RE: FIPS OpenSSL compilation error

2009-08-25 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Pankaj Aggarwal > Sent: Tuesday, 25 August, 2009 05:06 > I am using cygwin on windows xp to compile FIPS Openssl 1.2 using Visual studio 2005. Apparently you mean cygwin _perl_. The MS compiler and linker (which are t

Re: FIPS_mode_set(1) - FIPS_mode_set(0) - FIPS_mode_set(1)

2009-08-25 Thread Kyle Hamilton
Is this still present in FIPS module 1.2.0? -Kyle H On Mon, Aug 24, 2009 at 11:55 AM, Mike Trent wrote: > > > > Mike Trent wrote: >> >> It seems that after setting FIPS mode off one cannot set it back on again >> in the same executable. >> >> I have a test program which does: >> >> FIPS_mode_set(

Am On Vacation - OoO

2009-08-25 Thread KThirumal
I will be out of the office starting 08/26/2009 and will not return until 09/03/2009. For all project related queries please contact, Sivaprasad Chidambaram : Voip - (612) - 3265 Jaffar Mohideenpulavar : Voip - (612) - 5083 __

Re: add extension to an existing (signed) CA certificate

2009-08-25 Thread Kyle Hamilton
If you want to get an OID branch, you can get one by applying for a "Private Enterprise Number" from the IANA, at http://pen.iana.org/pen/PenApplication.page . You will be assigned a number. This number will show up at http://www.iana.org/assignments/enterprise-numbers . This becomes your OID --

Re: Anonymous DH client

2009-08-25 Thread Dr. Stephen Henson
On Tue, Aug 25, 2009, Ram G wrote: > Hi, > > I'm trying to use openSSL without certificates and authentication through > Anonymous Diffie-Hellman key exchange. I have managed to successfully > exchange messages between server and client by modifying some of the sample > programs available with th

Re: SMIME Capabilities encoding in openssl.cnf

2009-08-25 Thread Dr. Stephen Henson
On Tue, Aug 25, 2009, Patrick Patterson wrote: > Hello all: > > I find myself needing to create some test certificates with SMIME > Capabilities > encoded in them. Now, the ASN.1 prototype for these are: > > SMIMECapabilities ::= SEQUENCE OF SMIMECapability > > SMIMECapability ::= SEQUENCE {

Should "make test" look for certificates in certs?

2009-08-25 Thread John Center
Hi, After running "make test", I noticed this: The following command should have some OK's and some failures There are definitly a few expired certificates ../util/shlib_wrap.sh ../apps/openssl verify -CApath ../certs ../certs/*.pem Error opening certificate file ../certs/*.pem 26531:error:02001

Re: add extension to an existing (signed) CA certificate

2009-08-25 Thread Peter Sylvester
Second, I doubt your organisation is authoritative for the OID arc 1.1.1.1.1 - from what documentation I can find, the 1.1 arc is used for examples, and shouldn't be used in production. You should have your organisation register with IANA to be issued its own correct OID arc (or, I think the

Re: add extension to an existing (signed) CA certificate

2009-08-25 Thread Patrick Patterson
Hello Jehan: On August 24, 2009 10:15:51 am jehan procaccia wrote: > Hello, > > since Firefox 3.5 apparently doesn't accept Root CA self signed > certificate which doesn't contain correct extensions (Basic Constraints: > CA:TRUE) > I wonder how I can add these extensions to my already existing an

Anonymous DH client

2009-08-25 Thread Ram G
Hi, I'm trying to use openSSL without certificates and authentication through Anonymous Diffie-Hellman key exchange. I have managed to successfully exchange messages between server and client by modifying some of the sample programs available with the source code. The salient features of the modi

SMIME Capabilities encoding in openssl.cnf

2009-08-25 Thread Patrick Patterson
Hello all: I find myself needing to create some test certificates with SMIME Capabilities encoded in them. Now, the ASN.1 prototype for these are: SMIMECapabilities ::= SEQUENCE OF SMIMECapability SMIMECapability ::= SEQUENCE { capabilityID OBJECT IDENTIFIER, parameters ANY DE

RE: WSAEWOULDBLOCK versus WSAECONNREFUSED

2009-08-25 Thread David Schwartz
Md Lazreg wrote: > I do not know why you think my new change allows me to detect soft > failures. The only change I made is to change this: > status = select(m_sock_fd+1, NULL, &WriteSet, NULL, &tv); > to this: > status = select(m_sock_fd+1, NULL, &WriteSet, &ErrorSet, &tv); > Are you saying

FIPS OpenSSL compilation error

2009-08-25 Thread Pankaj Aggarwal
I am using cygwin on windows xp to compile FIPS Openssl 1.2 using Visual studio 2005. I get the following error after doing ms\do_fips in openssl directory. Am I missing something? SET FIPS_CC=cl SET FIPS_CC_ARGS=/Fotmp32dll\fips_premain.obj -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 /W3

Re: WSAEWOULDBLOCK versus WSAECONNREFUSED

2009-08-25 Thread Md Lazreg
I do not know why you think my new change allows me to detect soft failures. The only change I made is to change this: status = select(m_sock_fd+1, NULL, &WriteSet, NULL, &tv); to this: status = select(m_sock_fd+1, NULL, &WriteSet, &ErrorSet, &tv); Are you saying that for a soft failure, Windo