Re: strange behavior of self signed cert ???VeriSign Class 3 Public Primary Certification Authority - G5???.

Working with our network team, we finally found out the reason for the strange behavior of the "VeriSign Class 3 Public Primary Certification Authority - G5" cert, actually there are 2 G5 cert from Verisign, one is self signed, one is signed by "Class 3 Public Primary Certification Authority", so

Re: S/MIME encrypted by Bouncycastle cannot be decrypted with openssl

Ah, I forgot: Unfortunately Thunderbird can decrypt both messages after importing the certificate/key ... On 12/28/10 00:23, Markus Wernig wrote: > Hi all > > I am having trouble decrypting S/MIME messages with openssl that were > generated in an application using the bouncycastle java-api.

S/MIME encrypted by Bouncycastle cannot be decrypted with openssl

Hi all I am having trouble decrypting S/MIME messages with openssl that were generated in an application using the bouncycastle java-api. I have tried the following: # openssl smime -decrypt -in encMsgNOK.eml -inkey private.key This results in: Error reading S/MIME message 3073721992:error:0D06B

Re: FIPS and OpenSSL-1.0.0

Steve Marquess writes: > Henrik Grindal Bakken wrote: >> Hello. I'm working on getting FIPS 140-2 certification on a >> product which uses OpenSSL-1.0.0 for its crypto stuff. The crypto >> module in my case is the entire product, so using the OpenSSL FIPS >> module is not an option, but I'd sti

Re: FIPS and OpenSSL-1.0.0

Henrik Grindal Bakken wrote: Hello. I'm working on getting FIPS 140-2 certification on a product which uses OpenSSL-1.0.0 for its crypto stuff. The crypto module in my case is the entire product, so using the OpenSSL FIPS module is not an option, but I'd still need to run self-tests on poweron

Re: FIPS module determination

aerow...@gmail.com wrote: ... I think that this discussion is good, because it will (hopefully) lead to a tool -- perhaps a script -- that can perform all of the tests that we can identify on an executable to determine if it's been statically linked with a correct fipscanister. With all due

mysql5.1 and openssl 1.0.0c problem

Hello I work on fedora 13 with openssl 1.0.0.c and mysql server 5.1. I have a strange situation. When I create certyificat on server and setup mysql to use this certyficat, client mysql on this host connect with ssl encription correctly. From other many Fedora 13 also correctly but from Debian

To reduce the size of the OpenSSL library

Hi All, I am trying to reduce the size of OpenSSL library due to memory constraints on our platform. I removed all the not required ciphers (idea, rc5, mdc2...). ./config no-rc2 no-md2 no-mdc2 no-idea no-rc5 no-bf no-krb5 no-cast no-zlib no-zlib-dynamic no-rfc3779 no-gmp no-camellia no-asm