Re: FIPS fingerprint in .data not .rodata

2012-02-18 Thread Andy Polyakov
> The key thing I realized is that the incore script that comes with the FIPS > Object Module v2.0 tarball > handles both native AND cross-compile scenarios. Even though FIPS 2.0 util/incore is capable of handling arbitrary ELF binary (native or not), it's not used in non-cross-compile/native cas

RE: weak key check?

2012-02-18 Thread Edward Ned Harvey
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of anthony berglas > > Taking a different slant, is it possible to provide the "Entropy" using a pass > phrase.  So a given pass phrase will always generate the same key pair.  This > means that for simpl

Re: possible memleak

2012-02-18 Thread Botond Botyanszki
Hi, On Sat, 18 Feb 2012 12:47:34 +0800 (CST) "Ziyu Liu" wrote: > I think you may call the function [X509 *SSL_get_peer_certificate(const SSL > *s)] > to get a peer's certificate, but you have freed this certificate. > SSL_get_peer_certificate will increase the reference count of this > certific

Re: FIPS fingerprint in .data not .rodata

2012-02-18 Thread Kevin Fowler
On Fri, Feb 17, 2012 at 10:25 PM, Dr. Stephen Henson wrote: > On Fri, Feb 17, 2012, Kevin Fowler wrote: > > > Thanks Harvey, > > This seems to have worked as far as getting the .rodata section used. > This > > is what I see now: > > > > 001b5740 g O .rodata0010 FIPS_rodata_start >

Re: Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-18 Thread Dr. Stephen Henson
On Fri, Feb 17, 2012, gatewood_gr...@mcafee.com wrote: > Tested with snapshots 20120216 > > After compiling openssl-fips-2.0 I get a working fips_test_suite. I > compile openssl-1.0.1 and then link a simple a simple application (we'll > can fips_can_test, see below). > > compiling like so: > >

Re: Confused about OpenSSL and CA Certs

2012-02-18 Thread MK
On Fri, 17 Feb 2012 12:12:43 -0700 Dave Meetchum wrote: > I am trying to use OpenSSL on iOS and Android in conjunction with > libcurl for my applications HTTP interface. From what I understand > OpenSSL does not come with a CA cert which is understandable. Also my > understanding is that if you n

Re: Confused about OpenSSL and CA Certs

2012-02-18 Thread Michael S. Zick
On Fri February 17 2012, Dave Meetchum wrote: > I am trying to use OpenSSL on iOS and Android in conjunction with libcurl > for my applications HTTP interface. From what I understand OpenSSL does not > come with a CA cert which is understandable. Also my understanding is that > if you need a CA cer

Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-18 Thread Gatewood_Green
Tested with snapshots 20120216 After compiling openssl-fips-2.0 I get a working fips_test_suite. I compile openssl-1.0.1 and then link a simple a simple application (we'll can fips_can_test, see below). compiling like so: CC=/usr/local/ssl32/bin/fipsld FIPSLD_CC="gcc -m32" /usr/local/ssl32/bin/

openssl freebsd 8.2 install, compile error

2012-02-18 Thread aram_baghomian
Hi, I want to compile openssl for freebsd 8.2 but MAKE program create some error which I don't know the reason of it. I use this commands. # config # make ERROR: -