert (I think it does). Is 4096 bit key and sha1 a good choice? SHA-1 is not a good choice here. You are exceeding 128 bits of security with the 409

Quick eyeball requested - self generate openssl certs/CA

2011-05-19 Thread Tim Watts
native Name: email:syst...@example.com X509v3 Key Usage: Digital Signature, Key Encipherment Signature Algorithm: sha1WithRSAEncryption -BEGIN CERTIFICATE- End client cert ====== Ma