RE: Server crash while starting service

2009-03-17 Thread Uma G. Nayak
Yes, it is the same executable on all the machines. I missed out some information in this mail, which I included in the next one. Here are some more details: The server works fine on one machine, in the debug environment. However it fails on the other with the following error: FIPS_R_UNSUPPORT

RE: Server crash while starting service

2009-03-17 Thread Uma G. Nayak
Thanks Steve. Will run the tests on these machines today. Regards, Uma -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, March 17, 2009 8:58 PM To: openssl-users@openssl.org Subject: Re: Server

Don't what to use openssl's CA bundle; want to use my own. What are my options

2009-03-17 Thread Rodney McDuff
I am doing some verifying with openssl on a chain of certs with a (versign) root CA and all other certs in the CApath directory and it was giving me a "OKs". A little stracing showed me that openssl was using the versign root in the openssl ca bundle and not my versign root in my CApath directory.

Don't what to use openssl's CA bundle; want to use my own. What are my options

2009-03-17 Thread Rodney McDuff
I am doing some verifying with openssl on a chain of certs with a (versign) root CA and all other certs in the CApath directory and it was giving me a "OKs". A little stracing showed me that openssl was using the versign root in the openssl ca bundle and not my versign root in my CApath directory.

Re: TLS, BIOs, SSL_read/write

2009-03-17 Thread Ger Hobbelt
Please follow Victor's advise, because this call >SSL_set_bio(m_ssl, NULL, bioMem); and it's counterpart: SSL_set_bio(m_ssl, m_bioMem, NULL); are NOT how this sort of thing is done. This is EXTREMELY DANGEROUS (or should I say: fatal?) coding as you forcibly remove either read or write BIO

Re: fips_premain_dso hanging

2009-03-17 Thread ABDUL BASIT
This is coming down the specific compiler, changing compiler flags / optimization produces different results. Could someone please indicate which compiler is good/tested for compiling openssl fips 1.2 for power pc ? gcc 3.x 4.0.x 4.1.x or 4.2.x, 4.3.x Currently I am using 4.2.3 and having problems

Re: Server crash while starting service

2009-03-17 Thread Dr. Stephen Henson
On Tue, Mar 17, 2009, Uma G. Nayak wrote: > Hi All, > > We have upgraded Openssl in our application to Openssl-fips-1.2 along with > Openssl-0.9.8j, so that we can run the server (Apache webserver) in FIPS > mode. After the changes, the server works fine in FIPS mode, on most of the > systems,

RE: Server crash while starting service

2009-03-17 Thread David Schwartz
> We have upgraded Openssl in our application to Openssl-fips-1.2 > along with Openssl-0.9.8j, so that we can run the server (Apache webserver) > in FIPS mode. After the changes, the server works fine in FIPS mode, on most > of the systems, except for these two machines, where the server refuses t

Server crash while starting service

2009-03-17 Thread Uma G. Nayak
Hi All, We have upgraded Openssl in our application to Openssl-fips-1.2 along with Openssl-0.9.8j, so that we can run the server (Apache webserver) in FIPS mode. After the changes, the server works fine in FIPS mode, on most of the systems, except for these two machines, where the server refuse

Re: Linkpoint giving SSLEAY_RAND_BYTES:PRNG not seeded

2009-03-17 Thread Kyle Hamilton
This is User FAQ #1: http://openssl.org/support/faq.html#USER1 You must provide a source of entropy -- that is, randomness -- to OpenSSL in order for it to provide any kind of security at all. This can be done by setting the RANDFILE environment variable in the service process, and filling that f

Linkpoint giving SSLEAY_RAND_BYTES:PRNG not seeded

2009-03-17 Thread shadi jawhar
Hello again, We have an application that link to link point, it uses open ssl and It is always giving us get a "PRNG not seeded". How can we solve it we read the faq and we read that there must be a file called ".RND" on C root folder, adn we have it and we generated it by execurting the

Linkpoint giving SSLEAY_RAND_BYTES:PRNG not seeded

2009-03-17 Thread shadi jawhar
Hello, We spent 5 days researchng and trying. We have an Ecommerce simple applocation that uses link point to process orders. We installed OPEN SSL As it is required. When the application tries to process order using the com objects, we are getting: SSLEAY_RAND_BYTES:PRNG not seeded

Re: error:0B07C065:x509 certificate routines:X509_STORE_add_cert:cert already in hash table

2009-03-17 Thread Arnaud Launay
Le Mon, Mar 16, 2009 at 04:15:02PM -0400, Victor Duchovni a écrit: > > So it should be broken on debian and gentoo... > No wonder so many of the Google hits for this error message are for Gentoo > systems. Please file a bug report with the distribution maintainers. Originally, it comes from Debian

Help crash on IO_proc_close!

2009-03-17 Thread Balaji Kannadassan
Hi All! We are facing a crash as below. We are clueless on why is it happening. btw the tracebacks are partial in certain instances. Any help on how to trouble shoot the same would be ver much helpful. Thanks Balaji Kamal Kannadassan Core 1 -- (gdb) bt #0 0x4021e76e in pclose ()

Re: CA cert in DER format usage

2009-03-17 Thread sudeepta
Thanks Dave I tried your "by hand" method and it worked. Regards Sudeepta sudeepta wrote: > > Hi, > > I am writing a server application which is supposed to use > certificates/keys in DER format only. In my code, I am using the following > functions for loading the server certificate and its