Re: fipscanister.o: file not recognized

On 09/13/2012 06:08 PM, TJ wrote: > On 7 September 2012 23:54, Steve Marquess > wrote: >> On 09/07/2012 12:24 AM, TJ wrote: >>> I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). >>> >>> ./Configure no-asm no-hw linux-generic32 >>> make -j1 -C openssl-fips >> >> Might as well s

Re: fipscanister.o: file not recognized

On Fri, Sep 14, 2012, TJ wrote: > On 7 September 2012 23:54, Steve Marquess > wrote: > > On 09/07/2012 12:24 AM, TJ wrote: > >> I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). > >> > >> ./Configure no-asm no-hw linux-generic32 > >> make -j1 -C openssl-fips > > > > Might as

Re: fipscanister.o: file not recognized

On 7 September 2012 23:54, Steve Marquess wrote: > On 09/07/2012 12:24 AM, TJ wrote: >> I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). >> >> ./Configure no-asm no-hw linux-generic32 >> make -j1 -C openssl-fips > > Might as well stop right there as the resulting FIPS module

Re: how to check the whether openssl which is built for has the all chiper suite required

Assuming you installed the Android NDK, you must have a folder called samples somewhere with the native examples 'hello-jni'. Just look at how the code works, and simply create a wrapper to wrap around the OpenSSL functions. On Thu, Sep 13, 2012 at 7:54 PM, farmdve data.bg wrote: > I see you reso

Re: how to check the whether openssl which is built for has the all chiper suite required

I see you resolved the missing libz library errors. Well, it get's tricky now. You must create an Android project, create a JNI library which will wrap around the real code, since Java cannot directly access native functions. And use the emulator to test the code. On Thu, Sep 13, 2012 at 7:43 PM,

how to check the whether openssl which is built for has the all chiper suite required

Hi, I have added the AES-ECC-CCM chiper suite openssl downloaded from this site https://github.com/aluvalassuman/OpenSSL1.0.1cForAndroid . after I ran androi-ndk build and I got the 4 shared libraries *libssl.so,libcrypto.so, openssl,ssltest* . now I have to check the chiper suite which I have

RE: certificate validation issues with openssl 1.0.0 and expired certificates in cafile

I suppose that's a workaround, but doesn't address the root cause. Windows can quite happily handle expired certificates still hanging out in trusted stores; I see this all the time as root updates occur and renewed certificates are installed. It seems that a change in OpenSSL broke the previo

RE: certificate validation issues with openssl 1.0.0 and expired certificates in cafile

Would it make sense to delete the expired certificate from the Windows store? Duplicate expired/non expired CA certificates sounds to me like a problem waiting to happen. Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ashok C Sent: Thursday,

RE: openssl on a home LAN

It's true. I think "you are a Web developer and need to generate certificates for your Web site" was mentioned. Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Gayathri Sundar Sent: Thursday, September 13, 2012 6:01 AM To: openssl-users@o

Re: openssl on a home LAN

Charles, I think he wanted to use SSL for data transfer between 2 computers. What you have used is the PKI infrastructure. Infact even for SSL there are sample client and server codes in the examples folder, but that does not hook into your application. Thanks --Gayathri On Wed, Sep 12, 2012 at

Re: Memory issues with ssl handshake

On 12.09.2012 16:58, Thomas Eckert wrote: > Hi, > > Valgrind gives me a *lot* of messages like this [snip] > Does anyone have some tips for me ? Have you seen the FAQ entry regarding valgrind: http://www.openssl.org/support/faq.html#PROG14 ? Regards, Dominik _

Re: Memory issues with ssl handshake

Hi Michel, Thanks for trying to help, I really appreciate it :-) "Does your app setup and free a context each time a client is connecting ?" The context is created only when a client requests a HTTPS connection and is destroyed together with the SSL session once the connection goes down. It i

RE: openssl on a home LAN

Hi John, As an aside to what Gayathri said, I'm not a developer, but I have used OpenSSL to create a complete PKI universe for testing. Using the pre-compiled, downloadable installer I've been able to create Root certificates, Intermediate CA certificates, and end-entity certificates of all sha

Re: build openssl for android

Hi, adding more to my previous problem reference post : That library is there in the ndk floder /home/indu/Android/android-ndk-r8b/platforms/android-9/arch-x86/usr/lib/libz.a /home/indu/Android/android-ndk-r8b/platforms/android-9/arch-x86/usr/lib/libz.so /home/indu/Android/android-ndk-r8b//platfo

Re: Memory issues with ssl handshake

Hi again Thomas, Do you really need to free your context each time you free your TLS session ? I believe it is not needed and at least not usual. If you need several *DIFFERENT* contexts, implying different TLS configurations/setup, wich, I think, is not so common, you can keep them 'alive' du

Re: Memory issues with ssl handshake

Hi Thomas, I don't know if it makes a real difference concerning memory leaks, but I would have freed the TLS session *BEFORE* freing the context : SSL_free(ssl); ... SSL_CTX_free(ssl->ctx); Does your app setup and free a context each time a client is connecting ? Le 12/09/2012 16:58, T

Re: certificate validation issues with openssl 1.0.0 and expired certificates in cafile

Sending again as the previous email did not appear in list. Is there some problem with the mailing list? -- Ashok On Wed, Sep 12, 2012 at 2:59 PM, Ashok C wrote: > Hi, > > I don't think this question was answered. Could you please reply? > > -- > Ashok > > > On Tue, Jul 31, 2012 at 11:13 PM, Kl