Multi-threaded applications, locking_function, threadid_func, dynamic locks

2012-05-12 Thread Vladimir Belov
Hello. 1) If I will use each OpenSSL object only by one thread at the moment, it can be different thread each time but never two or more threads will use one object simultaneously do I need to use locking_function and threadid_func or no? 2) Performance of dynamic locks in comparison with "s

no-store(OPENSSL_NO_STORE) experimental option

2012-05-12 Thread Vladimir Belov
Hello. I see a new experimental option that turn on by default in Configure: no-store What does it mean?

Generating random keys/data on Windows

2012-05-12 Thread Web Developer
Hey guys, I need to generate random data (for keys, IVs etc.) but I can't seem to find the right way to do it. Here is the background - I am developing my server in c/c++ on windows using visual studio and am using the openssl1.0.1c library. I was reading the documentation for random data genera

Re: SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Kyle Hamilton
On Fri, May 11, 2012 at 12:21 PM, Andy GOKTAS wrote: Is this some limitation of wildcard certificates?  If so, is there a reference online somewhere that I'm able to read about this? RFC2459/3280/5280, also known as PKIX. In addition, there's RFC 2818 (HTTP over TLS), which defines even mor

applink.c, OPENSSL_Applink, small C snippet

2012-05-12 Thread Vladimir Belov
As I understand from FAQ, this small snippet is needed only if I mixing compilers for OpenSSL compilation and compilation of my application. But if I use the same compiler and the same compiler options for OpenSSL compilation and compilation of my application I don't need this one. Am I right o

Re: FIPS build questions

2012-05-12 Thread Dr. Stephen Henson
On Fri, May 11, 2012, Bill Reister wrote: > Hi all, noobie here. No experience with Linux compiling, and having some > issues trying to get a validated FIPS compatible build. > > Using Ubuntu 12.04, fresh install. By default it already has GNU C and GPG > installed, that part all worked fine.

Re: FIPS build questions

2012-05-12 Thread Dr. Stephen Henson
On Sat, May 12, 2012, Simon Convey wrote: > Hi Bill, > Try the following recipe.. > > 1) Clean your system. By default, openssl installs to /usr/local/ssl, and > you existing Ubuntu install will be in /usr, so you are safe to rm -rf > /usr/local/ssl > > 2) get http://www.openssl.org/sou

Re: FIPS build questions

2012-05-12 Thread Simon Convey
Hi Bill, Try the following recipe.. 1) Clean your system. By default, openssl installs to /usr/local/ssl, and you existing Ubuntu install will be in /usr, so you are safe to rm -rf /usr/local/ssl 2) get http://www.openssl.org/source/openssl-1.0.1c.tar.gz 3) get ftp://ftp.openssl.org/sn

Re: Programming with OpenSSL in different operation systems

2012-05-12 Thread Vladimir Belov
>>Do you mean an application which calls OpenSSL, or OpenSSL itself? I mean an application – “Programming with OpenSSL”. >>If you mean your client program, opensslconf.h is among >>the .h files copied to the installed include directory, >>so you can #include it if you want. But your program >>sho

RE: Looking for (easy) help.

2012-05-12 Thread Marek . Marcola
Hello, Do not pad with spaces, look at: http://en.wikipedia.org/wiki/Padding_%28cryptography%29 Best regards, -- Marek Marcola owner-openssl-us...@openssl.org wrote on 05/11/2012 11:08:52 PM: > > Sent by: owner-openssl-us...@openssl.org > > 05/11/2012 11:11 PM > > Please respond to > open

Re: SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Hanno Böck
On Fri, 11 May 2012 12:21:10 -0700 "Andy GOKTAS" wrote: > We have the following in our certificate: > CN = *.env.domain.com > SubjectAltName: > DNS=*.env.domain.com > DNS=*.env > > Reason: We want to have users use the short name w/o getting the > certificate warning prompt. Of course it w

SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Andy GOKTAS
Hello, We have the following in our certificate: CN = *.env.domain.com SubjectAltName: DNS=*.env.domain.com DNS=*.env Reason: We want to have users use the short name w/o getting the certificate warning prompt. Of course it works just fine with the FQDN, but we still get this error when

FIPS build questions

2012-05-12 Thread Bill Reister
Hi all, noobie here. No experience with Linux compiling, and having some issues trying to get a validated FIPS compatible build. Using Ubuntu 12.04, fresh install. By default it already has GNU C and GPG installed, that part all worked fine. I followed the instructions verbatim from the OpenS