RSA key generation problems with OpenSSH built with libcrypto of OpenSSL

Hello All,   I am working on an IPF(Itanium Processor Family) HPUX machine. Using the configure option hpux-ia64-cc would be the appropriate configure option while building OpenSSL in this platform. But I have problems with OpennSSH authentication when I use this

Re: Signature verification of OCSP Response

On Fri, Feb 25, 2005, John Allberg wrote: > Hi! > > We're developing a OCSP Responder. During interop testing it was discovered > that openssl verifies the signature on the response nicely when the > certificate is reported as revoked, but fails to verify the signature when > the certificate is r

Re: CRL Handling - what am I doing wrong

On Fri, Feb 25, 2005, Damien Dougan wrote: > Hi All, > > I've just set up an OpenSSL environment, with two client certificates > (cunningly called Working and Revoked...) > > One of these I have subsequently revoked, but I am still able to connect > with it to the openssl s_server - even with cl

CRL Handling - what am I doing wrong

Hi All, I've just set up an OpenSSL environment, with two client certificates (cunningly called Working and Revoked...) One of these I have subsequently revoked, but I am still able to connect with it to the openssl s_server - even with client and server requiring verification and doing -crl_chec

Re: Doubt on OpenSSL FIPS Compliance

I think I got the answer for my question from the following FAQ:   http://oss-institute.org/fips-faq.html#a10   Regards, Prashant.Prashant Kumar <[EMAIL PROTECTED]> wrote: Hello All,   http://www.linuxsecurity.com/content/view/115240/65/   The above news says that the library in version 0.9.7b of

Re: Doubt on OpenSSL FIPS Compliance

Hello All,   http://www.linuxsecurity.com/content/view/115240/65/   The above news says that the library in version 0.9.7b of OpenSSL was validated--FIPS serves as validation only for encryption modules, not entire software packages.   Does this mean that OpenSsl has to get FIPS certification for

Signature verification of OCSP Response

Hi! We're developing a OCSP Responder. During interop testing it was discovered that openssl verifies the signature on the response nicely when the certificate is reported as revoked, but fails to verify the signature when the certificate is reported as valid. I've tested the signature in Ascerti

Re: s_client handshake failure [auf Viren überprüft]

[EMAIL PROTECTED] schrieb das Folgende am 24.02.2005 20:16: I think your ldap server is NOT running TLS. Here is my ldapsearch debug output, including "TLS trace: SSL_connect:SSLv3 read server certificate A": [EMAIL PROTECTED]:/ldap> bin/ldapsearch -Z -x -d -1 -h localhost:666 ldap_create ldap_url_

Re: Doubt on OpenSSL FIPS Compliance

On Thu, Feb 24, 2005, prakash babu wrote: > Hello All, > > i. OpenSSL 0.9.7e supports FIPS-140. > It doesn't. It hasn't been certified yet. > ii. OpenSSL contains the FIPS 140 specific cryptographic API and algorithm > implementations only for low level algorithms (RSA, AES, 3DES, DSA, SHA