Data Fingerprint

2007-02-15 Thread jason heddings
I'm a bit new to using some of these techniques, so thanks for your patience... Some background: We are looking to use OpenSSL for passing encrypted data between parties. The private keys will be held inside our corporate network (is it correct to call this a keyring?). From those keys, we will

RE: Visual Studio 7 and openssl.

2007-02-15 Thread Collins, Jerry
Thanks, that gives me a place to start. Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, February 15, 2007 4:51 PM To: openssl-users@openssl.org Subject: Re: Visual Studio 7 and openssl. On Thu, Feb 15, 2007, Coll

Re: Visual Studio 7 and openssl.

2007-02-15 Thread Dr. Stephen Henson
On Thu, Feb 15, 2007, Collins, Jerry wrote: > Hello all, > > I am having a problem with executables generated with Visual Studio 7 > that use openssl (fips version). > Firstly you *have to* using MinGW to build the 1.1.1 validated module. You can use VC++ to build a more recent snapshot of O

Visual Studio 7 and openssl.

2007-02-15 Thread Collins, Jerry
Hello all, I am having a problem with executables generated with Visual Studio 7 that use openssl (fips version). The problem is that Visual Studio 7 creates a manifest which references the version of the system dlls to use. Unfortunately, the version generated when I compile/link doesn't

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Dr. Stephen Henson
On Thu, Feb 15, 2007, David Hartman wrote: > Hi Chris, Wei, > > The normal OpenSSL config and build scripts seem to be different from > the FIPS one. My original attempts at building FIPS didn't run into a > problem until the steps to link fipscannister.o itself. This wouldn't be > an issue with

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
Hi Chris, Wei, The normal OpenSSL config and build scripts seem to be different from the FIPS one. My original attempts at building FIPS didn't run into a problem until the steps to link fipscannister.o itself. This wouldn't be an issue with the normal OpenSSL distribution. Here is procedure th

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
David: Thanks for the info. Interestingly enough, I was able to compile and install openssl-0.9.7l without any problems. It's only the fips piece that has an error in the link step. Chris Marshall --- David Hartman <[EMAIL PROTECTED]> wrote: > I recently tried compiling FIPS on Solaris with

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
Wei: I saw your post. I don't know whether it is correct or not. You are further along that I am ;-) I'll try the procedure in your post once I get my problem solved. I'm still reading the OpenSSL FIPS Object Module Guide, which covers what steps you have to go through for the result to be c

Re: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Wei Weng
Hi. Sorry I can not answer your question, but it seems that you are the only one that is working on getting openssl-fips-1.1.1 to work these days, so I had to bug you for some trivial questions. :) Do you think the process I had gone into making openssl-fips-1.1.1 work is correct? (I do realiz

RE: compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread David Hartman
I recently tried compiling FIPS on Solaris with similar results. What I found is some of the link options were only understood by the GNU linker. I installed the GNU linker along with GCC. GCC has to be compiled to use specific linkers. Since mine was compiled to use /usr/ccs/bin/ld, I moved that

compiling openssl-fips-1.1.1 on HP-UX 11.11

2007-02-15 Thread Christopher Marshall
I am having trouble compiling openssl-fips-1.1.1 on HP-UX. If anyone has any ideas what I am doing wrong, I would be much oblidged ;-) I'm getting the following error message at the end of the make attempt: rm -f openssl + ../fips-1.0/fipsld -o openssl -DMONOLITH -I.. -I../include -DOPENSSL_TH

SSL_shutdown question.

2007-02-15 Thread Dinh, Thao V CIV NSWCDD, K72
Hi I need your help on SSL_shutdown(). . The Client send "close notify" to server first to initiates the close connection. This first call return 0 , which it is correctly. Then The Client call SSL_shutdown again to wait for "close notify" form Server. The second SSL_shutdown call RETURN 0 , INST

Build a FIPS capable openSSL

2007-02-15 Thread Wei Weng
Hi all. I want to know whether this is correct in building a FIPS capable openSSL binaries. download openssl-fips-1.1.1.tar.gz and openssl-0.9.7l.tar.gz, unzip them into their own directories. cd openssl-fips-1.1.1, do ./config fips --prefix=/opt/fips and make; make install is going to in

Download Windows binary for version 0.9.8d

2007-02-15 Thread Jens Axel Søgaard
Hi all, Is there a place to download the dll-files for the new version 0.9.8d of libeay32 ? Or if not, of a newer version than 0.9.8b ? I tried Google, but couldn't find anything newer than 0.9.7. -- Jens Axel Søgaard __ Open

confused with BIO_set_nbio

2007-02-15 Thread Milan Křápek
I use openssl with TCP and TCP/TLS connection. I send a message to server and than I wait for response on select() function. I know, that sometimes I try to read, when there are no data on SSL buffer. I thought, that I must use the BIO_set_nbio to activate the non-blocking I/O operation, becaus

Retail-MAC (ISO 9797-1)

2007-02-15 Thread Steffen Lips
Hi, is there an easy way to do the Retail-MAC as described in ISO 9797-1 in openssl? Reg Steffen __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-us

Stress Test

2007-02-15 Thread Usman Riaz
Hi*!   I was going through the discussion of some stress testing on this newsgroup,  I too am interested to know if there is a way to stress test with just having 2 computers to act as client :) and a single core-duo machine to run as a server. It's a ICOP/BIO_pair based SSL server that i want