Re: FIPS and new releases of openssl

Justin A wrote: Hi Steve Marquess, What's the equivalent file for fipscanister.o on windows..? Let's see ... for the OpenSSL FIPS Object Module v1.1.1/1.1.2 it's fipscanister.o. For the upcoming v1.2 it will be fipscanister.lib. -Steve M. -- Steve Marquess Open Source Software Institute

Re: handshake/connection errors

csross wrote: > > I'm running solaris openssl 097l and I upgraded to 098h. I see errors in > the logs that seem like debugging errors that showed up, but seemed to > happen in both versions I believe. I am using a certificate from another > machine to test for this server. I believe the erro

Re: handshake/connection errors

csross wrote: > > I'm running solaris openssl 097l and I upgraded to 098h. I see errors in > the logs that seem like debugging errors that showed up, but seemed to > happen in both versions I believe. I am using a certificate from another > machine to test for this server. I believe the erro

Re: RAND_egd() blocking -- despite contract that states otherwise?

Ben Sandee wrote: > Hello Lutz and thank you for your informed response. > > Unfortunately I don't know exactly which version of prngd was being > used because I'm not the first-tier responder for this issue. What > I'm doing is preparing a portfolio of information so that we can > analyze exactly

Re: client crash or network issue?

Thank you all for you good advices. I think the SO_KEEPALIVE is THE thing I was looking for! Thanks Ger:). Do not worry I will make sure I read enough about it:). Thanks again. On Fri, Nov 7, 2008 at 5:23 PM, Ger Hobbelt <[EMAIL PROTECTED]> wrote: > First of all: heed David's [Schwartz] advice

Getting "certificate unknown" alert when ocsp request is enabled

Hi there, We have problems to establish a ssl handshake between an openssl client and a Radware Appxcel server if the ocsp checking for the client certificate is enabled in AppXcel. If ocsp checking is disabled, the ssl handshake can be established. Problem: SSL3 alert read:fatal:certificate

Re: RAND_egd() blocking -- despite contract that states otherwise?

Hello Lutz and thank you for your informed response. Unfortunately I don't know exactly which version of prngd was being used because I'm not the first-tier responder for this issue. What I'm doing is preparing a portfolio of information so that we can analyze exactly what may have happened and h

Re: Strange compile problems

Oops, it was caused by wine (I use windows headers and libs). wineg++ helped me to solve the problem. Sorry for bothering. Evgeniy Ivanov wrote: > Hi list, > I use the latest stable openssl version and try to compile my > application and get a lot of such errors: > In file included from /usr/local

OpenSSL API to get the value of Authority Information Access field

Hi all, Is there any OpenSSL API which will give me the value of Authority Information Access in extensions ? If not , then how to get this value from a X509 structure Thanks in advance, Aravind.

Re: RAND_egd() blocking -- despite contract that states otherwise?

Ben Sandee wrote: > Hi there, > > I'm investigating a case where a customer's prngd service was > blocking, which by itself is not supposed to happen AFAIK. This was > causing a hard-to-diagnose startup hang for our code that uses > OpenSSL. The call to RAND_egd() was blocking in a call to read()

Re: Encryption algorithm from cipher texts

On Fri November 7 2008, Chris Cheung wrote: > Hi all, > > my question may not be directly related to OpenSSL, but I don't know > where else better to seek for answer, so... > It is a general question - Give it a bit of thought, the answer should be obvious - If the encryption is "perfect" then

ssl_read crashing on read! don't know why?

Hi, I'm in need of an urgent help :o( ... I'm trying to setup dtls connection (with openssl-0.9.8g). I am using non-blocking socket and managed to complete handshake between client-server. However whenever I try to read (I'm using libevent to handle asynchronous events) using SSL_read it c

Encryption algorithm from cipher texts

Hi all, my question may not be directly related to OpenSSL, but I don't know where else better to seek for answer, so... I'm curious to know, given a number of cipher texts, how hard it is to know, if at all possible, what algorithm was used to generate that? Chris _

Re: OpenSSL API which build the chain from a peer certificate

Aravinda babu wrote: Hi all, First of all thanks for all of your suggestions and information.I got a clear idea of how to do the required thing. I forgot to mention one thing. We are making one library for certificate management which will be used by different applications.In that library

Re: RAND_egd() blocking -- despite contract that states otherwise?

On Fri, Nov 7, 2008 at 4:56 PM, Kyle Hamilton <[EMAIL PROTECTED]> wrote: > There should be some means of determining how much entropy is actually > in the information obtained from the EGD. The return values should > reflect the number of bits stirred in, with 0 being "we haven't gotten > anything