From kappler at NEWTON.BERKELEY.EDU  Mon Sep  8 07:51:06 2008
From: kappler at NEWTON.BERKELEY.EDU (SUBSCRIBE PYTHON-CRYPTO Anonymous)
Date: Mon, 8 Sep 2008 07:51:06 +0200
Subject: [PYTHON-CRYPTO] DES3.py on Vista Question
Message-ID: <LISTSERV%200809080751060850.0CAE@NIC.SURFNET.NL>

Greetings, 

I will say first that this forum may be more advanced than where I ought to
be, and if this is the case I welcome suggestions for other places to find
the answer to my query.

Second, I will give a quick background on my current application.
I have written a signal-processing and data visualization package primarily
in matlab.  In future, I would like to migrate this to python, but for now
it stands in matlab.

I am currently working to distribute this package.  It is comprised of
several data processing and plotting utilities which the user calls from
their machine.  The data however are warehoused by a university server, and
need to be downloaded before analysis can begin.  The sorts of data we are
talking about are continuously recorded sensors, sampling at 40Hz, for many
years.  A particular user is typically only interested in small segments of
the data stream, and it is not practical for me to put up a mirror pointing
to all the data.  The server has a utility for queing segments of data which
a user finds interesting.

I have put together some python codes which operate on the server.  Based on
a few user defined parameters, they retrieve a collection of files from the
database, together with relevant metadata for processing.  The files are
housed in a scratch directory before being sftp-ed to the user's machine.

My problem is that I am looking for a general way that someone using my
codes can execute their data-retrieval requests and transfer data from the
server to their personal machines.

In the past, for my own use, I simply set up SSH with public-private key
encryption on whichever linux machine I am using, and place the commands I
want to execute remotely in a script, and then execute the commands remotely
using ssh.

The problem is that some of the people wanting the software are using
Windows Vista.  I spent some time researching this, and it appears that if I
shell the client-commands in python, and use the Paramiko package, I ought
to be able to provide the users with the functionality that I would like,
i.e. a user can register with me, and I can issue them a key, and they can
run the data retrieval command from their machine.

My first question would be: is that correct?  Or should be looking into
using PERL or some other language.

My second question is more technical:

I have invested a significant amount of time in trying to install python
with the paramiko package on a vista machine.  I installed python 2.5, and
was able to run some basic commands and import standard packages (e.g. os).
 When I attempt to import paramiko however, I have had many errors, most of
which seem to have to do with upper and lower case letters from the auto
install.  I have hacked around by changing the source code, for example:  
from paramiko.folder import file
to 
from Paramiko.Folder import File

At the end of this, I am now receiving the following error:


>>> import Paramiko
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "__init__.py", line 69, in <module>
    from transport import randpool, SecurityOptions, Transport
  File "transport.py", line 37, in <module>
    from Paramiko.dsskey import DSSKey
  File "C:\Python25\Paramiko\dsskey.py", line 31, in <module>
    from Paramiko.pkey import PKey
  File "C:\Python25\Paramiko\pkey.py", line 28, in <module>
    from Crypto.Cipher import DES3
ImportError: cannot import name DES3
>>>

The DES3 error it would seem to me would be because there is no DES3.py in
my Crypto.Cipher diectory.
I have read up on DES3 a little, and have a vague notion that it combines
three usages of an encryption algorithm which alone is too small and simple
to be safely used.  Should there be a DES3.py in my Crypto.Cipher?  I cannot
find any reference to that effect on the web.  It occurs to me that I may
want to install this package on linux, and see it work properly, then return
to this Vista experiment, but I though perhaps someone had installed this on
a Vista machine before and run into a similar challenge.

Thanks for your time, 
Klive


From shramov at MEXMAT.NET  Sun Sep 14 16:02:38 2008
From: shramov at MEXMAT.NET (Pavel Shramov)
Date: Sun, 14 Sep 2008 18:02:38 +0400
Subject: [PYTHON-CRYPTO] Plans for next M2Crypto release
In-Reply-To: <488FF224.8050202@osafoundation.org>
References: <488FF224.8050202@osafoundation.org>
Message-ID: <20080914140238.GA5889@voodoo.psha-ns.mexmat.net>

On Tue, Jul 29, 2008 at 09:46:28PM -0700, Heikki Toivonen wrote:
> This is a wakeup call to anyone who has submitted patches for M2Crypto
> and who I have asked to provide unit tests, modify the patches etc.: if
> you want your change in the next release, please respond in Bugzilla.
> 
> Btw, I am hoping the release after the soon-to-be-done release would
> include all the big new features currently waiting finishing touches in
> Bugzilla.
Maybe it's possible to include patches [1] for SSL object manipulating functions?
Tests are provided and patch is waiting for a long time...
			Pavel

--
[1] https://bugzilla.osafoundation.org/show_bug.cgi?id=10813


From dlitz at DLITZ.NET  Sun Sep 14 17:55:08 2008
From: dlitz at DLITZ.NET (Dwayne C. Litzenberger)
Date: Sun, 14 Sep 2008 11:55:08 -0400
Subject: [PYTHON-CRYPTO] DES3.py on Vista Question
In-Reply-To: <LISTSERV%200809080751060850.0CAE@NIC.SURFNET.NL>
References: <LISTSERV%200809080751060850.0CAE@NIC.SURFNET.NL>
Message-ID: <20080914155508.GA22754@rivest.dlitz.net>

On Mon, Sep 08, 2008 at 07:51:06AM +0200, SUBSCRIBE PYTHON-CRYPTO Anonymous wrote:
>I have invested a significant amount of time in trying to install python
>with the paramiko package on a vista machine.  I installed python 2.5, and
>was able to run some basic commands and import standard packages (e.g. os).
> When I attempt to import paramiko however, I have had many errors, most of
>which seem to have to do with upper and lower case letters from the auto
>install.  I have hacked around by changing the source code, for example:  
>from paramiko.folder import file
>to 
>from Paramiko.Folder import File

"paramiko" is the correct name of the module.

>At the end of this, I am now receiving the following error:
>
>
>>>> import Paramiko
>Traceback (most recent call last):
>  File "<stdin>", line 1, in <module>
>  File "__init__.py", line 69, in <module>
>    from transport import randpool, SecurityOptions, Transport
>  File "transport.py", line 37, in <module>
>    from Paramiko.dsskey import DSSKey
>  File "C:\Python25\Paramiko\dsskey.py", line 31, in <module>
>    from Paramiko.pkey import PKey
>  File "C:\Python25\Paramiko\pkey.py", line 28, in <module>
>    from Crypto.Cipher import DES3
>ImportError: cannot import name DES3
>>>>
>
>The DES3 error it would seem to me would be because there is no DES3.py in
>my Crypto.Cipher diectory.

There should be no DES3.py, because DES3 is a C module.  Once you build it 
using setup.py, there should be a DES3.pyd (".pyd", not ".py") file.

It sounds like your install is really messed up.

-- 
Dwayne C. Litzenberger <dlitz at dlitz.net>
  Key-signing key   - 19E1 1FE8 B3CF F273 ED17  4A24 928C EC13 39C2 5CF7
  Annual key (2008) - 4B2A FD82 FC7D 9E38 38D9  179F 1C11 B877 E780 4B45
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://mail.python.org/pipermail/python-crypto/attachments/20080914/c715f4be/attachment.pgp>

From heikki at OSAFOUNDATION.ORG  Tue Sep 16 10:12:43 2008
From: heikki at OSAFOUNDATION.ORG (Heikki Toivonen)
Date: Tue, 16 Sep 2008 01:12:43 -0700
Subject: [PYTHON-CRYPTO] Plans for next M2Crypto release
In-Reply-To: <20080914140238.GA5889@voodoo.psha-ns.mexmat.net>
References: <488FF224.8050202@osafoundation.org>
            <20080914140238.GA5889@voodoo.psha-ns.mexmat.net>
Message-ID: <48CF6A7B.1010406@osafoundation.org>

Pavel Shramov wrote:
> On Tue, Jul 29, 2008 at 09:46:28PM -0700, Heikki Toivonen wrote:
>> This is a wakeup call to anyone who has submitted patches for M2Crypto
>> and who I have asked to provide unit tests, modify the patches etc.: if
>> you want your change in the next release, please respond in Bugzilla.
>>
> Maybe it's possible to include patches [1] for SSL object manipulating functions?
> Tests are provided and patch is waiting for a long time...

Done!

-- 
   Heikki Toivonen - http://heikkitoivonen.net


From heikki at OSAFOUNDATION.ORG  Wed Sep 17 08:30:46 2008
From: heikki at OSAFOUNDATION.ORG (Heikki Toivonen)
Date: Tue, 16 Sep 2008 23:30:46 -0700
Subject: [PYTHON-CRYPTO] M2Crypto 0.19beta1
Message-ID: <48D0A416.90303@osafoundation.org>

This is the first beta of the M2Crypto 0.19 release.

Please give these bits a spin and report any problems. I expect the
final 0.19 bits will be out right after the Python 2.6 release towards 
the end of this month or so.

Changes:

- OpenSSL OBJ_* functions wrapped by Pavel Shramov
- OpenSSL ENGINE interface wrapped, providing support for smart cards,
   by Martin Paljak and Pavel Shramov
- EVP.PKey.get_rsa() now returns RSA_pub, which fixes segmentation fault
   when trying to encrypt using public key from X509 certificate,
   by Ben Timby
- httpslib.ProxyHTTPSConnection now sends the required Host header,
   by Karl Grindley
- Use the proxied User-Agent value in CONNECT requests, by James Antill
   and Miloslav Trmac
- Fixed m2urllib.build_opener when optional handlers were in use,
   affected Python 2.5 and later, by Miloslav Trmac
- Reverted the incorrect GIL change done in 0.18 to
   m2.passphrase_callback, which caused a deadlock when called from
   mod_python for example. Thanks to Michal Kochel and Keith Jackson.
- httpslib.HTTPSConnection now raises ValueError for illegal keyword
   argument
- m2.pkey_write_pem[_no_cipher] changed to use the recommended (more
   secure) PEM_write_bio_PKCS8PrivateKey (used by
   PEM_write_bio_PrivateKey).
- X509.load_cert, load_cert_bio, load_cert_der_string,
   new_stack_from_der, load_request and load_crl now raise X509Error for
   invalid data. Previously some of these raised a string as an error,
   some did not raise but caused strange errors later, for example
   x509.verify() would return -1.
- Fixed SSL.Connection.get_socket_read_timeout and
   set_socket_read_timeout on 64bit platforms by adding
   SSL.timeout.struct_size() and using it instead of
   hardcoded size for socket.getsockopt
- X509_Store.load_info now returns the value from the underlying
   m2.x509_store_load_locations call, and in case of error raises
   X509Error
- Fixed SMIME.verify to raise the correct PKCS7_Error (used to raise
   SMIME_Error) when verification fails with Python 2.6

Requirements:

* Python 2.3 or newer
   o m2urllib2 requires Python 2.4 or newer
* OpenSSL 0.9.7 or newer
   o Some optional new features will require OpenSSL 0.9.8 or newer
* SWIG 1.3.24 or newer required for building
   o SWIG 1.3.30 or newer may be required with Python 2.5 or newer and
   Python 2.4 with Py_ssize_t patches

Get it while it's hot from M2Crypto homepage:
http://chandlerproject.org/Projects/MeTooCrypto

Or use easy_install: easy_install M2Crypto

-- 
   Heikki Toivonen - http://heikkitoivonen.net


From info at EGENIX.COM  Thu Sep 25 15:58:38 2008
From: info at EGENIX.COM (eGenix Team: M.-A. Lemburg)
Date: Thu, 25 Sep 2008 15:58:38 +0200
Subject: [PYTHON-CRYPTO] ANN: eGenix pyOpenSSL Distribution 0.7.0-0.9.8i-1
Message-ID: <48DB990E.5090402@egenix.com>

________________________________________________________________________

ANNOUNCING

                   eGenix.com pyOpenSSL Distribution

                        Version 0.7.0-0.9.8i-1


             An easy to install and use repackaged distribution
               of the pyOpenSSL Python interface for OpenSSL -
                  available on Windows and Unix platforms


This announcement is also available on our web-site for online reading:
http://www.egenix.com/company/news/eGenix-pyOpenSSL-Distribution-0.7.0-0.9.8i-1-GA.html

________________________________________________________________________

INTRODUCTION

The eGenix.com pyOpenSSL Distribution includes everything you need to
get started with SSL in Python. It comes with an easy to use installer
that includes the most recent OpenSSL library versions in pre-compiled
form.

pyOpenSSL is an open-source Python add-on (http://pyopenssl.sf.net/)
that allows writing SSL aware networking applications as well as
certificate management tools.

OpenSSL is an open-source implementation of the SSL protocol
(http://www.openssl.org/).

* About Python:
Python is an object-oriented Open Source programming language which
runs on all modern platforms (http://www.python.org/). By integrating
ease-of-use, clarity in coding, enterprise application connectivity
and rapid application design, Python establishes an ideal programming
platform for todays IT challenges.

* About eGenix:
eGenix is a consulting and software product company focused on
providing professional quality services and products to Python
users and developers (http://www.egenix.com/).

________________________________________________________________________

NEWS

This second release of the eGenix.com pyOpenSSL Distribution upgrades
the included OpenSSL library version to the latest 0.9.8i, which includes
several bug fixes over the previously included 0.9.8h version.

The release also includes Python 2.6 support for the first time.

Binaries are available for Linux x86 and x64 as well as Windows x86.

________________________________________________________________________

DOWNLOADS

The download archives and instructions for installing the package can
be found at:

    http://www.egenix.com/products/python/pyOpenSSL/

________________________________________________________________________

UPGRADING

Before installing this version of pyOpenSSL, please make sure that
you uninstall any previously installed pyOpenSSL version. Otherwise,
you could end up not using the included OpenSSL libs.

_______________________________________________________________________

SUPPORT

Commercial support for these packages is available from eGenix.com.
Please see

    http://www.egenix.com/services/support/

for details about our support offerings.

Enjoy,
-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Sep 25 2008)
>>> Python/Zope Consulting and Support ...        http://www.egenix.com/
>>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

:::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,MacOSX for free ! ::::


   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
           Registered at Amtsgericht Duesseldorf: HRB 46611