Re: p12 file created using openssl doesn't have the certificate stored against the alias.

2010-12-09 Thread Kannan J
I'm able to find the certificate stored against the key alias if I use BouncyCastleProvider instead of the default SunJSSE provider.  Security.addProvider(new BouncyCastleProvider());  KeyStore keyStore = KeyStore.getInstance("pkcs12","BC");   Any idea why it works now?   thanks Kannan --- On T

RE: p12 file created using openssl doesn't have the certificate stored against the alias.

2010-12-09 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Kannan J > Sent: Thursday, 09 December, 2010 13:19 > [Created .p12 using] > D:\>openssl pkcs12 -export -out MSCACertificateBundle.p12 > -inkey MSCAPrivateKey.pem -in MSCACertificate.cer > When I try to read the Certifica

OCSP_BASICRESP_free() segmentation fault

2010-12-09 Thread Bin Lu
Hi, I am getting the following crash in openssl-0.9.8d: #0 0x2332885e in ASN1_primitive_free () #1 0x233288a4 in ASN1_primitive_free () #2 0x23328935 in ASN1_primitive_free () #3 0x23328b5a in ASN1_template_free () #4 0x23328a74 in ASN1_primitive_free () #5 0x23328b5a in ASN1_template_free () #6

Re: p12 file created using openssl doesn't have the certificate stored against the alias.

2010-12-09 Thread Dr. Stephen Henson
On Thu, Dec 09, 2010, Kannan J wrote: > I have a certificate file MSCACertificate.cer and the corresponding private > key MSCAPrivateKey.pem from which I created a p12 file > MSCACertificateBundle.p12 using the command D:\>openssl pkcs12 -export -out > MSCACertificateBundle.p12 -inkey MSCAPrivateK

p12 file created using openssl doesn't have the certificate stored against the alias.

2010-12-09 Thread Kannan J
I have a certificate file MSCACertificate.cer and the corresponding private key MSCAPrivateKey.pem from which I created a p12 file MSCACertificateBundle.p12 using the command D:\>openssl pkcs12 -export -out MSCACertificateBundle.p12 -inkey MSCAPrivateKey. pem -in MSCACertificate.cer When I try to

RE: RE: Problems building FIPS Openssl under Server 2008 R2

2010-12-09 Thread Christopher A Hotchkiss
I’m sorry I wasn’t clear. The tweak was done during the second phase of the build, where you link the fipscanister to a more recent OpenSSL. The fips-1.2 build phase was untweaked. So I think we are compliant. Christopher A Hotchkiss JPMorgan Chase & Co. - Navy Cash Application Developer Email

Re: RE: Problems building FIPS Openssl under Server 2008 R2

2010-12-09 Thread carlyoung
BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; } My 2-cents worth... If you had to tweak ANYTHING then this is not a "FIPS-approved" build. Carl On Thu 09/12/10 4:39 PM , Christopher A Hotchkiss christopher.a.hotchk...@jpmchase.com sent: To All,

Re: list of #ifdef preprocessor identifiers

2010-12-09 Thread Victor Duchovni
On Thu, Dec 09, 2010 at 01:07:14PM +0200, Yannay Alon-BAY004 wrote: > Hi > > Is there a file/location that lists all openssl #ifdef preprocessor > identifiers (e.g. OPENSSL_NO_SSL2, OPENSSL_NO_IDEA, OPENSSL_NO_MD5) with > possibly an explanation of each? Options that enable/disable features at

RE: Problems building FIPS Openssl under Server 2008 R2

2010-12-09 Thread Christopher A Hotchkiss
To All, I was able to get OpenSSL FIPS to build and run on Server 2008 R2 by building on Server 2003 32bit. I also had to tweak the ms\ntdll.mk file and add "/FIXED" on lines 33 and 76. Christopher A Hotchkiss JPMorgan Chase & Co. - Navy Cash Application Developer Email christopher.a.hotchk...@j

list of #ifdef preprocessor identifiers

2010-12-09 Thread Yannay Alon-BAY004
Hi Is there a file/location that lists all openssl #ifdef preprocessor identifiers (e.g. OPENSSL_NO_SSL2, OPENSSL_NO_IDEA, OPENSSL_NO_MD5) with possibly an explanation of each? Thanks __ OpenSSL Project