Compilation Error in application referencing FIPS Object Module using g++

Hi, I am using FIPS Object Module and encountered an error while compiling my application using g++. “fips_premain.c:71: error: initializer-string for array of chars is too long” I cannot change fips_premain.c since its part of FIPS validation I guess. Please suggest an

Re: FIPS compliance question regarding openssl distributions

On 3/6/2011 3:48 PM, Tim Hudson wrote: >> In the example of building the openssl FIPS *capable* distribution, it >> seems one should take the distribution from the official >> openssl.org/source website and validate it using PGP. However, >> FreeBSD ships openssl distribution within its source tre

Inserting lib version in .so file

Hi, I've got an interrogation on .so file ! I'm compiling the 0.9.8r file of openssl using the config command with those "threads shared zlib-dynamic" options ... All is going fine :-) My question is : Why i'm not finding the version in the openssl/lib/libcrypto.so.0.9.8 when i'm using

x509 cert contains subject in "hexa" code

Hi, I am using openssl 0.9.8g and certtool (GnuTLS 2.4.2) 2.4.2 I am on Debien/Lenny. I have generate a priv key for my CA, then a cert for this CA. Next, I am signing csr using, this command : /usr/bin/certtool --generate-certificate --load-request ${fqdn}.csr --outfile ${fqdn}.scsr \

Re: FIPS compliance question regarding openssl distributions

> In the example of building the openssl FIPS *capable* distribution, it > seems one should take the distribution from the official > openssl.org/source website and validate it using PGP. However, > FreeBSD ships openssl distribution within its source tree. You must follow the instructions contai

using Cross-certificates in Browser

Hi, I am facing issue for using cross-certificates. Purpose is to use cross-certificates so that user of 1 CA doesn't need the self-signed cert from another CA. I created 2 CAs - Dohatec.com and Flora.com. I have used OpenSSL to generate cross-certificate of Dohatec.com, signed by Flora.com, as

ssleay_rand_add crash on OS X

Hi, I try to generate a RSA key with a simple one liner like this: == RSA *rsakey = RSA_generate_key(1024, RSA_F4, NULL, NULL); == Works fine under Linux, but crashes under Mac OS X Snow Leopard (using Openssl 1.0.0d compiled from source): == Program received signal EXC_BAD_ACCESS, Could not a

Re: BN_mod_mul_montgomery() causing cpu spike

David Schwartz wrote: > On 3/2/2011 10:23 AM, prakgen wrote: > >> I've enabled fips in sshd (OpenSSH 5.5p1) > > Why? He either works in, or develops products for, a DoD or federal government environment where use of FIPS validated cryptography is mandated. No one uses FIPS validated cryptography

Re: RSA implementaion in C using openssl

On Sun, Mar 6, 2011 at 5:23 AM, pattabi raman wrote: > > Hi , > >  I need to implement the entire RSA logic in C program to encrypt the > customer key for one of our application functionality. > > I am bit confused on RSA API, which gives me struggle like Which method to > call / order of the meth

Re: RSA implementaion in C using openssl

Hi , I need to implement the entire RSA logic in C program to encrypt the customer key for one of our application functionality. I am bit confused on RSA API, which gives me struggle like Which method to call / order of the methods to be executed etc... Pls guide me. Thanks, Pattabi/

Re: RSA implementaion in C using openssl

On Sun, Mar 6, 2011 at 4:51 AM, pattabi raman wrote: > Hi, > > I have to implement the RSA algorithm in our solaris10 ( which has openssl > already) using C programming. > > Anyone please forward any doc / sample code / Weblink anything would be a > great help me. c = m^e mod n m = c^d mod n 'Raw

RSA implementaion in C using openssl

Hi, I have to implement the RSA algorithm in our solaris10 ( which has openssl already) using C programming. Anyone please forward any doc / sample code / Weblink anything would be a great help me. Thanks, Pattabi.