Re: OpenSSL With FIPS - Adding Hash to Application

2010-10-20 Thread rajesh kumar
For testing purpose i have tried to add hash to .dll file and see the same error. xxx.dll : fatal error LNK1107: invalid or corrupt file: cannot read at 0x358 First stage Link failure at fipslink.pl line 42. NMAKE : fatal error U1077: 'C:\Perl\bin\perl.EXE' : return code '0x53' Stop. what might b

Re: error: unable to get local issuer certificate

2010-10-20 Thread sandeep kiran p
mydomain.com.crt is an End-Entity certificate and not a CA cert. You need a CA certificate to sign and issue EE certs. CA certs at minimum should have BasicConstraints extension with CA:true and KeyUsage extension with certsign bit set. So you either need to get a CA cert from GoDaddy or setup a t

Re: Is there a way to make asn1parse print out GENERALSTRING values?

2010-10-20 Thread Aleksander Adamowski
Thanks for the patch, Ger! I just saw that Dr. Stephen Henson was recently planning to fix this in OpenSSL: http://thread.gmane.org/gmane.comp.encryption.openssl.user/39349/focus=39398 Interesting, maybe he could make use of your patch? Cross posting to openssl-dev then. -- Best Regards,   Al

Re: [patch] LNK4078 and LNK4210 linking with x64 static libs

2010-10-20 Thread Jakob Bohm
On 19-10-2010 19:23, Jeffrey Walton wrote: So I wasted my precious time preparing a patch while someone else had already posted a patch off-list. Lol... If you're going to throw a tantrum every time someone beats you ta a patch, you owe us a tantrum: WinCE patch: http://www.mail-archive.com/ope

Re: error: unable to get local issuer certificate

2010-10-20 Thread Ariel
On Wed, Oct 20, 2010 at 11:10 AM, sandeep kiran p wrote: > Is *mydomain.com.crt a CA cert? Does it have Basic Constraints with > CA=true? Does it also have the certsign bit set in the KeyUsage extension? > * > * > * > *-Sandeep > * > > Hi Sandeep, The cert I got from GoDaddy doesn't has "CA=true"

Re: error: unable to get local issuer certificate

2010-10-20 Thread sandeep kiran p
Is *mydomain.com.crt a CA cert? Does it have Basic Constraints with CA=true? Does it also have the certsign bit set in the KeyUsage extension?* * * *-Sandeep * On Wed, Oct 20, 2010 at 5:27 PM, Ariel wrote: > Hi group > > I'm having problems trying to use a certificate I got from GoDaddy (it's a >

Re: Is there a way to make asn1parse print out GENERALSTRING values?

2010-10-20 Thread Ger Hobbelt
Had a similar issue last year. vanilla OpenSSL doesn't do this, alas. I did a brutal backport of my own work to CVS HEAD (bleeding edge) OpenSSL -- I have a tweaked version of OpenSSL over here, which is fully size_t-ified and other odds and ends, hence the need for 'backpatching' for me -- and yo

error: unable to get local issuer certificate

2010-10-20 Thread Ariel
Hi group I'm having problems trying to use a certificate I got from GoDaddy (it's a wildcard cert) to sign client certificates requests and then validate them. This is my actual environment: - *mydomain.com.key* --> The private key used to request the GoDaddy's cert - *mydomain.com.crt*

Re: Crosscompiling openssl-fips-1.2 for arm-linux - still FIPS compliant?

2010-10-20 Thread Dr. Stephen Henson
On Tue, Oct 19, 2010, Susumu Sai wrote: > Similar question. > With the problem > http://www.mail-archive.com/openssl-users@openssl.org/msg58527.html > In order to make fipslink.pl work with MKS perl, in fipslink.pl, if I make a > change > > that add a line like below: > > $sha1_exe =~ s

OpenSSL With FIPS - Adding Hash to Application

2010-10-20 Thread rajesh kumar
I am working on application which need to be enhanced with FIPS Support. following User Guide and some information from mailers i have built OpenSSL in Static on windows. as mentioned in the User Guide, I do understand that when OpenSSL Static build is used, application need to be built with hash