fipsld/incore from the command line

2014-03-06 Thread Jeffrey Walton
I'm probably missing something really obvious here I've got a couple of non-makefile based scripts to build my program. The program is a mix of C and C++, so the FIPSLD_CC/fipsld does not work due to c++ name mangling. The scripts have a couple of variables: FIPS_PREMAIN=`find $OPENSSLDIR -i

Re: stunnel 5.00 released

2014-03-06 Thread Kyle Hamilton
Why do you not have sha-256 values for the Windows installer? Or a detached GPG signature for it? -Kyle H On Wed, Mar 5, 2014 at 4:09 PM, Michal Trojnara wrote: > Dear Users, > > I have released version 5.00 of stunnel. > > The ChangeLog entry: > > stunnel 5.00 disables some features previousl

Re: FIPS build of static libcrypto for a shard object

2014-03-06 Thread abhispra
Thank you for the response Dr. Steven. I would try out the suggested steps. Dr. Stephen Henson wrote > On Thu, Mar 06, 2014, abhispra wrote: > >> >> 1> When fipsld is trying to load the shared object being created, why are >> the debug messages printed passed to gcc. How do i overcome this? >

Re: FIPS build of static libcrypto for a shard object

2014-03-06 Thread Dr. Stephen Henson
On Thu, Mar 06, 2014, abhispra wrote: > > 1> When fipsld is trying to load the shared object being created, why are > the debug messages printed passed to gcc. How do i overcome this? The way native builds embed the signature is to link twice. The first time loads the DSO which should just print

FIPS build of static libcrypto for a shard object

2014-03-06 Thread abhispra
Hi All, I am trying to build a shared object which would use FIPS cannister with licrypto static library. Platform - Linux (SUSE) Architecture - x86_64 These are the steps that I did openssl-fips-2.0.5 1> ./config fipscanisterbuild 2> make 3> make install The above steps result in 1> /usr/loc

Re: AES CCM in DTLS v1.2

2014-03-06 Thread Fredrik Jansson
Thanks, guess I will have to wait for 1.0.2. My aim is still the same though, get rid of the padding required by SHA. As I understand it GCM/GMAC would be a good fit too (?). Will I be able to key it using PSK? Br Fredrik On Tue, Mar 4, 2014 at 10:05 PM, Dr. Stephen Henson wrote: > On Tue, Mar

Re: How to get 'pre master secret' of a tls session?

2014-03-06 Thread Anil Kumar K K
DEBUG macro can be enabled to log this : TLS_DEBUG It will write the pre master key to standard output. This is where it is logging : tls1_setup_key_block Thanks On Thu, Mar 6, 2014 at 3:32 PM, Prasun Bheri wrote: > Hi Group, > for debugging purpose, I would like to log 'pre master secret' of

How to get 'pre master secret' of a tls session?

2014-03-06 Thread Prasun Bheri
Hi Group, for debugging purpose, I would like to log 'pre master secret' of a TLS session. Is there an api in OpenSSL library that fetches this key for a given session. Thanks & Regards Prasun

stunnel 5.00 released

2014-03-06 Thread Michal Trojnara
Dear Users, I have released version 5.00 of stunnel. The ChangeLog entry: stunnel 5.00 disables some features previously enabled by default. Users should review whether the new defaults are appropriate for their particular deployments. Packages maintainers may consider prepending the old defaul

Openssl 1.01f installs broken headers using VC++ 2013

2014-03-06 Thread Robin Rowe
Trying to build Qt with openssl. Built openssl with VC++ 2013 without incident. However, the header files don't look right. The file openssl/include/ssl.h contains one line: ../../ssl/ssl.h This doesn't look like C++ to me. I see no reason it should compile. All the openssl include files seem t