FIPS capable openssl build failed in Mac OSX

2013-04-10 Thread Raghav Varadan
Hello All, I having some problem building FIPS capable openssl static library in OS X. My System configuration: Darwin 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan 6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64 fipscanister build is successful. Following are steps I did: 1)

SSL_CTX_add_extra_chain_cert does not work, but X509_STORE_add_cert works

2013-04-10 Thread Felipe Blauth
Hey folks. I have an OpenSSL TCP server that is under modifications, so I need to change my code. The SSL setup is simple, and I'll spare you from that. The point is that I can't use SSL_CTX_load_verify_locations anymore, because now I load stuff from a database. So I was happy adding the certif

Canceling RSA key generation

2013-04-10 Thread Ken Goldman
(The answer to this seems to be 'no', but the web posts were 5-10 years old. Perhaps there's a better answer today.) I'm using openssl to emulate a TPM. The hardware device has an abort feature, where the TPM driver can cancel a long command. The driver wants to distinguish between a long c

Re: Stream file encryption (syslog-ng logs to openssl for live encryption)

2013-04-10 Thread Jakob Bohm
On 4/10/2013 12:53 PM, dav74 wrote: Hi, I am looking for a solution for "live" encryption of data flow to a file. Actually i am able to encrypt a file using : openssl smime -binary -encrypt -aes256 -in proxy.log -out proxy.log.enc certificate-file.crt While in theory the smime/cms/pkcs#7 encry

Stream file encryption (syslog-ng logs to openssl for live encryption)

2013-04-10 Thread dav74
Hi, I am looking for a solution for "live" encryption of data flow to a file. Actually i am able to encrypt a file using : openssl smime -binary -encrypt -aes256 -in proxy.log -out proxy.log.enc certificate-file.crt What i want to do is live crypt all the data coming to proxy.log file. syslog-n