RE: Does OpenSSL 0.9.7 support SHA256 Digest Algorithm

2012-11-20 Thread Dave Thompson
> From: Wu, Hong-Tao (Aaron, HPSW-R&D-SH) [mailto:hongtao...@hp.com] > Sent: Tuesday, 20 November, 2012 22:05 > To: openssl-users@openssl.org > Cc: dthomp...@prinpay.com > Subject: RE: Does OpenSSL 0.9.7 support SHA256 Digest Algorithm > > Thanks a lot, Dave. > > So it means that SHA256 is only

RE: This is one for the Pros: cert is not privkey

2012-11-20 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Peter Parker >Sent: Tuesday, 20 November, 2012 20:59 >Subject: This is one for the Pros Not really. This is pretty basic. >I've been trying to generate a public/private key pair after >generating the certificates, but OpenSSL

RE: Does OpenSSL 0.9.7 support SHA256 Digest Algorithm

2012-11-20 Thread
Thanks a lot, Dave. So it means that SHA256 is only technically supported from 0.9.7h. If I am using 0.9.7d, it is not included, right? Best Regards, Aaron -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent

Unable to compile fips_hmac.c file

2012-11-20 Thread Santhosh Kokala
I am trying to compile tips_hmac.c to verify the FIPS build. But I see errors. Can you please let me know what needs to be done to fix this? Errors: gcc -c fips_hmac.c -I/usr/local/ssl/include FIPSLD_CC=gcc /usr/local/ssl/fips-2.0/bin/fipsld -o fips_hmac fips_hmac.o /usr/local/ssl/fips-2.0/lib/

RE: Does OpenSSL 0.9.7 support SHA256 Digest Algorithm

2012-11-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Wu, Hong-Tao (Aaron, HPSW-R&D-SH) > Sent: Tuesday, 20 November, 2012 10:42 > In our product, we are still using OpenSSL 0.9.7d (on Windows > platform) for certificate validation. Recently we suffered an > issue about certificates based SHA256,

Re: Undefined reference to 'FIPS_text_start()'

2012-11-20 Thread Jeffrey Walton
On Tue, Nov 20, 2012 at 6:16 PM, Santhosh Kokala wrote: > Hi, > I am trying to build an application with the FIPS Object module. I followed > the build instructions mentioned in FIPS User Guide 2.0. > > FIPS Object Module: > > ./config > Make > make install > > Open SSL: > > ./config fips > make d

Undefined reference to 'FIPS_text_start()'

2012-11-20 Thread Santhosh Kokala
Hi, I am trying to build an application with the FIPS Object module. I followed the build instructions mentioned in FIPS User Guide 2.0. FIPS Object Module: ./config Make make install Open SSL: ./config fips make depend Make My Application: export FIPSLD_CC=g++ export CC=gcc export CXX=/usr/

RE: Newsreader (was: Question about exporting user certificate files to .pfx)

2012-11-20 Thread John A. Wallace
So can you get that group of messages sent to a newsreader? > -Original Message- > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Jeffrey Walton > Sent: Tuesday, November 20, 2012 11:38 AM > To: openssl-users@openssl.org > Cc: st...@openssl.

Newsreader (was: Question about exporting user certificate files to .pfx)

2012-11-20 Thread Jeffrey Walton
On Tue, Nov 20, 2012 at 11:56 AM, wrote: > it would be swell if I could get my email address removed from the list > without removing my subscription too. This way I could just use my > newsreader to get the messages without having my email box cluttered every > day with this high-volume list.

Does OpenSSL 0.9.7 support SHA256 Digest Algorithm

2012-11-20 Thread
Hi All, In our product, we are still using OpenSSL 0.9.7d (on Windows platform) for certificate validation. Recently we suffered an issue about certificates based SHA256, and the following error is thrown: ldap_bind: Can't contact LDAP server (-1) additional info: error:0D0890A1:asn1 en

Re: Regrading reducing the size of libcrypto.a

2012-11-20 Thread Jakob Bohm
On 11/20/2012 4:21 PM, jeetendra gangele wrote: No, it gives me .a file then i convert it to .so file. Since it was saying .so not supported yet for arm-linux evn in configure script. i stripped .so file and i could reduce it to 2.5 MB but still its a big one only. Strange, why would it say s

Re: Regrading reducing the size of libcrypto.a

2012-11-20 Thread jeetendra gangele
No, it gives me .a file then i convert it to .so file. Since it was saying .so not supported yet for arm-linux evn in configure script. i stripped .so file and i could reduce it to 2.5 MB but still its a big one only. I am compiling with only few ciphers algorithms like sha256,aes,EC-DH and EC-DSA

Re: Regrading reducing the size of libcrypto.a

2012-11-20 Thread Jakob Bohm
On 11/20/2012 3:53 PM, John Doe wrote: From: jeetendra gangele Please guide me How can i minimize the size since I need only selected algorithms. Can one strip a .a the file...? Mine goes from 3.3M down to 1.8M. But I have no idea if it will still be working... Properly stripping an .a fil

Re: Regrading reducing the size of libcrypto.a

2012-11-20 Thread Jakob Bohm
On 11/20/2012 3:40 PM, jeetendra gangele wrote: Hi, I need to use only AES,SHA-2,EC-DH,EC-DSA. I configure for only those ciphertext and compile the code still I am getting 3.3MB library. How can I minimize it?. When I build with all the ciphertext enable that time also I am getting 3.3 MB size.

Re: Regrading reducing the size of libcrypto.a

2012-11-20 Thread John Doe
From: jeetendra gangele > Please guide me How can i minimize the size since I need only selected > algorithms. Can one strip a .a the file...? Mine goes from 3.3M down to 1.8M. But I have no idea if it will still be working... JD _

Re: EVP Padding size

2012-11-20 Thread coderl
Yes I passed the correct size into the functions. For encryption functions I use "EVP_EncryptUpdate" and "EVP_EncryptFinal_ex". -- View this message in context: http://openssl.6102.n7.nabble.com/EVP-Padding-size-tp42413p42417.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: EVP Padding size

2012-11-20 Thread Jakob Bohm
On 11/20/2012 11:38 AM, coderl wrote: Hi, How can I set the EVP padding size to 32byte instead of 16? I currently have the problem, using aes 256bit, that if I encrypt a 20 or 30 size block it will only encrypt 16bytes instead of the whole part. That is not what the padding does. Padding

EVP Padding size

2012-11-20 Thread coderl
Hi, How can I set the EVP padding size to 32byte instead of 16? I currently have the problem, using aes 256bit, that if I encrypt a 20 or 30 size block it will only encrypt 16bytes instead of the whole part. Thanks. -- View this message in context: http://openssl.6102.n7.nabble.com/EVP-Padd

Re: add hash signature as part of the stream on which this hash is based on

2012-11-20 Thread Michael Zintakis
My guess is that if you could write a hash working the way you say, it would be vulnerable to all sorts of cryptographic attacks: give up! I have indeed given up and found other ways to incorporate the hash while verifying the stream integrity.