Problems with compiling and linking fips_premain.c and fingerprint mismatch

2013-05-27 Thread Sairam Rangaswamy -X (sairanga - Aricent Technologies at Cisco)
Hi, We are working on porting FIPS compliant Openssl to a vxworks (5.4) based platform, running on MPC85xx cpu family. I compiled the FOM (version 3.0) which includes the complete fips modules (fipscanister.ofips_premain.o). This is a statically linked library. So, the libcrypto.a and libss.

Re: SSL_VERIFY_PEER and self-signed certificates

2013-05-27 Thread Brice André
Hello Dave, Thank you for your answer. You are right, I am using a self-signed certificate for use by my server. In fact, I do not perform client authentication in my application : only the server shall be authentified by ssl. The client is authentified by another mechanism. Here are how I gener

RE: server certificate verification fails

2013-05-27 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Hazrat Shah >Sent: Friday, 24 May, 2013 19:48 >I add the server certificate in PEM format to the SSL store using [] >X509_STORE_add_cert(SSL_CTX_get_cert_store(pctx), x509cert); I assume you mean to the truststore of the (or a) client, since th

RE: SSL_VERIFY_PEER and self-signed certificates

2013-05-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Brice André > Sent: Monday, 27 May, 2013 14:48 > I am writing a client-server application I plan to > generate my self-signed certificate and to embed it in my client. > To be clear, a self-signed cert for (used by) the server. A self-signed c

SSL_VERIFY_PEER and self-signed certificates

2013-05-27 Thread Brice André
Hello everyone, I am writing a client-server application in C++ with open-ssl to secure the connection. At this stage I successfully implemented all communication between my server and client with ssl encryption, but I am still missing a feature : checking the certificate of my server. As I am u

Re: Pipe command not working

2013-05-27 Thread Jakob Bohm
On 5/24/2013 8:58 PM, Dave Thompson wrote: *From:* owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] *On Behalf Of *Salz, Rich *Sent:* Friday, 24 May, 2013 14:05 *To:* openssl-user

SUIT-B implementation

2013-05-27 Thread mehroz
Hi all, i am very new to openssl, or you can say not a user of openssl. I am facing a scenario where SSL encryption is required at TLS layers for security purposes. This belongs to VoIP systems where signalling has to be encrypted. I have a requirement of doing all encryption in SUIT-B standard.