Doubt on OpenSSL FIPS Compliance

Hello All,   i. OpenSSL 0.9.7e supports FIPS-140.   ii. OpenSSL contains the FIPS 140 specific cryptographic API and algorithm implementations only for low level algorithms (RSA, AES, 3DES, DSA, SHA-1) in the  fips subdirectory.   iii. When we build OpenSSL with FIPS support the FIPS implem

Re: Beginner Question

Ragnar Paulson wrote: [...] I'm looking for a pointer to more documentation of how to use the openssl API, I don't really want to read the source or learn the internals. I have found the following two references: SSL and TLS: Designing and Building Secure Systems by Eric Rescorla Network Secur

Command-line RSA-signature form a hash

Hello! I would like to use the command-line to create a signature (and verify it) from a digest. Due to some reasons I don't want to use the original text to create a hash and next the signature. For this reason, the use of openssl dgst -sha1 is not valid for me In order to get the hash I'm

Beginner Question

Hello and thanks in advance for advice. I need to quickly come up to speed using the openssl API. I have the basic administration knowledge, having configured web servers (apache) to use SSL, as well as securing pop and imap with stunnel. Now I need to actually modify an existing proprietar

RE: s_client handshake failure [auf Viren überprüft]

Sorry, I think your ldap server is NOT running TLS. I just try a s_client on an ldap server without ssl and here is the result: [EMAIL PROTECTED] donnatfr]# openssl s_client -connect 192.168.0.70:389 -ssl3 -debug CONNECTED(0003) write to 0814B438 [081551F0] (88 bytes => 88 (0x58)) - 1

Newbe problem

I tried making certificates using openssl bundled with Fedora 2. I managed to make a server.key, server.csr, ca.key and ca.crt but not a server.crt. So I tried downloading openssl-0.9.7e and followed the instructions on http://www.faqs.org/docs/securing/chap24sec192.html. This did not work so I

Re: s_client handshake failure [auf Viren überprüft]

[EMAIL PROTECTED] schrieb das Folgende am 23.02.2005 20:34: First of all the HEX line are important because they contained information about the connection (SSL protocol layer: record, alert etc...), in fact in acts as -msg option (openssl 0.9.7e). My fault. But I had to retype it, because there's

SSL and OSU

SSL Group, I am running the 3.10a osu web server with openvms SSL. Our users access our server based on two different ip addresses, which corrulate to two different applications. Do you know if there is a way to make users who are accessing only one of the applications on the web to force them

Re: RSA_sign error

Op donderdag 24 februari 2005 om 12:33 uur schreef Manuel Sánchez Cuenca het volgende: > Hello all, I'm writting a C program to sign a char[] with the following > code: > == > FILE *pKeyFile = fopen("srv-key.pem", "r"); > RSA *rsa_key =

RSA_sign error

Hello all, I'm writting a C program to sign a char[] with the following code: == FILE *pKeyFile = fopen("srv-key.pem", "r"); RSA *rsa_key = NULL; rsa_key = PEM_read_RSAPrivateKey(pKeyFile, NULL, NULL, NULL); char firma_aux[256]; int

Signature error

Hello all, how can I know what means this error error:04077064:lib(4):func(119):reason(100)? it is produced when I try to verify a RSA signature. Thanks in advance. -- === Manuel Sanchez Cuenca Dept. Ingenieria de la Informacion y las Comunicac

Re: Rijndael

Lawrence Bowie escribió: Where do you hold your IVs for the C program? Are the Java and C programs seperate or are you using JNI? Yes, I'm using jni, so I pass the IV as a parameter o a C function. Also, I am not sure if "IAIK" is an actually optional Provider if you are using JCE, possibly an o