Regarding how to use symmetric key for an openssl engine

2022-09-29 Thread 董亚敏 via openssl-users
Hi, Here is question,can you help me out? Thanks. Background: I am working to write an openssl engine to use cryptographic algorithm in a hardware device. The hardware device support asymmetric/symmetric algorithm, for example:rsa/aes. Question: When I write openssl engine, I shall use

Re: nginx start and stop has issue for openssl engine

2022-04-21 Thread Zhangfei Gao
Hi, I am using openssl engine with nginx. openssl: OpenSSL_1_1_1f If the engine does not include rsa, everythings works well If the engine retister rsa, even the empty IMPLEMENT_DYNAMIC_BIND_FN(bind_fn) bind_fn ENGINE_set_destroy_function(e, destroy_fn); ENGINE_set_RSA(e, RSA_meth_new(&quo

Linking OpenSSL engine with a third party dynamic library

2022-04-12 Thread Shariful Alam
Hello, I have a custom OpenSSL engine and it is working fine with pthread. I was trying to use a third-party thread library <https://github.com/stonebuddha/uthread> by linking this library with my engine. However, upon linking and running the engine, I'm getting a Segmentation fault. I

Re: Is it possible to use a global lock in the OpenSSL engine on each mod_ssl call?

2021-11-10 Thread Dr Paul Dale
OpenSSL doesn't have a global lock. You could implement a single lock in the engine.  Grab it immediately on entry and release just before exit. Pauli On 11/11/21 8:24 am, Shariful Alam wrote: Hello, I understand this is a weird question. I have an OpenSSL engine only for RSA. And I

Is it possible to use a global lock in the OpenSSL engine on each mod_ssl call?

2021-11-10 Thread Shariful Alam
Hello, I understand this is a weird question. I have an OpenSSL engine only for RSA. And I have apache installed that uses this OpenSSL engine for the HTTPS connection. I was wondering if it is possible to use a global lock with the OpenSSL on mod_ssl call? So that, only one mod_ssl thread cal

Re: Calling OpenSSL functions from custom openssl engine causing segmentation fault?

2021-09-20 Thread Dmitry Belyavsky
Hello, Usually you don't, and if you compile it against the same major release, no problems happen. I'd suggest you to look at the backtrace. On Mon, Sep 20, 2021 at 3:03 AM Shariful Alam wrote: > Hello, > I have installed OpenSSL 1.1.1c. I'm trying to make a custom Ope

Calling OpenSSL functions from custom openssl engine causing segmentation fault?

2021-09-19 Thread Shariful Alam
Hello, I have installed OpenSSL 1.1.1c. I'm trying to make a custom OpenSSL engine for RSA. The following sample code is copied from the engine *e_dasync.c. * Following is a sample code for my RSA engine (*rsa-eng

How to load a custom OpenSSL engine automatically?

2021-04-05 Thread Shariful Alam
Hello, I have a custom OpenSSL engine for experiment purposes. I'm trying to load my engine automatically. I intend to use my custom engine instead of the default OpenSSL engine. I have installed *OpenSSL 1.1.1c *from the source code with, *./config --prefix=/opt/openssl -DOPENSSL_LOAD

Re: Where to copy custom openssl engine library in openssl 1.1.0

2019-04-30 Thread Richard Levitte
L version... Cheers, Richard On Thu, 25 Apr 2019 10:06:53 +0200, Swamy J-S wrote: > > > Am working in Ubuntu 18.04 with openssl 1.1.0g version. I built a custom > openssl engine and now i > want to use this engine instead of default openssl engine. > > My engine library name

Re: Where to copy custom openssl engine library in openssl 1.1.0

2019-04-25 Thread Dmitry Belyavsky
Just now I created a dummy file “*config*” and added the details you sent > in this file. > > > > Also added “*export OPENSSL_CONF=path_to_config*” in /etc/environment > file. And ran the command “*openssl engine store -t -c*”. > Did you specify the correct dynamic_path? Does

RE: Where to copy custom openssl engine library in openssl 1.1.0

2019-04-25 Thread Swamy J-S
added “export OPENSSL_CONF=path_to_config” in /etc/environment file. And ran the command “openssl engine store -t -c”. Still am getting same error as store not found when I run my application. Thanks and Regards, SWAMY J S From: Dmitry Belyavsky Sent: Thursday, April 25, 2019 1:44 PM To: Swamy J

Re: Where to copy custom openssl engine library in openssl 1.1.0

2019-04-25 Thread Dmitry Belyavsky
application should load the config file, the way it works is different for different versions. On Thu, Apr 25, 2019 at 11:07 AM Swamy J-S wrote: > Am working in Ubuntu 18.04 with openssl 1.1.0g version. I built a custom > openssl engine and now i want to use this engine instead of default o

Where to copy custom openssl engine library in openssl 1.1.0

2019-04-25 Thread Swamy J-S
Am working in Ubuntu 18.04 with openssl 1.1.0g version. I built a custom openssl engine and now i want to use this engine instead of default openssl engine. My engine library name is libstoreengine.so and i copied this to /usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/ path. When i run my

Troubles using Openssl ENGINE

2019-04-10 Thread Gael GUEGAN
Hello all, I am currently having some trouble using an openssl engine with nginx. I was having no problems using it for loading private key through my engine. However after adding new capabilities about symmetric encryption (AES) to the engine, nginx is trying to use my engine instead of the

Re: [openssl-users] ED25519 key with openssl engine

2018-09-17 Thread Paras Shah (parashah) via openssl-users
ashah) via openssl-users wrote: > I get the following error when I try to access the ed25519 key stored in > SoftHSM via the openssl engine interface using engine_pkcs11. > > > > []:~$ openssl pkey -in > "pkcs11:model=SoftHSM%20v2;m

Re: [openssl-users] ED25519 key with openssl engine

2018-09-17 Thread Matt Caswell
Perhaps the pkcs11 engine does not support ed25519 keys? Matt On 17/09/18 22:05, Paras Shah (parashah) via openssl-users wrote: > I get the following error when I try to access the ed25519 key stored in > SoftHSM via the openssl engine interface using engine_pkcs11. > >   >

[openssl-users] ED25519 key with openssl engine

2018-09-17 Thread Paras Shah (parashah) via openssl-users
I get the following error when I try to access the ed25519 key stored in SoftHSM via the openssl engine interface using engine_pkcs11. []:~$ openssl pkey -in "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=6a160d52b750862f;token=token%202.5.0-rc1;id=%22%22;object=ed25519%2

Re: [openssl-users] How to make OpenSSL engine usage application specific?

2018-02-20 Thread Linsell, StevenX
> On Mon, 19 Feb 2018 Jayalakshmi Bhat wrote: > > Engine usage is application specific.There are couple of applications > dependent on RSA TPM? engine. And are few applications dependent on > RSA smart card engine.? > > We wanted to know if there are any APIs provided by OpenSSL to make the > eng

Re: [openssl-users] How to make OpenSSL engine usage application specific?

2018-02-19 Thread Paul Dale
bhat [mailto:bhat.jayalaks...@gmail.com] Sent: Monday, 19 February 2018 7:16 PM To: openssl-users@openssl.org Subject: [openssl-users] How to make OpenSSL engine usage application specific?   Hello All,   We have 2 RSA OpenSSL engines in our product. Both the engines performs same RSA encyrpt/decrypt operations.

[openssl-users] How to make OpenSSL engine usage application specific?

2018-02-19 Thread Jayalakshmi bhat
Hello All, We have 2 RSA OpenSSL engines in our product. Both the engines performs same RSA encyrpt/decrypt operations. For easy explaination I am naming engines as 1. RSA smart card engine 2. RSA TPM engine Engine usage is application specific.There are couple of applications dependent on RSA

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Freemon Johnson
Hi Jayalakshmi, Is your implementation OSS or intellectual property? If it is OSS can you please provide the URL? Regards, Freemon On Wed, Oct 25, 2017 at 1:06 PM, Jayalakshmi bhat < bhat.jayalaks...@gmail.com> wrote: > Hi All, > > Our device uses TPM to protect certificate private keys. We hav

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Michael Richardson > Sent: Wednesday, October 25, 2017 18:37 > > Jakob Bohm wrote: > > > Please beware that many TPM chips were recently discovered to contain a > > broken RSA key generation algorithm, so publi

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Ken Goldman
On 10/26/2017 3:33 AM, Michael Ströder wrote: Michael Richardson wrote: Jakob Bohm wrote: wow, further evidence that everything needs an upgrade path. From the viewpoint of hardware vendors the upgrade path is selling new hardware. It's simply like that. Not very sustainable... All the T

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Richard Levitte
In message on Wed, 25 Oct 2017 22:36:45 +0530, Jayalakshmi bhat said: bhat.jayalakshmi> Our device uses TPM to protect certificate private bhat.jayalakshmi> keys. We have written engine interface to integrate bhat.jayalakshmi> TPM functionality into OpenSSL. Thus TPM gets loaded bhat.jayalaksh

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-26 Thread Michael Ströder
Michael Richardson wrote: > > Jakob Bohm wrote: > >> I wanted to know when we use engine instance for encyrption/decryption > >> operation, can it be done selectively? > > > Please beware that many TPM chips were recently discovered to contain a > > broken RSA key generation algo

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Michael Richardson
Jakob Bohm wrote: >> I wanted to know when we use engine instance for encyrption/decryption >> operation, can it be done selectively? > Please beware that many TPM chips were recently discovered to contain a > broken RSA key generation algorithm, so public/private key pairs keys

Re: [openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Jakob Bohm
On 25/10/2017 19:06, Jayalakshmi bhat wrote: Hi All, Our device uses TPM to protect certificate private keys. We have written engine interface to integrate TPM functionality into OpenSSL. Thus TPM gets loaded as an engine instance. Also we have mapped RSA operations to TPM APIS as  like encry

[openssl-users] OpenSSL engine and TPM usage.

2017-10-25 Thread Jayalakshmi bhat
Hi All, Our device uses TPM to protect certificate private keys. We have written engine interface to integrate TPM functionality into OpenSSL. Thus TPM gets loaded as an engine instance. Also we have mapped RSA operations to TPM APIS as like encryption/decryption etc. Now we are into few issues.

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Freemon Johnson
as used to encrypt the keys with). > > "really secure" is not a useful phrase. Security is a set of > asymptotic trade-offs between attacker and defender work-factors under a > threat model. Nothing ever achieves "really secure". > > Even a hypothetical OpenSS

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Blumenthal, Uri - 0553 - MITLL > Sent: Friday, July 07, 2017 10:03 > To: openssl-users@openssl.org > Subject: Re: [openssl-users] OpenSSL Engine for TPM > > And in most cases (except those involvi

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Blumenthal, Uri - 0553 - MITLL
fender work-factors under a threat model. Nothing ever achieves "really secure". Even a hypothetical OpenSSL engine that performed all cryptographic operations on the TPM wouldn't achieve specified security under the TPM threat model unless the engine, all of OpenSSL,

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Freemon Johnson
tic > trade-offs between attacker and defender work-factors under a threat model. > Nothing ever achieves "really secure". > > Even a hypothetical OpenSSL engine that performed all cryptographic > operations on the TPM wouldn't achieve specified security under the TPM >

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Michael Wojcik
was used to encrypt the keys with). "really secure" is not a useful phrase. Security is a set of asymptotic trade-offs between attacker and defender work-factors under a threat model. Nothing ever achieves "really secure". Even a hypothetical OpenSSL engine that performed

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-07 Thread Jan Just Keijser
from the TPM. If you look at the way it is designed, it is not really secure (as it's not impossible to find the password that was used to encrypt the keys with). Am 5. Juli 2017 06:47:24 MESZ schrieb Devang Kubavat : Hi All, 1. Is there any built-in OpenSSL Engine to acces

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-05 Thread Christian Hohnstädt
The trousers project has one. https://sourceforge.net/projects/trousers/files/OpenSSL%20TPM%20Engine/ Christian Am 5. Juli 2017 06:47:24 MESZ schrieb Devang Kubavat : >Hi All, > > 1. Is there any built-in OpenSSL Engine to access the TPM ? >2. Is there any other OpenSSL Engi

Re: [openssl-users] OpenSSL Engine for TPM

2017-07-05 Thread Salz, Rich via openssl-users
>  1.  Is there any built-in OpenSSL Engine to access the TPM ? No. >  2.  Is there any other OpenSSL Engine to access the TPM ? If Yes, How can we >configure in OpenSSL libraries to use that engine ? If someone has written one, and can make it available, they should post here. I d

[openssl-users] OpenSSL Engine for TPM

2017-07-05 Thread Devang Kubavat
Hi All, 1. Is there any built-in OpenSSL Engine to access the TPM ? 2. Is there any other OpenSSL Engine to access the TPM ? If Yes, How can we configure in OpenSSL libraries to use that engine ? Please guide me. Thanks. Best Regards, Devang -- openssl-users mailing list To unsubscribe

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jayalakshmi bhat
ay not (really ask a lawyer) > be legally (not technically) required to treat any keys, passwords > etc. handed from one "device" to another AS IF those keys were traveling > over an insecure connection even though they never leave your process > address space on an EAL-whate

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jayalakshmi bhat
Hi Kyle, Thanks a lot for detailed explaination, it helped me lots. Regards Jayalakshmi On Sun, Jul 6, 2014 at 2:44 AM, Kyle Hamilton wrote: > > On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: > > Thanks a lot for the explanation. We have range of products that > > provides network connectivity.

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jakob Bohm
connection even though they never leave your process address space on an EAL-whatever-level certified operating system on an EAL-whatever-level certified computer. TECHNICALLY: If you want to combine the use of multiple FIPS validated "devices", one of which happens to be the OpenSSL FIPS

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Kyle Hamilton
On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: > Thanks a lot for the explanation. We have range of products that > provides network connectivity. > > 1. On these we would be using TPM to provide additional security. > > 2. On the products that are bit slow in software cryptographic > operation,

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Jayalakshmi bhat
Hi Steve, Thanks a lot for the explanation. We have range of products that provides network connectivity. 1. On these we would be using TPM to provide additional security. 2. On the products that are bit slow in software cryptographic operation, we also would be using hardware acceleration ch

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Dr. Stephen Henson
On Sat, Jul 05, 2014, Jayalakshmi bhat wrote: > Hi All, > > We want to support a hardware accelerator on our device. We are using > OpenSSL with OpenSSL FIPS Object module. I wanted to know if we can add > engine support in OpenSSL FIPS Object module. > If you literally mean adding ENGINE suppo

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Steve Marquess
On 07/05/2014 02:09 AM, Jayalakshmi bhat wrote: > Hi All, > > We want to support a hardware accelerator on our device. We are using > OpenSSL with OpenSSL FIPS Object module. I wanted to know if we can add > engine support in OpenSSL FIPS Object module. > > I welcome all valuable inputs. First,

OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-04 Thread Jayalakshmi bhat
Hi All, We want to support a hardware accelerator on our device. We are using OpenSSL with OpenSSL FIPS Object module. I wanted to know if we can add engine support in OpenSSL FIPS Object module. I welcome all valuable inputs. Regards Jayalakshmi.

Re: HSM used as OpenSSL engine

2012-04-18 Thread Sunjeet Singh
Thank you for your reply Stephen. In that is the case, then how would you explain the following phenomenon- 1. Start a SSL connection using private key stored on a HSM, protected using a smart-card, 2. Let the SSL connection run for a bit 3. Unplug the smart card from HSM, 4. SSL connection stop

Re: HSM used as OpenSSL engine

2012-04-13 Thread Dr. Stephen Henson
On Fri, Apr 13, 2012, Sunjeet Singh wrote: > Hi, > > Stupid question- > > If I use a HSM to store private key used for SSL connections using the > CryptoAPI engine for OpenSSL, is all data to be encrypted/decrypted going > through my HSM? I'm- > > 1. Registering my HSM as a Cryptographic Serv

HSM used as OpenSSL engine

2012-04-13 Thread Sunjeet Singh
Hi, Stupid question- If I use a HSM to store private key used for SSL connections using the CryptoAPI engine for OpenSSL, is all data to be encrypted/decrypted going through my HSM? I'm- 1. Registering my HSM as a Cryptographic Service Provider, and 2. Setting my application code to initializ

Looking for information on creating an openssl engine

2012-01-06 Thread Jim Segrave
Is there any sort of a guide as to what is needed to create an openssl engine? It's not clear to me what interface needs to be provided nor exactly what functionality can be moved to an engine. I have an idea I'd like to experiment with for an approach to parallelising encryption/

OpenSSL Engine - configurable ciphers/digests

2011-10-20 Thread com...@gmx.ch
Hi, I need some help with a special case: a dynamic engine with non-static or configureable ciphers. While I do not use cryptodev, the code provides a good example of the intial problem: http://cvs.openssl.org/fileview?f=openssl/crypto/engine/eng_cryptodev.c&v=1.23 I basically have it wor

Re: Openssl Engine for Utimaco CryptoServer

2009-12-23 Thread Ralf Hornik Mailings
Ralf Hornik Mailings wrote: [Success]: SO_PATH:/usr/lib/engines/engine_pkcs11.so [Failure]: MODULE_PATH:/opt/cserver/lib/libcs2_pkcs11.so 7104:error:260AC089:engine routines:INT_CTRL_HELPER:invalid cmd name:eng_ctrl.c:134: 7104:error:260AB089:engine routines:ENGINE_ctrl_cmd_string:invalid

Openssl Engine for Utimaco CryptoServer

2009-12-21 Thread Ralf Hornik Mailings
Hello List, is there any working engine for Utimaco CryptoServer? Using Utimacos libcs2_pkcs11.so and OpenSCs pkcs11-tool it is possible to import and/or generate keys on the HSM but trying the openSC's engine for openssl I get: modrow:~# openssl engine -t dynamic -pre SO_PATH:/us

Re: Openssl Engine Performance Benchmarks

2009-03-31 Thread Geoff Thorpe
On Tuesday 31 March 2009 23:16:10 Shasi Thati wrote: > Hi, > > I have a question regarding the openssl speed command. When I use this > command to test the crypto offload engine performance what is the > right command to use? > > Is it > > openssl speed -evp aes-128-cbc -engine xx -elapsed > >

RE: Openssl Engine Performance Benchmarks

2009-03-31 Thread David Schwartz
> Is it > openssl speed -evp aes-128-cbc -engine xx -elapsed > or > openssl speed -evp aes-128-cbc -engine xx It depends what you want to measure. > I have seen examples with both of them on the internet and I get > different results with each of them. What exactly does "elapsed" > opt

Openssl Engine Performance Benchmarks

2009-03-31 Thread Shasi Thati
Hi, I have a question regarding the openssl speed command. When I use this command to test the crypto offload engine performance what is the right command to use? Is it openssl speed -evp aes-128-cbc -engine xx -elapsed or openssl speed -evp aes-128-cbc -engine xx I have seen example

FYI: OpenSSL engine. Cell / Playstation 3.

2007-01-11 Thread Neil Costigan
Hi all, I was asked to forward this to the list. I've been working on an OpenSSL engine to support the Cell processor's (Playstation 3 etc.) vector processors (SPU's) I've (finally!) got a rough version glued together using the IBM multi-precision library from the C

FYI: OpenSSL engine. Cell / Playstation 3.

2007-01-11 Thread Neil Costigan
Hi all, I was asked to forward this to the list. I've been working on an OpenSSL engine to support the Cell processor's (Playstation 3 etc.) vector processors (SPU's) I've (finally!) got a rough version glued together using the IBM multi-precision library from the C

Problems with OpenSSL Engine and hashing.

2006-02-27 Thread Marco GRELLA
Hello everybody, I have a problem in making our OpenSSL Engine that drives our HW accelerator work fine for hash (SHA1 in particular). The problem seems to be related to my "Digest_Copy" or (less likely) "Digest_Cleanup" implementation (I'll explain this further on). The

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Christopher Nebergall
>you could use RSA_set_method with RSA_PKCS1_SSLeay for example That was all I needed. I've got it working now. Thanks, Christopher __ OpenSSL Project http://www.openssl.org User Support Mailing L

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Nils Larsch
Christopher Nebergall wrote: I've been working with some patches to curl I found on the curl mailing list to support openssl and opensc's engine_pkcs11. Basically it consists of Curl 7.14 + patch which adds dynamic engine support -> opensc-20050826 [engine_pkcs11.so] -> soft-pkcs11 1.2 o

Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-30 Thread Christopher Nebergall
I've been working with some patches to curl I found on the curl mailing list to support openssl and opensc's engine_pkcs11. Basically it consists of Curl 7.14 + patch which adds dynamic engine support -> opensc-20050826 [engine_pkcs11.so] -> soft-pkcs11 1.2 on Ubuntu Linux (5.04) Kernel 2.6

what's the default openssl engine

2005-04-20 Thread hao chen
Hi, I always heard that the openssl uses the default openssl engine if the engine is not specified. I would like to know what's the default openssl engine. In another word, how could I tell which is the default openssl engine when I use openssl? thanks hao Best R

openssl / engine / atalla

2004-11-10 Thread Jean-Paul VILLETTE
hi, does someone have an example of an openssl.cnf file to configure an SSL accelerator like an ATALLA board ? JPV __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Triple-des with openssl engine and ncypher hardware.

2002-11-25 Thread Frederic DONNAT
:56 PM To: [EMAIL PROTECTED] Cc: Subject:Triple-des with openssl engine and ncypher hardware. Hi, I'm trying to integrate ncipher hardware (nshield) with openssl. I want to implement triple-des with internal keys. I've seen that we can access the "chil" engine

Triple-des with openssl engine and ncypher hardware.

2002-11-20 Thread sebastien Labrune
Hi,   I'm trying to integrate ncipher hardware (nshield) with openssl.I want to implement triple-des with internal keys. I've seen that we can access the "chil" engine with the new openssl engine. How can i use it to encrypt data with triple-des algorithm and keys store

Re: Openssl Engine

2002-09-25 Thread Richard Levitte - VMS Whacker
ng NFast and openssl-0.9.5. olivier.michiels> I've updated my code to use the openssl-engine. olivier.michiels> Everything works perferctly with some modifications. olivier.michiels> Now, I would like to use the ENGINE concept with my NFast. olivier.michiels> I've already underst

Re: OpenSSL engine NFast

2002-09-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 25 Sep 2002 09:04:45 +0200, Michiels Olivier <[EMAIL PROTECTED]> said: olivier.michiels> I'm trying to uderstand how the engine object is olivier.michiels> working with openssl-engine. olivier.michiels> I'm using a NFast

OpenSSL engine NFast

2002-09-24 Thread Michiels Olivier
Hi, I'm trying to uderstand how the engine object is working with openssl-engine. I'm using a NFast crypto device (chil) and when I look into hw_ncipher.c I found three interristing functions: static int hwcrhk_insert_card(const char *prompt_info, const char *

Openssl Engine

2002-09-24 Thread Michiels Olivier
Hi, Currently I've an application that creates keys, certificate requests and certificates using NFast and openssl-0.9.5. I've updated my code to use the openssl-engine. Everything works perferctly with some modifications. Now, I would like to use the ENGINE concept with my NFast. I&

RE: Using ENGINE in openssl-engine-0.9.6g

2002-08-20 Thread Lynn Gazis
19, 2002 10:34 PM To: [EMAIL PROTECTED] Subject: Using ENGINE in openssl-engine-0.9.6g Hi there, Has anybody had any problems using the ENGINE API's in openssl-engine-0.9.6g on Windows. I downloaded openssl-engine-0.9.6g and built it. No errors were encountered during build. I have the f

Re: RE : openssl engine use

2002-07-25 Thread Geoff Thorpe
Hey there, On Thu, 25 Jul 2002, Frederic DONNAT wrote: > A sample of programming with engine is mod-ssl (initialize ENGINE before > everything else). You can also see "apps" directory of OpenSSL s_client, > s_server ... files > > Be also carefull between openssl-engine

rsa GenerateKey in openssl engine

2002-01-14 Thread afchine madjlessi
Hello everybody,We are implementing an new engine (based on openssl 0.9.6c) to use the RSAPKCS11 interface of our crypto hardware  (Bull Trustway CC2000).We would like to access our C_GenerateKeyPair PKCS11 function through theopenssl RSA_generate_key.So we are adding a new entry gen_key in

Re: openssl & openssl-engine

2001-10-25 Thread Paul Allen
"[EMAIL PROTECTED]" wrote: > > I write from Italy, and I'd like to use openssl and I would want to know which >differences are between openssl and openssl-engine. The openssl-engine version contains support for hardware crypto devices. You can use either version for r

openssl & openssl-engine

2001-10-25 Thread [EMAIL PROTECTED]
I write from Italy, and I'd like to use openssl and I would want to know which differences are between openssl and openssl-engine. Thank you in advance. Cinti Pietro Rome -Italy- __ OpenSSL Pr

Re: openssl engine?

2001-10-12 Thread Richard Koenning
At 20:33 12.10.2001 +0200, Helmut Heilig wrote: >can anybody tell me the difference between openssl and openssl-engine. >Couldn't find anything about that in the FAQ. See: http://www.openssl.org/support/faq.html [MISC] 6. What is an 'engine' version? Ciao, Richard -- D

openssl engine?

2001-10-12 Thread Helmut Heilig
Hi, can anybody tell me the difference between openssl and openssl-engine. Couldn't find anything about that in the FAQ. I am not subscribed. Please give me a cc. Regards __ OpenSSL Pr

RE: How I can use Cryptoswitf device with openssl engine 0.9.6 ?

2001-08-22 Thread lgazis
Are you at OpenSSL engine 0.9.6 or 0.9.6b?  There were some fixes to the engine code between 0.9.6 and 0.9.6b which will be relevant to you if you are on FreeBSD, AIX, or HP UX (particularly HP UX, but FreeBSD and AIX do require some extra options to be passed to config, at version 0.9.6

openssl-engine+cryptoswift

2001-08-01 Thread Bahram BASSIRI
Hello, I would like if anybody have a patch for cryptosiwft HSM with openssl-engine like "load-private-key" Thanks Bahram BASSIRI OMNICERTIS 3 bis rue cité Bergère 75009 Paris Tél direct + 33 1 44 83 88 25 Tél général + 33 1 44 83 88 10 Fax + 33 1 44 83 88 29 <mailto:[EM

Does openSSL-Engine offload both the Handshake and Bulk crypto tasks

2001-07-11 Thread Venkatesan, Ganesh
Hi: Could you help me answer this question? I was not able to conclude one way or the other by browsing the source (crypto/engine/vendor-defns). Which piece of code would I look to see how the offload is performed? Thanks, ganesh. ___ Ganesh Venkatesan LAN Access Divi

AW: n-cipher does not work with openssl-engine-0.9.6a

2001-05-04 Thread Schwiete, Ralf
Hello, after I grep the whole include/ssl directory in the source-tree I had found it. Thankyou > > Use "chil" instead of "ncipher". The reason for this is that the > interface used is called "CHIL" (C{something} Hardware Interface > Library, IIRC, but nCipher folks will most probably have to

NT-build of OpenSSL engine 0.9.6a

2001-04-11 Thread Wolfgang Bachmann
Hi, I've stumbled over two problems with building the OpenSSL engine 0.9.6a for Windows-NT: 1) It automatically adds the advapi32-library to the libs. While this is probably fine when building a DLL, you'll get problems (dupliate symbols) when using a statically linked OpenSSL. Fix:

Re: What is OpenSSL Engine ?

2001-03-15 Thread Steven A. Bade
the engine is a design architecture to allow the use of hardware crypto devices On Thu, Mar 15, 2001 at 10:10:20AM -0500, Aslam wrote: > Hi, > > What exactly is the difference between a OpenSSL and OpenSSL Engine ? > > >

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

2001-02-23 Thread lgazis
001 6:30 AM To: 'lgazis'; '[EMAIL PROTECTED]'; De Taeye, Herman; Gyutani (E-mail) Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board Thanks for the diagnostic program. With the delivery by Sun an other program call

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoSwift accelerator board

2001-02-23 Thread De Taeye, Herman
Best regards, Herman De Taeye Unisys Belgium. -Original Message- From: lgazis [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 4:30 PM To: '[EMAIL PROTECTED]'; De Taeye, Herman Subject: RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Sol aris 2.7,CryptoS

RE: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator board

2001-02-21 Thread lgazis
ED] for help). Lynn Gazis -Original Message- From: adrien mistretta [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 21, 2001 5:29 AM To: [EMAIL PROTECTED]; De Taeye, Herman Subject: Re: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator bo

Re: Apache_1.3.17, Openssl-engine-0.9.6, mod_ssl-2.8.0-1.3.17 Solaris 2.7,CryptoSwift accelerator board

2001-02-21 Thread adrien mistretta
> 3. How can I really test that the board is used and not the internal > engine? you can use the csdiag command to see if request are made to the crypto card, but I don't remember the option. Adrien __ OpenSSL Project

openssl-engine has some problem with profiling

2000-11-06 Thread Jihui Yang
Has anybody ever used profiling(CFLAGS=-pg) to analyze the amount of time spent in each routine in openssl? I tried it in openssl-engine-0.9.6. But the option -pg seemed to conflict with the option of -fomit-frame-pointer, so I got rid of the latter. But when I tried to do speed test(apps

Re: using nCipher nFast w/ openssl-engine-0.9.6-beta2 ?

2000-09-20 Thread Richard Levitte - VMS Whacker
From: Peter Clark <[EMAIL PROTECTED]> pclark> OpenSSL> speed -engine chil pclark> can't use that engine pclark> 29176:error:25067066:DSO support routines:DLFCN_LOAD:could not load the pclark> shared library:dso_dlfcn.c:157: pclark> 29176:error:25072066:DSO support routines:DSO_load:could not load

using nCipher nFast w/ openssl-engine-0.9.6-beta2 ?

2000-09-20 Thread Peter Clark
I've compiled and installed the latest Apache / mod_ssl and openssl-engine-0.9.6-beta2 on a solaris 7/sparc system. Everything works fine until I try to use the engine part, eg: OpenSSL> speed -engine chil can't use that engine 29176:error:25067066:DSO support routines:DLFCN_LOAD:c

Re: openssl engine version beta2 compilation problems

2000-09-19 Thread David Maurus
I've had the same problem and discovered the following patch: http://marc.theaimsgroup.com/?l=openssl-dev&m=96923042325868&w=2 The functions are loaded dynamically, so it is necessary to check whether they loaded or not (or your executable will crash on all machines which don't provide the NetSt

Re: Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Jeffrey Altman
Try replacing LMSTR with LPWSTR in crypto/rand/rand_win.c > I tried to compile on a Win32 platforom openssl engine beta2, and the > OpenSSL beta2, and I recieve in both case this error: > > cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 > /Gs0

Problem compiling openssl engine beta2 on NT

2000-09-18 Thread Eric Korsia
I tried to compile on a Win32 platforom openssl engine beta2, and the OpenSSL beta2, and I recieve in both case this error: cl /Fotmp32dll\rand_win.obj -Iinc32 -Itmp32dll /MD /W3 /WX /G5 /Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DWIN32 -DWIN3 2_LEAN_AND_MEAN -DL_ENDIAN /Fdout32dll /GD -D_WINDLL -D_DLL