Re: State of EBCDIC support in OpenSSL

2014-05-06 Thread Christian Koenning
Thanks! Christian On 02/05/2014 16:43, "Richard Könning" wrote: >Hello, >in the request tracker under item #843 there are patches for 0.9.7c >(created and tested on Fujitsu BS2000) and 0.9.7j (updated by Jeremy >Grieshop for z/OS). >Because i saw no actions to incorporate the patches into the of

CRL & default_crl_days

2014-05-06 Thread Gregory Sloop
So, I'm working with an EAP-TLS system running under freeradius. I've setup things to use a CRL [not OSCP] to revoke certificates and all works well. However, the parameter default_crl_days=XXX puzzles me. Through trial and error [mostly error] I know that if I don't regenerate the CTL every def

Re: [1.1.0-dev] AES-GCM on command line: "bad decrypt" but seems to work

2014-05-06 Thread Dr. Stephen Henson
On Tue, May 06, 2014, Jeremy Gray wrote: > > I'm seemingly able to enc and dec from the command line using -aes-128-gcm, > but get a "bad decrypt" error (despite being able to recover the plain > text). > It's a bug: you shouldn't be able to use GCM in the "enc" command as it doesn't correctly

[1.1.0-dev] AES-GCM on command line: "bad decrypt" but seems to work

2014-05-06 Thread Jeremy Gray
Hi, I'm seemingly able to enc and dec from the command line using -aes-128-gcm, but get a "bad decrypt" error (despite being able to recover the plain text). Is getting this error message the expected behavior? The only thing I've found via google is a couple years old, and not really relevant (

Re: [1.0.1] Nested CMS structures

2014-05-06 Thread Dr. Stephen Henson
On Sat, May 03, 2014, Kevin Le Gouguec wrote: > Thank you for your input! > > > > No; I???d be concerned if it didn???t show up that way ??? that???s how CMS > > is defined > > to work. > > Just took another look at RFC 5652 and indeed, EncapsulatedContentInfo is a > SEQUENCE of { ContentType