Re: End of the line for OpenSSL Fips?

2013-07-17 Thread Steve Marquess
On 07/16/2013 08:10 PM, Nou Dadoun wrote: > Since I hadn't looked for a while, I thought that I'd see where the > current Openssl FIPS work stood and found this: > http://www.opensslfoundation.com/fips/ig95.html > > Surprised that I hadn't heard about this previously but if I'm > reading it corre

SSL_CTX_set_psk_client_callback

2013-07-17 Thread Leo Leo
Hi all, I haven't understood exactly the reason of this callback and I'd like to know if it's for what I need. The callback is related with key exchange. If this callback is not set, the openssl uses the private key stored into ssl or ctx structure for decrypting the session key exchanged.

Re: OSCP request

2013-07-17 Thread Dr. Stephen Henson
On Wed, Jul 17, 2013, redpath wrote: > Got the OCSP Server to respond to the test OCSP request program nicely. > *Of course one more question.* > > I simply had to setup the infrastructure for the OSCP server excerpted > below. > to create the signing key and directories. > > mkdir demoCA > mkd

OpenSSL and Network namespace

2013-07-17 Thread herat gandhi
Hello all, I am developing an application using OpenSSL library. I am new to OpenSSL library. My application was working correctly until I tested it within network namespace. My application hangs at SSL_Connect. I am using sockets in the blocking mode. I read somewhere that I should use

Re: error "unable to load PKCS7 object... wrong tag"

2013-07-17 Thread Dr. Stephen Henson
On Wed, Jul 17, 2013, likejiujitsu wrote: > > Running > > openssl pkcs7 -inform DER -in mycert.spc -print_certs -out mycert.crt > > gives error > > unable to load PKCS7 object 4372:error:0D0680A8:asn1 encoding > routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1319: > 4372:error:0D

error "unable to load PKCS7 object... wrong tag"

2013-07-17 Thread likejiujitsu
Running openssl pkcs7 -inform DER -in mycert.spc -print_certs -out mycert.crt gives error unable to load PKCS7 object 4372:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1319: 4372:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 erro

Re: OSCP request

2013-07-17 Thread redpath
Got the OCSP Server to respond to the test OCSP request program nicely. *Of course one more question.* I simply had to setup the infrastructure for the OSCP server excerpted below. to create the signing key and directories. mkdir demoCA mkdir demoCA/newcerts mkdir demoCA/private chmod demoCA tou