[Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo. Regards, Mariano
The most recent post on the crytography mailing list starts out as follows: Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu? Bill ________________________________ From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo. Regards, Mariano
Just a comment, you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo. Fernando On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please. Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home-grown solution. Bill ________________________________ From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Just a comment, you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo. Fernando On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote: The most recent post on the crytography mailing list starts out as follows: Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu? Bill ________________________________ From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo. Regards, Mariano <ATT00001.txt>
Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers r. -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
May be contact the developers to know. May be this is not a lot of work to have a running version in pharo. stef On May 22, 2009, at 12:18 PM, Ramiro Diaz Trepat wrote:
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Ramiro, *The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers r. -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email. _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
On Fri, May 22, 2009 at 11:39 AM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Ramiro,
*The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic.
Bill why don't you propose this for a ESUG SummerTalk project ?
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
What is involved? ________________________________ From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Mariano Martinez Peck Sent: Friday, May 22, 2009 7:48 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo On Fri, May 22, 2009 at 11:39 AM, Schwab,Wilhelm K <bschwab@anest.ufl.edu<mailto:bschwab@anest.ufl.edu>> wrote: Ramiro, *The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic. Bill why don't you propose this for a ESUG SummerTalk project ? Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr>] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers r. -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr>] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email. _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
You can see this page: http://www.esug.org/Promotion/SummerTalk 2009/5/22 Schwab,Wilhelm K <bschwab@anest.ufl.edu>
What is involved?
------------------------------ *From:* pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] *On Behalf Of *Mariano Martinez Peck *Sent:* Friday, May 22, 2009 7:48 AM
*To:* Pharo-project@lists.gforge.inria.fr *Subject:* Re: [Pharo-project] Port of Cryptography to Pharo
On Fri, May 22, 2009 at 11:39 AM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Ramiro,
*The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic.
Bill why don't you propose this for a ESUG SummerTalk project ?
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Hi Bill, in spite that I believe that the original cryptography package was a great piece of work, I completely agree with you in both matters: 1) we will need a crypto package soon, 2) If we want to be standing in the shoulders of giants, we better stand on OpenSSL :) Cheers. r -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Schwab,Wilhelm K Sent: 22 May 2009 13:39 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ramiro, *The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers r. -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email. _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
Ramiro, They do deserve credit for persistence and skill. I *never* said they did bad work - only that they made a bad decision to reinvent vs. integrate. It's amazaing how much they accomplished. However, I suspect the incredible amount of work involved lead to burnout and a moribund project. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 8:36 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Hi Bill, in spite that I believe that the original cryptography package was a great piece of work, I completely agree with you in both matters: 1) we will need a crypto package soon, 2) If we want to be standing in the shoulders of giants, we better stand on OpenSSL :) Cheers. r -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Schwab,Wilhelm K Sent: 22 May 2009 13:39 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ramiro, *The* cryptography package as written was not necessary to anything; **a** crytography package is indeed necessary for lots of things, no argment there. OpenSSL can do the hashes you require courtesy of FFI/Alien or a wrapping plugin. We'll get there, and hopefully not by re-inventing the wheel as the original team chose to do; sorry, but it's a tricky area where mistakes are easy to make and can be catastrophic. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Ramiro Diaz Trepat Sent: Friday, May 22, 2009 5:19 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general. It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers r. -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email. _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email. _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com> wrote:
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :( Just for now, I disable md5 from my postgres and use "password" auth-method. With this, cryptography is not needed. However, this is not an option in a production enviorment. Cheers, Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Hello, I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values. When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp. Jan. PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy 2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com> wrote:
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth-method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Hi guys Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing Stef On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
I think we should add MD5 and SHA1 of Cryptography to Pharo-core. These are quite basic and often used hash functions. In the past I also copied the MD5 class over from the Cryptography package. Adrian On May 22, 2009, at 16:54 , Stéphane Ducasse wrote:
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
ok let us do it then stef On May 22, 2009, at 5:16 PM, Adrian Lienhard wrote:
I think we should add MD5 and SHA1 of Cryptography to Pharo-core. These are quite basic and often used hash functions. In the past I also copied the MD5 class over from the Cryptography package.
Adrian
On May 22, 2009, at 16:54 , Stéphane Ducasse wrote:
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
FYI OpenCobalt release has a Cryptography package added and is being used to TLS to Jabber..... -----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Stéphane Ducasse Enviado el: Viernes, 22 de Mayo de 2009 11:55 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Port of Cryptography to Pharo Hi guys Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing Stef On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project -- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
tx for the pointer! On May 22, 2009, at 5:36 PM, Carlos Crosetti wrote:
FYI OpenCobalt release has a Cryptography package added and is being used to TLS to Jabber.....
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Stéphane Ducasse Enviado el: Viernes, 22 de Mayo de 2009 11:55 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
looking for pointers to a sample Alien FFi code calling a COM based DLL....
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode). Now we need people to shake it. On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Carlos, plese let me know if you have problems loading the AlienFFI package. Look at the email i sent a couple of days ago, in there i explained the status and how to load. I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast. Once you get it installed and test the examples i could help you more. Saludos, Fernando On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Fernando, plese can you send the note you mention again? Thanks, Carlos -----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM Carlos, plese let me know if you have problems loading the AlienFFI package. Look at the email i sent a couple of days ago, in there i explained the status and how to load. I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast. Once you get it installed and test the examples i could help you more. Saludos, Fernando On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project -- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
just load Alien from the alien squeaksource project On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the AlienFFI package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
I thought Alien FFI was only working in Mac. I am interesting in migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, but I need AlienFFI works in Linux, Mac and Windows. When this is done and there is a documentation somewhere, I can do some tests. Cheers, Mariano On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote:
just load Alien from the alien squeaksource project
On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the AlienFFI package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
On May 23, 2009, at 9:52 PM, Mariano Martinez Peck wrote:
I thought Alien FFI was only working in Mac. I am interesting in migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, but I need AlienFFI works in Linux, Mac and Windows. When this is done and there is a documentation somewhere, I can do some tests.
Try because I do not have a PC here. But the code contains PC examples. Stef
Cheers,
Mariano
On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote: just load Alien from the alien squeaksource project
On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the AlienFFI package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
ALienFFI has plugins for windows vm also, it works for it too. Its not tied to mac, what i meant is that i only tested on mac, because i dont have acces to a PC. AlienLoader>>loadLibCInPharo gives you examples for windows, and mac also. After loading look at the class AlienExamples. Also AlienLoader>>loadWin32InPharo gives you examples with windows specific libraries, look at AlienExamples after loading. About documentation you can look here: http://wiki.squeak.org/squeak/6100 Both pdf files there were very helpful for me. Saludos, Fernando On May 23, 2009, at 9:54 PM, Stéphane Ducasse wrote:
On May 23, 2009, at 9:52 PM, Mariano Martinez Peck wrote:
I thought Alien FFI was only working in Mac. I am interesting in migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, but I need AlienFFI works in Linux, Mac and Windows. When this is done and there is a documentation somewhere, I can do some tests.
Try because I do not have a PC here. But the code contains PC examples.
Stef
Cheers,
Mariano
On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote: just load Alien from the alien squeaksource project
On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the AlienFFI package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Ok, thanks Fernando. I will look at it. Do you know which is the Linux status of it? Best, Mariano On Sat, May 23, 2009 at 5:24 PM, Fernando olivero <oliverof@lu.unisi.ch>wrote:
ALienFFI has plugins for windows vm also, it works for it too.
Its not tied to mac, what i meant is that i only tested on mac, because i dont have acces to a PC.
AlienLoader>>loadLibCInPharo gives you examples for windows, and mac also. After loading look at the class AlienExamples.
Also AlienLoader>>loadWin32InPharo gives you examples with windows specific libraries, look at AlienExamples after loading.
About documentation you can look here: http://wiki.squeak.org/squeak/6100
Both pdf files there were very helpful for me.
Saludos, Fernando
On May 23, 2009, at 9:54 PM, Stéphane Ducasse wrote:
On May 23, 2009, at 9:52 PM, Mariano Martinez Peck wrote:
I thought Alien FFI was only working in Mac. I am interesting in migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, but I need AlienFFI works in Linux, Mac and Windows. When this is done and there is a documentation somewhere, I can do some tests.
Try because I do not have a PC here. But the code contains PC examples.
Stef
Cheers,
Mariano
On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <
stephane.ducasse@inria.fr
wrote: just load Alien from the alien squeaksource project
On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the AlienFFI package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
BTW found many packages on the Alien repository, which ones are the required for Pharo on WinXP? -----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Mariano Martinez Peck Enviado el: Domingo, 24 de Mayo de 2009 10:04 p.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM Ok, thanks Fernando. I will look at it. Do you know which is the Linux status of it? Best, Mariano On Sat, May 23, 2009 at 5:24 PM, Fernando olivero <oliverof@lu.unisi.ch> wrote: ALienFFI has plugins for windows vm also, it works for it too. Its not tied to mac, what i meant is that i only tested on mac, because i dont have acces to a PC. AlienLoader>>loadLibCInPharo gives you examples for windows, and mac also. After loading look at the class AlienExamples. Also AlienLoader>>loadWin32InPharo gives you examples with windows specific libraries, look at AlienExamples after loading. About documentation you can look here: http://wiki.squeak.org/squeak/6100 Both pdf files there were very helpful for me. Saludos, Fernando On May 23, 2009, at 9:54 PM, Stéphane Ducasse wrote: > > On May 23, 2009, at 9:52 PM, Mariano Martinez Peck wrote: > >> I thought Alien FFI was only working in Mac. I am interesting in >> migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, >> but I need AlienFFI works in Linux, Mac and Windows. When this is >> done and there is a documentation somewhere, I can do some tests. > > Try because I do not have a PC here. > But the code contains PC examples. > > Stef >> >> >> Cheers, >> >> Mariano >> >> On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <stephane.ducasse@inria.fr >>> wrote: >> just load Alien from the alien squeaksource project >> >> On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote: >> >>> Fernando, plese can you send the note you mention again? Thanks, >>> Carlos >>> >>> -----Mensaje original----- >>> De: pharo-project-bounces@lists.gforge.inria.fr >>> [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de >>> Fernando olivero >>> Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. >>> Para: Pharo-project@lists.gforge.inria.fr >>> Asunto: Re: [Pharo-project] Alien FFI & COM >>> >>> >>> Carlos, plese let me know if you have problems loading the AlienFFI >>> package. >>> >>> Look at the email i sent a couple of days ago, in there i explained >>> the status and how to load. >>> >>> I'm using alien to reify C libraries and be able to call its >> behavior >>> in smalltalk, doing that is fairly easy with AlienFFI and it works >>> fast. >>> >>> Once you get it installed and test the examples i could help you >>> more. >>> >>> Saludos, >>> Fernando >>> >>> On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote: >>> >>>> did you succeed to load well alien. >>>> Because fernando and me where cleaning it but I did not check what >>>> fernando published. >>>> I know that this is much cleaner (we remove newspeak bytecode). >>>> >>>> Now we need people to shake it. >>>> >>>> >>>> On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote: >>>> >>>>> looking for pointers to a sample Alien FFi code calling a COM >> based >>>>> DLL.... >>>>> >>>>> _______________________________________________ >>>>> Pharo-project mailing list >>>>> Pharo-project@lists.gforge.inria.fr >>>>> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- >> project >>>>> >>>> >>>> >>>> _______________________________________________ >>>> Pharo-project mailing list >>>> Pharo-project@lists.gforge.inria.fr >>>> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project >>> >>> >>> _______________________________________________ >>> Pharo-project mailing list >>> Pharo-project@lists.gforge.inria.fr >>> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project >>> >>> >>> >>> -- >>> Internal Virus Database is out-of-date. >>> Checked by AVG. >>> Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: >>> 30/04/2009 >>> 05:53 p.m. >>> >>> >>> >>> _______________________________________________ >>> Pharo-project mailing list >>> Pharo-project@lists.gforge.inria.fr >>> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project >>> >> >> >> _______________________________________________ >> Pharo-project mailing list >> Pharo-project@lists.gforge.inria.fr >> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project >> >> _______________________________________________ >> Pharo-project mailing list >> Pharo-project@lists.gforge.inria.fr >> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project > > > _______________________________________________ > Pharo-project mailing list > Pharo-project@lists.gforge.inria.fr > http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
it should work too. Stef On May 25, 2009, at 3:04 AM, Mariano Martinez Peck wrote:
Ok, thanks Fernando. I will look at it. Do you know which is the Linux status of it?
Best,
Mariano
On Sat, May 23, 2009 at 5:24 PM, Fernando olivero <oliverof@lu.unisi.ch
wrote: ALienFFI has plugins for windows vm also, it works for it too.
Its not tied to mac, what i meant is that i only tested on mac, because i dont have acces to a PC.
AlienLoader>>loadLibCInPharo gives you examples for windows, and mac also. After loading look at the class AlienExamples.
Also AlienLoader>>loadWin32InPharo gives you examples with windows specific libraries, look at AlienExamples after loading.
About documentation you can look here: http://wiki.squeak.org/squeak/6100
Both pdf files there were very helpful for me.
Saludos, Fernando
On May 23, 2009, at 9:54 PM, Stéphane Ducasse wrote:
On May 23, 2009, at 9:52 PM, Mariano Martinez Peck wrote:
I thought Alien FFI was only working in Mac. I am interesting in migrating SqueakDBX FFI calls to AlienFFI if I can see advantages, but I need AlienFFI works in Linux, Mac and Windows. When this is done and there is a documentation somewhere, I can do some tests.
Try because I do not have a PC here. But the code contains PC examples.
Stef
Cheers,
Mariano
On Sat, May 23, 2009 at 8:41 AM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote: just load Alien from the alien squeaksource project
On May 23, 2009, at 12:58 PM, Carlos Crosetti wrote:
Fernando, plese can you send the note you mention again? Thanks, Carlos
-----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Fernando olivero Enviado el: Sábado, 23 de Mayo de 2009 06:56 a.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] Alien FFI & COM
Carlos, plese let me know if you have problems loading the
AlienFFI
package.
Look at the email i sent a couple of days ago, in there i explained the status and how to load.
I'm using alien to reify C libraries and be able to call its behavior in smalltalk, doing that is fairly easy with AlienFFI and it works fast.
Once you get it installed and test the examples i could help you more.
Saludos, Fernando
On May 23, 2009, at 11:40 AM, Stéphane Ducasse wrote:
did you succeed to load well alien. Because fernando and me where cleaning it but I did not check what fernando published. I know that this is much cleaner (we remove newspeak bytecode).
Now we need people to shake it.
On May 22, 2009, at 10:55 PM, Carlos Crosetti wrote:
looking for pointers to a sample Alien FFi code calling a COM based DLL....
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
-- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
while evaluating | table1 | table1 := GridMorph withColumns: #(one two). table1 addNewRow: #('uk' 'london'). table1 openInWorld. got a DNU notifier with BytecodeAgnosticMethodNode(Object)>>doesnotUderstand: #geherate Compiler>>evaluate:in:to:notifying:iffail:logged: what`s that??
I could not reproduce it. what image? On May 24, 2009, at 4:48 PM, Carlos Crosetti wrote:
while evaluating
| table1 | table1 := GridMorph withColumns: #(one two). table1 addNewRow: #('uk' 'london'). table1 openInWorld.
got a DNU notifier with
BytecodeAgnosticMethodNode(Object)>>doesnotUderstand: #geherate Compiler>>evaluate:in:to:notifying:iffail:logged:
what`s that??
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
actual inage with latest updates, then loaded sgrid.... but this is the first time happening, from the 10 days with pharo and sgrid everithing workked fine not tied to Sgrid, even this is showing at every "do it" on any expression, no worries, I will start over -----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Stephane Ducasse Enviado el: Domingo, 24 de Mayo de 2009 06:32 p.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] BytecodeAgnosticMethodNode ??? I could not reproduce it. what image? On May 24, 2009, at 4:48 PM, Carlos Crosetti wrote:
while evaluating
| table1 | table1 := GridMorph withColumns: #(one two). table1 addNewRow: #('uk' 'london'). table1 openInWorld.
got a DNU notifier with
BytecodeAgnosticMethodNode(Object)>>doesnotUderstand: #geherate Compiler>>evaluate:in:to:notifying:iffail:logged:
what`s that??
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project -- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
re loaded Kernel Corelli renggli 329 mcz and now the DNU is gone... -----Mensaje original----- De: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr]En nombre de Stephane Ducasse Enviado el: Domingo, 24 de Mayo de 2009 06:32 p.m. Para: Pharo-project@lists.gforge.inria.fr Asunto: Re: [Pharo-project] BytecodeAgnosticMethodNode ??? I could not reproduce it. what image? On May 24, 2009, at 4:48 PM, Carlos Crosetti wrote:
while evaluating
| table1 | table1 := GridMorph withColumns: #(one two). table1 addNewRow: #('uk' 'london'). table1 openInWorld.
got a DNU notifier with
BytecodeAgnosticMethodNode(Object)>>doesnotUderstand: #geherate Compiler>>evaluate:in:to:notifying:iffail:logged:
what`s that??
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project -- Internal Virus Database is out-of-date. Checked by AVG. Version: 7.5.524 / Virus Database: 270.12.11/2089 - Release Date: 30/04/2009 05:53 p.m.
On Fri, May 22, 2009 at 1:54 PM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote:
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you.
It's a good idea.
Mariano I still would love to know the method of integer that are missing
I am a bit complicated at work right now. I hope tonight or tomorrow have the time and will tell you the methods.
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
sure no stress I have to fix some walls :) stef On May 22, 2009, at 5:50 PM, Mariano Martinez Peck wrote:
On Fri, May 22, 2009 at 1:54 PM, Stéphane Ducasse <stephane.ducasse@inria.fr
wrote: Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you.
It's a good idea.
Mariano I still would love to know the method of integer that are missing
I am a bit complicated at work right now. I hope tonight or tomorrow have the time and will tell you the methods.
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Stef, I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Hi guys Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing Stef On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Did someone commit any kind of magic to Pharo core orCryptography packge ? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying. And all of them fail because of the same problem: a primitive has failed. The primitive is primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM. Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha Anyway, is this important? Cheers, Mariano On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM. Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork. Yes I know this is a irksome rule, but people should be aware of the implications. 2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com>
Did someone commit any kind of magic to Pharo core orCryptography packge ? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
John, "Yes I know this is a irksome rule, but people should be aware of the implications. " - you can say that again. Conspicuously among those people are the members of the US House and Senate, and those who elected them. Bill ________________________________ From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of John McIntosh Sent: Saturday, May 23, 2009 4:41 PM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM. Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork. Yes I know this is a irksome rule, but people should be aware of the implications. 2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com<mailto:marianopeck@gmail.com>> Did someone commit any kind of magic to Pharo core orCryptography packge ? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying. And all of them fail because of the same problem: a primitive has failed. The primitive is primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM. Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha Anyway, is this important? Cheers, Mariano On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu<mailto:bschwab@anest.ufl.edu>> wrote: Stef, I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it. Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr>] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo Hi guys Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing Stef On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com<mailto:marianopeck@gmail.com>>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com<mailto:ramiro.diaz.trepat@jpmorgan.com>
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> [mailto:pharo-project-bounces@lists.gforge.inria.fr<mailto:pharo-project-bounces@lists.gforge.inria.fr> ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr<mailto:Pharo-project@lists.gforge.inria.fr> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project -- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com<mailto:johnmci@smalltalkconsulting.com>> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
well being from Canada I can't quite comment, but I did have to spend 5 minutes to confirm that WikiServer, ST80Docs, and SqueakDocs didn't have any thing illegal in them when I answered the prompt as part of my due diligence for submission sign off. In theory if cryptography went in then I would have to spend another 5 minutes deleting it. Unless of course I needed to use it, then likely delays of weeks awaiting paperwork signoff. 2009/5/23 Schwab,Wilhelm K <bschwab@anest.ufl.edu>
John,
"Yes I know this is a irksome rule, but people should be aware of the implications. "
- you can say that again. Conspicuously among those people are the members of the US House and Senate, and those who elected them.
Bill
------------------------------ *From:* pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] *On Behalf Of *John McIntosh *Sent:* Saturday, May 23, 2009 4:41 PM
*To:* Pharo-project@lists.gforge.inria.fr *Subject:* Re: [Pharo-project] Port of Cryptography to Pharo
Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM. Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork.
Yes I know this is a irksome rule, but people should be aware of the implications.
2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com>
Did someone commit any kind of magic to Pharo core orCryptography packge ? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
ok thanks for the information stef On May 23, 2009, at 11:40 PM, John McIntosh wrote:
Ok, in the past I've built the DES plugin for the macintosh.
However I should point out that Cryptography should NOT be made part of the base VM. Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork.
Yes I know this is a irksome rule, but people should be aware of the implications.
2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com> Did someone commit any kind of magic to Pharo core orCryptography packge ? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu
wrote: Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo- project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- = = = = = ====================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http:// www.smalltalkconsulting.com = = = = = ======================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
2009/5/23 John McIntosh <johnmci@smalltalkconsulting.com>
Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM.
I didn't understand you. Cryptography uses several plugins, not only DES. Are you talking Cryptography in general or just DES? In addition you said the Cryptography should not be included in the base VM. Did you wanted to say base image ? Greetings, Mariano
Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork.
Yes I know this is a irksome rule, but people should be aware of the implications.
2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com>
Did someone commit any kind of magic to Pharo core orCryptography packge ?
I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu>wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
"Cryptography uses several plugins, not only DES." what are the other plugins then? 2009/5/24 Mariano Martinez Peck <marianopeck@gmail.com>
2009/5/23 John McIntosh <johnmci@smalltalkconsulting.com>
Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM.
I didn't understand you. Cryptography uses several plugins, not only DES. Are you talking Cryptography in general or just DES?
In addition you said the Cryptography should not be included in the base VM. Did you wanted to say base image ?
Greetings,
Mariano
Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork.
Yes I know this is a irksome rule, but people should be aware of the implications.
2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com>
Did someone commit any kind of magic to Pharo core orCryptography packge ?
I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K <bschwab@anest.ufl.edu
wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
--
=========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com
===========================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
2009/5/24 John McIntosh <johnmci@smalltalkconsulting.com>
"Cryptography uses several plugins, not only DES." what are the other plugins then?
I must said I don't know very much of Cryptography I just use it for Postgres driver, but I can see that the SHA1 uses DSAPrims module. Example: primHashBlock: blockBitmap using: workingTotalsBitmap "Hash the given block (a Bitmap) of 80 32-bit words, using the given workingTotals." <primitive: 'primitiveHashBlock' module: 'DSAPrims'> ^ self primitiveFailed
2009/5/24 Mariano Martinez Peck <marianopeck@gmail.com>
2009/5/23 John McIntosh <johnmci@smalltalkconsulting.com>
Ok, in the past I've built the DES plugin for the macintosh. However I should point out that Cryptography should NOT be made part of the base VM.
I didn't understand you. Cryptography uses several plugins, not only DES. Are you talking Cryptography in general or just DES?
In addition you said the Cryptography should not be included in the base VM. Did you wanted to say base image ?
Greetings,
Mariano
Why? Well the USA government then wants you to fill out export paperwork if you are USA company or selling product thru the USA that someone that doesn't live in the USA could buy. An example of this is when you submit apps to the Apple iPhone app store, then you are asked if the product includes any encryption and if you have done the paperwork.
Yes I know this is a irksome rule, but people should be aware of the implications.
2009/5/23 Mariano Martinez Peck <marianopeck@gmail.com>
Did someone commit any kind of magic to Pharo core orCryptography packge
? I just prepared a latest image to start working on it but I see only 3 red tests. Those are: testDES, testDES2 and testDSASigninAndVerifying.
And all of them fail because of the same problem: a primitive has failed. The primitive is
primCookKey: aByteArray mode: flag to: cooked <primitive: 'primitiveDESCookKey' module: 'DESPlugin'> ^ self primitiveFailed
I look here: http://code.google.com/p/pharo/wiki/VMPluginOverview but I didn't found it. I don't have that plugin in my Exupery VM.
Perhaps downloading VMMaker and try to generate the plugin is a good idea but I never even download VMMaker haha
Anyway, is this important?
Cheers,
Mariano
On Fri, May 22, 2009 at 1:42 PM, Schwab,Wilhelm K < bschwab@anest.ufl.edu> wrote:
Stef,
I proposed that a while ago, but there was a stunning lack of response. The offer is still good however; I'd welcome a group effort to tackle it.
Bill
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 9:55 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Hi guys
Why don;t you join forces and create a Cryptography package which work for pharo and for you. Mariano I still would love to know the method of integer that are missing
Stef
On May 22, 2009, at 4:47 PM, Jan van de Sandt wrote:
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com
wrote: I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth- method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
--
=========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com
===========================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- =========================================================================== John M. McIntosh <johnmci@smalltalkconsulting.com> Corporate Smalltalk Consulting Ltd. http://www.smalltalkconsulting.com ===========================================================================
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
2009/5/22 Jan van de Sandt <jvdsandt@gmail.com>
Hello,
I faced the same problem with Cloudfork-AWS. This project required the Cryptography package for generating the signatures using SHA and for generating MD5 hash values.
When I had problems loading the package in Pharo and I learned that the package was no longer maintained I copied the classes I required to a Cloudfork package. I needed the MD5, SHA1 and SHA256 classes. I renamed them to CFMD5, CFSHA1 and CFSHA256, I also prefixed all the methods in the required class extensions with cf. For example ThirtyTwoBitRegister>>cfBitShift: anInteger. You can use a simular approach for Glorp.
Thanks for your help. I thought the same solution. Even with 2 simple methods extension I get Cryptography working for the postgresql driver. But because I just fixed the md5 problem, not all of them.
Jan.
PS: Another dependency of Cloudfork is a HTTP client. I'm now playing around with the CurlPlugin, this plugin works very well. Things like supporting https become real easy
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat < ramiro.diaz.trepat@jpmorgan.com> wrote:
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth-method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto: pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
2009/5/22 Mariano Martinez Peck <marianopeck@gmail.com>:
On Fri, May 22, 2009 at 9:18 AM, Ramiro Diaz Trepat <ramiro.diaz.trepat@jpmorgan.com> wrote:
I'm really sorry to hear it is no longer being maintained. It was a necessary package to connect to properly set up Postgres databases, that requiere sending password hashes with SHA-1. Â We will probably face this kind of need when interacting with the outside world in general.
Yes. That's why I saw it. I am trying to make Glorp to work in Pharo, but as you know Glorp in Squeak only works with Postgres. And the native postgres driver requieres cryptography package when you use md5 :(
Just for now, I disable md5 from my postgres and use "password" auth-method. With this, cryptography is not needed. However, this is not an option in a production enviorment.
Calculating an md5 checksum is not that complex thing. It can be implemented as a standalone class. Somewhere i saw the md5 implementation on C++, which contains just a couple pages of code. So, if this is your primary concern for having postgres connectivity - i don't see why not (re)implement it separately.
Cheers,
Mariano
It was a fantastic package, I wonder why the maintainers droped it. Â I suppose maintaining crypto frameworks up to date, with no vulnerabilities, is a lot of work. Sorry for venting out my sadnes to the list. Cheers
r.
-----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: 22 May 2009 11:08 To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Ok I thought the cryptology package was working well and maintained.
Stef
On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Â Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. Â The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. Â There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new  AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Â Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of  Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project This email is confidential and subject to important disclaimers and conditions including on offers for the purchase or sale of securities, accuracy and completeness of information, viruses, confidentiality, legal privilege, and legal entity disclaimers, available at http://www.jpmorgan.com/pages/disclosures/email.
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
-- Best regards, Igor Stasenko AKA sig.
Stef, I thought so too until a while ago, but it appears to be long gone. I would enjoy being shown otherwise. However, I still think there is good reason to expose and promote both curl and OpenSSL because they will draw "customers." Bill -----Original Message----- From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr] On Behalf Of Stéphane Ducasse Sent: Friday, May 22, 2009 5:08 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo Ok I thought the cryptology package was working well and maintained. Stef On May 22, 2009, at 11:58 AM, Schwab,Wilhelm K wrote:
Agreed: I mentioned both curl and OpenSSL - we should embrace both. AFACT, the cryptography package is a thing of the past, and we should look to active projects. Tell me where I'm wrong, please.
Another reality, fair or not: if we were to take on the enormous burden of maintaining the cypto package, there would always be questions about security holes we left open. The same will be true of OpenSSL, but there is (not always fair) credibility in numbers widely known projects. There will be would-be users of Pharo who will want OpenSSL for its reputation, and who would question a home- grown solution.
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Fernando olivero Sent: Friday, May 22, 2009 4:20 AM To: Pharo-project@lists.gforge.inria.fr Subject: Re: [Pharo-project] Port of Cryptography to Pharo
Just a comment,
you could use the new AlienFFI framework to comunicate with curl. Or reify any C library you want in Pharo.
Fernando
On May 22, 2009, at 5:04 AM, Schwab,Wilhelm K wrote:
The most recent post on the crytography mailing list starts out as follows:
Since the Cryptography Team doesn't exists anymore, the Cryptography package is not maintained by anyone. The SSL implementation doesn't allow easy debugging, you can't just turn on logging to see what's happening. Following the state machine transitions should give you the answer why the handshake isn't succeding. It might be related to certificates or TLS->SSL3 fallback. If I were you, I would go with curl. I think it is time to write a wrapper around open SSL in addition to looking at the curl plugin. Trying to write cryptography code from scratch and get and keep it right is a huge effort, and pretty avoidable, and IMHO, better avoided by letting others do the job. Ever read Sun Tzu?
Bill
From: pharo-project-bounces@lists.gforge.inria.fr [mailto:pharo-project-bounces@lists.gforge.inria.fr ] On Behalf Of Mariano Martinez Peck Sent: Thursday, May 21, 2009 8:51 PM To: Pharo Development Subject: [Pharo-project] Port of Cryptography to Pharo
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano <ATT00001.txt>
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
_______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
The cryptogarphy package is important. Now I do not see why we would have removed methods from SmallInteger (may be with the last license cleaning) Could you tell us the methods that are missing? Stef On May 22, 2009, at 3:51 AM, Mariano Martinez Peck wrote:
I don't know if there is anyone of the developers of the package Cryptography but is someone is willing to do the port of it to Pharo? Most tests are break and it seems not to work because lots of Cryptography methods where in classes like SmallInteger and these methods were removed in Pharo.
Regards,
Mariano _______________________________________________ Pharo-project mailing list Pharo-project@lists.gforge.inria.fr http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
participants (10)
-
Adrian Lienhard -
Carlos Crosetti -
Fernando olivero -
Igor Stasenko -
Jan van de Sandt -
John McIntosh -
Mariano Martinez Peck -
Ramiro Diaz Trepat -
Schwab,Wilhelm K -
Stéphane Ducasse