RE: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Jeremy Farrell
It might be better if you specify how you set up your environment, what versions of perl and nasm you used, and what sequence of commands you used. I usually do a cut-down static build in an environment based on the Windows Driver Kit, and I've built 1.0.1e using nasm without problems. I just tr

Re: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Phillip Hellewell
On Mon, May 20, 2013 at 1:12 PM, Phillip Hellewell wrote: > Should I try to patch it myself? FYI, the linker error is occurring because nasm is failing with a ton of errors on x86_64-g2m.asm, I think maybe because it is creating the wrong type of asm. So I tried masm instead, and it is working s

RE: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Jeremy Farrell
Jakob Bohm gave a complete answer a few hours after your original question, see http://openssl.6102.n7.nabble.com/Question-regarding-openssl-program-to-compute-the-hashes-and-finger-prints-tt45095.html#none From: Khadija Amin (khamin) [mailto:kha...@cisco.com] Sent: Monday, May 20, 2013 9:

Re: How to create CSR with SN attribute

2013-05-20 Thread Per Edlund
Thanks On 20 maj 2013, at 18:13, "Salz, Rich" wrote: >> Is there a way with openssl to create a key/csr with SN attribute? > >> As I can see, only CN, O, OU etc are available. If not with openssl, does >> anyone know another tool to create this with? > > You can do it. The 'trick' is that

Re: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Stan Joyner
Per this web page the hash algorithm did change if I understand your question correctly. http://www.openssl.org/docs/apps/x509.html I think c_rehash uses -subject_hash as the option. These options allow you to use the old hash from the command line. Don't know how to get c_rehash to do this. *-s

Re: Question regarding openssl program to compute the hashes and finger-prints.

2013-05-20 Thread Khadija Amin (khamin)
Re-trying.. From: Microsoft Office User mailto:kha...@cisco.com>> Date: Mon, 13 May 2013 23:34:56 -0700 To: mailto:openssl-users@openssl.org>> Subject: Question regarding openssl program to compute the hashes and finger-prints. Hello All , I have a question regarding c_rehash utility used to c

Re: Build error with 1.0.1e on Win64 with VC++ 2010 and nasm

2013-05-20 Thread Phillip Hellewell
On Thu, May 16, 2013 at 5:27 PM, Phillip Hellewell wrote: > But do I have to sacrifice performance to be able to upgrade to 1.0.1? Anyone? Can I be the only one in the whole world who wants to build openssl on Windows 64-bit with optimized assembly routines? Should I try to patch it myself? Sh

FIPS 2.0.2 and DSA self test

2013-05-20 Thread no_spam_98
I'm wondering why the FIPS_selftest_dsa() function in fips_dsa_selftest.c uses EVP_sha384 with a 2048-bit DSA key during the fips_pkey_signature_test()? If I'm reading the NIST standards (FIPS 186-3 and SP 800-57 Part 1) correctly, it looks like it is more usual for 2048-bit DSA keys to be paire

Re: How to create CSR with SN attribute

2013-05-20 Thread Viktor Dukhovni
On Mon, May 20, 2013 at 05:58:43PM +0200, Per Edlund wrote: > Is there a way with openssl to create a key/csr with SN attribute? [dn_req] surname = Smith Likewise with the "-subj" option use: -subj "/surname=Smith". or -subj "/SN=Smith". > As I can see, only CN, O, OU e

RE: How to create CSR with SN attribute

2013-05-20 Thread Salz, Rich
> Is there a way with openssl to create a key/csr with SN attribute? > As I can see, only CN, O, OU etc are available. If not with openssl, does > anyone know another tool to create this with? You can do it. The 'trick' is that you have to have a default value, so put "SN=unknown" in the globa

How to create CSR with SN attribute

2013-05-20 Thread Per Edlund
Hi! Is there a way with openssl to create a key/csr with SN attribute? As I can see, only CN, O, OU etc are available. If not with openssl, does anyone know another tool to create this with? Kind regards /Per signature.asc Description: Message signed with OpenPGP using GPGMail

AES using cryptodev driver

2013-05-20 Thread Gnanasekar R
Hi, Has anyone tried using cryptodev driver and seen it to be better than AES computation in OpenSSL libs. I instrumented the time using evp_test app and see that AES computation using cryptodev is ~1.6ms slower compared to running the app without cryptodev driver, in my system. So I would like to

Re: Certificate format conversion APIs

2013-05-20 Thread Saurabh Pandya
your stuff is here.. http://www.openssl.org/docs/crypto/pem.html happy reading ! On Mon, May 20, 2013 at 12:20 PM, Rahul Godbole wrote: > Hi OpenSSL Users > > Can someone tell me API using which I can convert certificates from one > format to another? I know that the openssl command can be use