Re: Enabling Logging in OpenSSL

2012-09-10 Thread Mithun Kumar
Thanks Dave, Please find my reply inline. On Tue, Sep 11, 2012 at 8:08 AM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar > >Sent: Monday, 10 September, 2012 08:17 > > >On Mon, Sep 10, 2012 at 1:52 PM, Dave Thompson > wrote: > > > 2. If it's a hands

RE: Confused: different results on different OSs

2012-09-10 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Ben White >Sent: Monday, 10 September, 2012 06:17 >Calling openssl with the -CApath pointing to the certificate >store resolves this issue, so it's definitely related to this. >However, there seems to be a problem with the default settings.

RE: Enabling Logging in OpenSSL

2012-09-10 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar >Sent: Monday, 10 September, 2012 08:17 >On Mon, Sep 10, 2012 at 1:52 PM, Dave Thompson wrote: > 2. If it's a handshake failure, can you use commandline > s_client? That has logging builtin, use -msg and/or -debug .

RE: Does this mailinglist work?

2012-09-10 Thread Charles Mills
Yes, it works. It may be moderated. Please be patient. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Carlo Wood Sent: Monday, September 10, 2012 10:34 AM To: openssl-users@openssl.org Subject: Does this mailinglist w

Does this mailinglist work?

2012-09-10 Thread Carlo Wood
I just sent a long mail... but it doesn't seem to appear on the list :/ -- Carlo Wood __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.o

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
Thanks Steve. I wish you had the equipment for some more time :(. I am taking a look at the Makefile.shared which is the helper makefile to link shared libraries. Hope to find a clue. On Mon, Sep 10, 2012 at 10:47 AM, Steve Marquess < marqu...@opensslfoundation.com> wrote: > On 09/10/2012 10:31 A

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Steve Marquess
On 09/10/2012 10:31 AM, Taraniteja Vishwanatha wrote: > I have moved the iOS directory to one level above and I am able to generate > the 2.0 module. > One more difference that I have observed between 1.2 and 2.0 for iOS is: > when I built the FIPS module, I also had libcrypto.a, libssl.a etc. in

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
I have moved the iOS directory to one level above and I am able to generate the 2.0 module. One more difference that I have observed between 1.2 and 2.0 for iOS is: when I built the FIPS module, I also had libcrypto.a, libssl.a etc. in my /usr/local/ssl/Release-iphoneos/lib. I did not build a FIPS

Re: Enabling Logging in OpenSSL

2012-09-10 Thread Mithun Kumar
Hello Dave, Please find my reply inline On Mon, Sep 10, 2012 at 1:52 PM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar > >Sent: Monday, 10 September, 2012 01:56 > > Answering -users only, this isn't a -dev question. > > >I have a challenge befor me where

Re: FIPS validation process

2012-09-10 Thread Steve Marquess
On 09/08/2012 10:03 AM, V.Ravikumar wrote: > Hello All, > I would be so thankful if somebody explains the application fips validation > process in details. > Also need purpose of below files and how they will be used in validation > process. > > fipscanister.o > > fipscanister.o.sha1 > > fips_pr

Re: Confused: different results on different OSs

2012-09-10 Thread Ben White
> > > > No, look at your output: the certificate chain is identical. > What differs is the result of verification against each system's > truststore, which is the set of CA (root) certs it trusts. > > Since you didn't specify -CAfile or -CAdir on s_client, > it's using (whatever is in) the default

RE: Enabling Logging in OpenSSL

2012-09-10 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar >Sent: Monday, 10 September, 2012 01:56 Answering -users only, this isn't a -dev question. >I have a challenge befor me where i have to debug a SSL handshake >failure. Client has OpenSSL libraries and Server is Microsoft >SQL Serv