FIPS Server

Hello all, I have a general query regarding FIPS mode. I am running an simple openssl https server based on openssl that services https requests from window clients. I have the following setting in my windows XP "Use FIPS comliant algorithms for encryption, hashing and signing set to 1" . Using IE

SSL3/TLS1

Did OpenSSL version 0.9.6b support SSL3/TLS1? If not, what version of OpenSSL contained support for SSL3/TLS1. --Richard -- I'm not allowed to run the train The whistle I can't blow... I'm not allowed to say how far The railroad cars can go. I'm not allowed to sh

Re: Error adding attribute

On Thu, Feb 19, 2009, Christian Wessel wrote: > Hello, > > we are running openSSL 0.9.8h on a SunOS vuxs003 5.10 Generic_137112-07 > i86pc i386 i86pc to create a CSR for verisign.com. > > routines:X509_ATTRIBUTE_set1_data:malloc failure:x509_att.c:317: > problems making Certificate Request > >

Which version of SSL is supported in OpenSSL 0.9.7e

We are using OpenSSL 0.9.7e and would like to know if it supports SSL 3.0? Alex

Install openssl

Hi, I'm new to openSSL/SSL. I downloaded the file. It is openssl-0.9.8j.tar.tar and I want to use it on Linux. But I think it doesn't mater of which version on my question. What I need to do next? Do I need to compile it? what compiler and command? Is there any instructions for creating certi

Re: Which version of SSL is supported in OpenSSL 0.9.7e

Hello owner-openssl-us...@openssl.org wrote on 02/19/2009 08:30:04 PM: > We are using OpenSSL 0.9.7e and would like to know if it supports SSL 3.0? Yes. Best regards, -- Marek Marcola __ OpenSSL Project

Re: how to trace aes quickly?

On Thu, Feb 19, 2009 at 11:41:36PM +0800, loody wrote: > I have a homework to take aes for encryption and description. This list is not not a substitute for teacher or teaching assistant office hours. -- Viktor. __ Open

Re: how to trace aes quickly?

loody wrote: Is there sample code or ducument I can realize how to use EVP? On MacOSX, the normal man pages document the API for EVP*, I assume it is the same on the other unix environments. "apropos EVP" should get you started. Regards, Graham -- smime.p7s Description: S/MIME Cryptograp

Re: static openssl on mingw (undefined reference on bss_sock.c)

Dnia czwartek 19 luty 2009 o 14:57:56 carlyo...@keycomm.co.uk napisał(a): > >>On Thu 19/02/09 1:41 PM , Tomasz Kolaj m...@abp.pl sent: > >>Hello, > >> > >>Dnia czwartek 19 luty 2009 o 11:37:20 Victor B. Wagner napisał(a): > >>> On 2009.02.19 at 09:48:20 +0100, m...@abp.pl wrote: > >>> So, changing

Re: how to trace aes quickly?

2009/2/18 Ger Hobbelt : > On Tue, Feb 17, 2009 at 11:30 PM, Victor Duchovni > wrote: >>> Why are you trying to enforce the idea of cryptography as a black box, >>> rather than something that people should learn about? >> >> Because in amost all cases that's exactly the right advice. > > Well, yes,

Re: ignore the certificate chain self signed error

Thank youu PS, I know there will be risk without authentication but it is mostly like a enclosed system, And also we have the replacement mechanism to do the authentication. I look into the source code find that before the do check_trust there is a flag ctx->param->trust. Anyone know how to set it.

Error adding attribute

Hello, we are running openSSL 0.9.8h on a SunOS vuxs003 5.10 Generic_137112-07 i86pc i386 i86pc to create a CSR for verisign.com. To create the private key was without any error message. The creation of CSR failed by an error: -bash-3.00$ /usr/local/ssl/bin/openssl genrsa -des3 1024 > ./www.fruc

Re: static openssl on mingw (undefined reference on bss_sock.c)

>>On Thu 19/02/09 1:41 PM , Tomasz Kolaj m...@abp.pl sent: >>Hello, >> >>Dnia czwartek 19 luty 2009 o 11:37:20 Victor B. Wagner napisał(a): >>> On 2009.02.19 at 09:48:20 +0100, m...@abp.pl wrote: >>> So, changing library order to >>> -lssleay32 -leay32 -lwsock32 -lwst -lws2_de -lz -lm >>> might hel

Re: static openssl on mingw (undefined reference on bss_sock.c)

Hello, Dnia czwartek 19 luty 2009 o 11:37:20 Victor B. Wagner napisał(a): > On 2009.02.19 at 09:48:20 +0100, m...@abp.pl wrote: > So, changing library order to > -lssleay32 -leay32 -lwsock32 -lwst -lws2_de -lz -lm > might help. It works, Configure script works now but make fails: -- cut -- gcc

Re: static openssl on mingw (undefined reference on bss_sock.c)

On 2009.02.19 at 09:48:20 +0100, m...@abp.pl wrote: > Hello, > > I try to build static postgresql 8.3.6 with static openssl 0.9.8i. > > at config.log: > configure:7695: checking for SSL_library_init in -lssleay32 > configure:7725: gcc -o conftest.exe -O2 -Wall -Wmissing-prototypes > -Wpointer-ar

Re: ignore the certificate chain self signed error

There are a couple of alternatives. You can set a callback function in the SSL_set_verify method. This callback function can then be used to mask the self-signed error.( See http://openssl.org/docs/ssl/SSL_CTX_set_verify.html# ) Alternatively, on the client side, you can invoke SSL_set_verify() met

problem with security warning using openssl certificate

Hi…I m trying to create a digital signature and verify it. I created a private-public key pair of 2048 bits using openssl (version openssl-0.9.8h-1-doc). I used genrsa command of openssl to generate a key pair. Then I used that key pair to generate a self signed certificate of .crt format for my u

ignore the certificate chain self signed error

All, I encountered a problem. There is no trusted cert list in my system, so I have to ignore the certificate chain self signed error. Which API can I use? Two API invocation below do not worked. SSL_CTX_set_trust(ctx, X509_TRUST_SSL_CLIENT); X509_STORE_set_trust(store, 1); Thank you. -- Best

static openssl on mingw (undefined reference on bss_sock.c)

Hello, I try to build static postgresql 8.3.6 with static openssl 0.9.8i. I compiled openssl: perl Configure mingw make make test make install that build two libs: libcrypt.a and libssl.a postgres requred libeay32 and libssleay32 so i copied libcrypt to libeay32 and libssl to libssleay32 (i tried