How to add specific OID to EKU (extended key usage)

Hi, I want to add a specific OID to the extended key usage. How do I need to change the openssl.conf file for this? -- Somdas Bandyopadhyay M.Tech(CSE) - Second year IIT Bombay Mob no- 09920915176

RE: FIPS Capable Ciphers List

So the Postfix team finds SMTP servers that support EXPORT and nothing stronger? Wow, I am very surprised. For those who don't know, "export strength" crypto was a creation of the US government in the early 1990's, and the rules were removed in 2000. It's been more than a dozen years, it's tim

Re: FIPS Capable Ciphers List

On Tue, May 14, 2013 at 09:42:08PM -0500, Salz, Rich wrote: > Viktor gave some excellent advice. I'd tweak it by removing > 'export' as something to support. And perhaps use weak, good, > strong -- whatever, keep the number of choices very small. I'd > suggest to not use "default" since folks wi

RE: FIPS Capable Ciphers List

Viktor gave some excellent advice. I'd tweak it by removing 'export' as something to support. And perhaps use weak, good, strong -- whatever, keep the number of choices very small. I'd suggest to not use "default" since folks will get upset if it changes. They are more accepting if the definit

Re: FIPS Capable Ciphers List

On Wed, May 15, 2013 at 12:58:37AM +, Santhosh Kokala wrote: > I have a use case where an admin can configure the Ciphers from > UI. I have this code in the backend that tries to set the cipher > > meth = TLSv1_client_method(); > > ctx = SSL_CTX_new(meth); > > sslretval = SSL_CT

FIPS Capable Ciphers List

Hi All, I have a use case where an admin can configure the Ciphers from UI. I have this code in the backend that tries to set the cipher meth = TLSv1_client_method(); ctx = SSL_CTX_new(meth); sslretval = SSL_CTX_set_cipher_list(ctx, ts_str(cipher)); When a user sets a cipher such a

RE: Similar issuer dn mod_ssl client authentication issue

>From: owner-openssl-us...@openssl.org On Behalf Of Michele Mase' >Sent: Monday, 13 May, 2013 05:33 >I'm testing a client authentication using [Apache with 1.0.0-fips] >I have 2 CA's x509 pem files, bundled. >CA1 signs client1 certificate files >CA2 signs client2 certificate files >I should use

Re: Question regarding openssl program to compute the hashes and finger-prints.

On 5/14/2013 8:33 AM, Khadija Amin (khamin) wrote: Hello All , I have a question regarding c_rehash utility used to create symbolic links to files named by the hash values. I understand that c_rehash calls openssl to compute the hash by invoking the following command : $OPENSSL x509 -hash -fin

AW: encrypting video files AES-ECB

$ openssl 'aes-128-ecb' -pass 'pass:testpass' < x.pl > x2 $ openssl 'aes-128-ecb' -pass 'pass:testpass' -d < x2 > x3 $ diff x.pl x3 $ -- Deutsche Telekom AG Seamless ICT Security Infrastructure & Management im Auftrag T-Systems International GmbH Dipl. Inf Alexander Elgert Langwadener Strasse

RE: encrypting video files AES-ECB

You would need to tell everyone your exact command line (with key obfuscated, etc), but I suspect you are not specifying an [consistent] IV to the encrypt and decrypt commands? Carl From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on be

encrypting video files AES-ECB

question: trying to encrypt a uncompressed video file(nv12) with AES128-ECB using openssl utility. but once i decrypt the encrypted video file with same key, i'm not able to playback the video file. ami missing some thing or is there a known limitation? Thanks, Raghu