Re: OpenSSL FIPS Object Module 1.2.4 support for Apple iOS and OS X

2012-07-06 Thread Alex Chen
Thanks, Steve. Alex On 7/6/12 4:36 PM, "Steve Marquess" wrote: >On 07/05/2012 12:43 PM, Alex Chen wrote: >> Thanks for the information, Steve. I do have some questions about the >>FIPS >> module. >> >> 1. What does 'support' mean? Does it involve source code change or is >>it >> simple chan

Re: OpenSSL FIPS Object Module 1.2.4 support for Apple iOS and OS X

2012-07-06 Thread Steve Marquess
On 07/05/2012 12:43 PM, Alex Chen wrote: > Thanks for the information, Steve. I do have some questions about the FIPS > module. > > 1. What does 'support' mean? Does it involve source code change or is it > simple changes in the configure script to make the code compile correctly > in a specific

A few questions about non-blocking I/O in a secure HTTP server

2012-07-06 Thread James Marshall
I'm trying to write a secure HTTP server with pipelining, using OpenSSL. It uses non-blocking I/O, and I have a few questions. The behavior I'm seeing is: I start the server on localhost, then I open a browser and try to access the server. The browser hangs with "Waiting for localhost..."; the f

RE: rand in Windows

2012-07-06 Thread Jeremy Farrell
The simplest thing is simply to ignore the error. It's trying to write a file in a location which is not writeable by ordinary users. The file it's trying to write helps work around a deficiency in some ancient versions of Windows, helping ensure the randomness of future calls to the command. Th

openssl ca -> -key vs. -passin pass:

2012-07-06 Thread Klaus Klein
Hi Folks, what is the difference between the ca options -key mypassword and -passin pass:mypassword ? Is there any difference at all (or any guideline which to use when)? Thanks in advance ... __ OpenSSL Project

Re: rand in Windows

2012-07-06 Thread Jakob Bohm
On 7/6/2012 5:17 AM, Thomas J. Hruska wrote: On 7/5/2012 8:07 PM, John wrote: Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I am trying to use it to create a random generated file for use in stunnel, using this command "openssl rand -out filexyz.rnd -hex 2048" from the Wi

Re: EVP_Digest Example Compile Errors

2012-07-06 Thread Thomas Davie
You forgot to specify -L/opt/local/lib, so while it's reading the 1.0.1c headers, it's finding lion's built in 0.9.8 library. Bob On 4 Jul 2012, at 18:29, mmdon...@aol.com wrote: > MacBook 2,1 Mac OS X 10.7.4 Xcode 4.3.3 > > MacPortsopenssl @1.0.1c_0 (active) > > > When I attempt to comp

-key vs. -passin pass:

2012-07-06 Thread Klaus Klein
Hi Folks, what is the difference between the ca options -key mypassword and -passin pass:mypassword ? Is there any difference or any guideline when to use what? Thanks in advance ... __ OpenSSL Project

EVP_Digest Example Compile Errors

2012-07-06 Thread mmdonley
MacBook 2,1 Mac OS X 10.7.4 Xcode 4.3.3 MacPortsopenssl @1.0.1c_0 (active) When I attempt to compile the example at http://www.openssl.org/docs/crypto/EVP_DigestInit.html using gcc -Wall -I /opt/local/include -o mdtest mdtest.c I get the following errors from gcc: Undefined symbols for

Re: rand in Windows

2012-07-06 Thread Dr. Stephen Henson
On Thu, Jul 05, 2012, John wrote: > > > "Thomas J. Hruska" wrote in message > news:<4ff658d9.2010...@shininglightpro.com>... > >On 7/5/2012 8:07 PM, John wrote: > >> Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I > >> am trying to use it to create a random generated fil

Re: rand in Windows

2012-07-06 Thread Thomas J. Hruska
On 7/5/2012 8:56 PM, John wrote: "Thomas J. Hruska" wrote in message news:<4ff658d9.2010...@shininglightpro.com>... On 7/5/2012 8:07 PM, John wrote: > Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I > am trying to use it to create a random generated file for use in > s

Re: FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-06 Thread Dirk Menstermann
Hello Steve, do you see another way to force the error state? Thanks Dirk On 03.07.2012 10:49, Dirk Menstermann wrote: > Hello Steve, > > On 02.07.2012 19:37, Dr. Stephen Henson wrote: > >> >> As I indicated HEAD wont work as it isn't currently FIPS capable. > > OK - I will concentrate on 1.