openssl

Php Openssl not loading why?

Hi guys I'm running a tweaked webmail application - however for some reason the openssl extension isn't loading - I've enabled it in the php.ini but when I run my application and check for loaded extensions using get_loaded_extensions - the openssl is not in the array of loaded extensions? Whats wrong here? The php_openssl.dll is physica...

OpenSSL server cipher selection

During an SSL/TLS handshake, the client sends up a list of supported cipher suites and the server selects which one to use for the conversation. Windows has a prioritized list of cipher suites (configurable via the registry) and will select the first suite in that list that is supported by the client. Once a list of acceptable ciphers ...

linker errors with openssl on VS 2008

I installed the openssl 0.9.8l and added the include and library paths to the VS directories. (I have done this before when installing boost libraries). But i continue to get linker errors. Anyway i can resolve the same. errors are as follows Error 1 error LNK2019: unresolved external symbol _BN_free referenced in function _main R...

Single SignOn using OpenSSL on Apache Server

Hi, I am new to the OpenSSL world and trying to implement SSO on my PHP based application. I have already set up the OpenSSL Library and PHP openssl extension. Now, what I need to know is, what steps I need to take and where I can find reference of that. My requirement are 1- User will be provided a certificate, and browser will submi...

ssl encrypt large file using php for backup

I'm g-zipping and backing-up my database dump (using mysqldump ) to amazon S3 . all works fine, but i also need to encrypt this big-compressed file for securing the very- sensitive data within the database. please help, i'm really lost here . Thanks in advance :) ...

How to create Man in the Middle instrumentation

I'm trying to see how a certain application is talking to a server in SSL. Basically, the process just hangs when it claims to have done some SSL communication. I want to debug the problem by catching the traffic, but I can't really use a sniffer since SSL will probably look like a hexdump. Is there a good man-in-the-middle tool that ...

Single sign on with OpenSSL, LDAP and Windows Authentication

Hi, I am developing a PHP Application on Linux server. my application user are stored in LDAP Directory with their domain logins. Now, what i need to do is to give them SSO, attached with there domain credential so when a user logs in to the domain they will not be asked to provide their loginname and password. To do this, I have impl...

Aid in building boost asio ssl example

I have been working through the asio ssl examples (linked below). Despite by best efforts I have been unable to link openssl into the boost example. The output from ld is that ld is missing symbols from libssl.a. The thing that I can not figure out is that I found all the symbols in libssl.a with nm that ld says are missing. I suspect I ...

SSL tunnel through proxy server

Basically I want to create SSL tunnel through proxy server programatically. I am using oppnssl to create ssl tunnel, which I could create but not sure how I can create a tunnel through proxy server. ...

M2Crypto: AttributeError for load_dynamic_engine()

I am using M2Crypto-0.20.2. I want to use engine_pkcs11 from the OpenSC project and the Aladdin PKI client for token based authentication making xmlrpc calls over ssl. I am trying to load the PKCS#11 engine as well as the Aladdin module (see code below). But I get an error: AttributeError: 'module' object has no attribute 'load_dynami...

PHP, LDAPS, APache and Multiple Server Certs

OK, ladies and gentlemen. If you could just read the whole thing before asking "Why would you want to do that!?!", I'd be much obliged ;) I am writing a PHP script to pull information from an LDAP server over LDAPS. I am using PHP 5.3, OpenLDAP and OpenSSL 0.9.7l (28 Sep 2006) and Apache 2.2 on a Windows 2003 server. I have one instanc...

How do I use the OpenSSL.Net C# wrapper to encrypt a string with AES?

Hi All, I am trying to send some encrypted data from my SharePoint site to my company's PeopleSoft site. The PeopleSoft folks insist that I have to use the OpenSSL library for my encryption. I have downloaded and installed the OpenSSL.Net project from SourceForge. For my purposes, I need to simply encrypt a string with AES. I know h...

How to make proper ECDSA with Ruby & OpenSSL::PKey::EC

I'm trying to make elliptic curve digital signature with Ruby EC class, but my Objective-C validation code (made with libcrypto ECDSA_verify()) fails to recognize it. #!/usr/bin/env ruby require "rubygems" require "base32" require "openssl" msgHash = OpenSSL::Digest::SHA1.digest("Message text") key = OpenSSL::PKey::EC.new("secp160r1")...

What's the Java JCE equivalent for this C OpenSSL encryption function?

I am writing a Java implementation of an app originally written in C. I can't modify the C version, and the Java version must share encrypted data with the C version. Here's the relevant part of the C encryption code: makekeys(password,&key1,&key2); /* turns password into two 8 byte arrays */ fill_iv(iv); /* bytes 8 bytes of randomness...

M2Crypto: API Question on Engine Class

Hello, The following 3 Engine methods require 'name' as an argument. load_private_key(self, name, pin=None) load_public_key(self, name, pin=None) load_certificate(self, name) What exactly is 'name'? From examples I've found it appears to be some type of slot id for the USB token. How do I find the id? Thanks! ...

Ruby equivalent for php function openssl_pkey_get_public

Hello all I have the php script where the password encoding done using the openssl: $key = openssl_get_publickey($certificate); openssl_public_encrypt($pass,$userPassCrypted,$key,OPENSSL_PKCS1_PADDING); openssl_free_key($key); Now I trying to make the same with ruby require 'openssl' cert = OpenSSL::X509::Certificate.new(certi...

Encrypting a message using ECDSA in OpenSSL

How do I set the private key for encrypting messages when using ECDSA in OpenSSL programmatically? I have the following code: static int create_signature(unsigned char* hash) { EC_KEY *eckey=NULL; EC_GROUP *ecgroup=NULL; EVP_PKEY *evpkey=NULL; unsigned char *signature=NULL; point_conversion_form_t form = POINT_CONVERSION_UNCOM...

How do I make OpenSSL write the RANDFILE on Windows Vista?

When I run: openssl genrsa -out mykey.key 2048 I get the following error: unable to write 'random state' e is 65537 (0x10001) My googling suggests this is some kind of Vista permissions issue. How can I allow Vista to write this file or how can I configure openssl to get round it? ...

SSL_CTX_use_PrivateKey_file fail on Linux (part 2)

For some reason, my calls to OpenSSL's SSL_CTX_use_PrivateKey_file have started to fail (again) on Ubuntu. My previous post concerning this function; http://stackoverflow.com/questions/2028862/ssl-ctx-use-privatekey-file-fail-under-linux With the above fix, I have been able to use things fine until a couple of days ago. I have no idea w...

How to download a file over HTTPS using Indy 10 and OpenSSL?

I have the following task: download a file using HTTPS and authentication. Indy seems the way to go but for some reason it doesn't work so far. I have the following in place: a TIdHTTP component which I use for downloading a TIdURI component used to create the URL a TIdSSLIOHandlerSocketOpenSSL component which should provide the secure...