Re: SSL renegotiation

2012-07-18 Thread Sebastian Raymond
Thanks for the reply. But I have already tried that option. It does not work. I still get the same error. On Wed, Jul 18, 2012 at 9:24 PM, Jijo wrote: > you can enable using this directive SSLInsecureRenegotiation > > please refer > http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslinsecurer

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, AJ wrote: > This explains it -- thank you -- I was using a static library -- so I would > need to use fipsld, if I continue to use static.   > > However, knowing this, I wanted to try with shared OpenSSL library instead, > but my build fails on "multiple definition" errors

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
This explains it -- thank you -- I was using a static library -- so I would need to use fipsld, if I continue to use static.   However, knowing this, I wanted to try with shared OpenSSL library instead, but my build fails on "multiple definition" errors. The only difference I made, was to add "s

Make issue with openssl-1.0.0f and openssl-1.0.0j

2012-07-18 Thread Barone, Philip
Jeremy, Thank you very much for your response, Did I tell you it took around 3 hours to get the failure point? It also brought the CPU to it's knees, xload reported like 20 bars. Also, libcrypto.a is only about 5MB when it has been successfully compiled, mine was growing over 11GB when it sto

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, AJ wrote: > Its my application producing the error. > > I've been reading more... perhaps I need to get Android build to link via > fipsld to get the valid fingerprint? > > Does this sound right? Any tips? > How are you linking your application? If it is to the OpenSSL

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Jeffrey Walton
On Wed, Jul 18, 2012 at 3:24 PM, AJ wrote: > I'm running on 4.0.4 and 2.3.4, with same results on both. Android 4.0 got most of ASLR in place (Android 4.1 finished the randomization and fixed a kernel mis-configuration): http://source.android.com/tech/security/index.html#memory-management-security

Testing renegotiation with FTP data channel

2012-07-18 Thread Gokhan Sengun
Hello, We have added SSL/TLS support into our legacy FTP server using OpenSSL. Thanks for the great code BTW :) We are able to test SSL/TLS renegotiation for FTP control channel (port 21) using "openssl s_client" but looking for a way to test data channel (port 20) renegotiation too. Are you awa

Re: SSL renegotiation

2012-07-18 Thread Jijo
you can enable using this directive SSLInsecureRenegotiation please refer http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslinsecurerenegotiation documentation. On Mon, Jul 16, 2012 at 11:37 AM, Sebastian Raymond wrote: > Hello, > > I was investigating the SSL renegotiation in Openssl. > > W

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
I'm running on 4.0.4 and 2.3.4, with same results on both. - Original Message - From: Jeffrey Walton To: openssl-users@openssl.org Cc: Sent: Wednesday, July 18, 2012 2:27 PM Subject: Re: FIPS: Incore fingerprint check fails on Android? On Wed, Jul 18, 2012 at 11:15 AM, Aunt Jomamma w

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Jeffrey Walton
On Wed, Jul 18, 2012 at 11:15 AM, Aunt Jomamma wrote: > Sorry if this is duplicate, but I had an issue with the mailer, and not sure > if this went... > > I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using > ndk-r8. > I am doing cross-compile on Mac OSX. > > However, I

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
Its my application producing the error. I've been reading more... perhaps I need to get Android build to link via fipsld to get the valid fingerprint? Does this sound right? Any tips? Thanks. "Dr. Stephen Henson" wrote: >On Wed, Jul 18, 2012, Aunt Jomamma wrote: > >> Sorry if this is duplica

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, Aunt Jomamma wrote: > Sorry if this is duplicate, but I had an issue with the mailer, and not sure > if this went... > > I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using > ndk-r8.   > I am doing cross-compile on Mac OSX. > > However, I cannot

FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Aunt Jomamma
Sorry if this is duplicate, but I had an issue with the mailer, and not sure if this went... I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using ndk-r8.   I am doing cross-compile on Mac OSX. However, I cannot pass FIPS_mode_set(1). I get the following error: "FIPS ro

Re: Make issue with openssl-1.0.0f and openssl-1.0.0j

2012-07-18 Thread Jeremy Hunt
The error message is all important. ar: ../../libcrypto.a: cannot write: Bad address Bad address is an invalid pointer, cannot write means some access or system error, which an invalid pointer can be an instance of. Seeing as you can use ar to read to this file, I assume it is there, even th

Re: OpenSSL beginner...

2012-07-18 Thread Funshine
ohh i just had a 'duh' moment thank you ~ Dominik Oepen-2 wrote: > > On 17/07/12 05:28, Funshine wrote: >> >> Hi ! I want to learn OpenSSL and I'm having trouble getting any >> meaningful >> result from their example program. No matter the argument I seem to pass >> I >> get 'Unknown messa