Re: [openssl-users] How to construct certificate chain

2015-02-09 Thread Jerry OELoo
I am using 1.0.2 stable release and add below code but it still get Equifax but browser get GeoTrust Global CA X509_VERIFY_PARAM *param; param = X509_VERIFY_PARAM_new(); X509_VERIFY_PARAM_set_flags(param, X509_V_FLAG_TRUSTED_FIRST); SSL_CTX_set1_param(ctx, param); X509_VERIFY_P

Re: [openssl-users] AES-GCM failing from Command Line Interface

2015-02-09 Thread Dr. Stephen Henson
On Mon, Feb 09, 2015, Sec_Aficionado wrote: > Hello, > > I am trying to encrypt a short message using AES-256-GCM as mentioned in the > subject. > > My command is: > openssl enc -aes-256-gcm -p -in payload.txt -out enc.txt > > I get prompted for password as expected. > > The encryption goes w

Re: [openssl-users] The evolution of the 'master' branch

2015-02-09 Thread Jakob Bohm
On 07/02/2015 12:12, Michael Felt wrote: From someone who does NOT understand the in's and out's of what people (developers and users) have been using openSSL for. My first reaction is: have developers been using openSSL, or has it gone to abusing it? For the sake of argument - let's say just us

[openssl-users] AES-GCM failing from Command Line Interface

2015-02-09 Thread Sec_Aficionado
Hello, I am trying to encrypt a short message using AES-256-GCM as mentioned in the subject. My command is: openssl enc -aes-256-gcm -p -in payload.txt -out enc.txt I get prompted for password as expected. The encryption goes well, and then I proceed to decrypt using: openssl enc -d -aes-256-g

Re: [openssl-users] How to load local certificate folder on windows

2015-02-09 Thread Jakob Bohm
On 06/02/2015 20:19, Michael Wojcik wrote: From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Dave Thompson Sent: Friday, February 06, 2015 12:04 * Windows beginning AIR XP or maybe NT does support links on NTFS, but they're not easy to use and not well known, and I thin

Re: [openssl-users] DTLS Handshake issue (openssl-1.0.1e-dtls-ecc-ext.patch) leads to process crash

2015-02-09 Thread Matt Caswell
On 09/02/15 20:17, sanchit arora wrote: > Bug report > > OS: Linux Which distro? > > OpenSSL Version: 1.0.1e-30 That is not an OpenSSL version - that is an OS vendor specific version based on OpenSSL 1.0.1e > While doing DTLS testing with openssl-1.0.1e-30 Version and patches > for RT3327,

[openssl-users] DTLS Handshake issue (openssl-1.0.1e-dtls-ecc-ext.patch) leads to process crash

2015-02-09 Thread sanchit arora
Bug report OS: Linux OpenSSL Version: 1.0.1e-30 While doing DTLS testing with openssl-1.0.1e-30 Version and patches for RT3327, RT3470 and RT3483 on top of that, we are facing an issue where our process is crashing during the duration run of 24 hours. Use Case: *There are 125 DTLS Serv

Re: [openssl-users] Means to update read bio only

2015-02-09 Thread Susan Hinrichs
On 2/7/2015 8:33 AM, Matt Caswell wrote: On 06/02/15 21:46, Matt Caswell wrote: On 06/02/15 15:48, Susan Hinrichs wrote: Hello, In Apache Traffic Server we are primarily using SSL_accept and SSL_read/SSL_write with file descriptor bios. But during the handshake, we need to feed in our own

[openssl-users] ui_openssl.c is assuming that current console is ECHO(termios) enabled

2015-02-09 Thread Khang Nguyen
Hi, OpenSSL, to be specific, ui_openssl.c, in my opinion, is assuming that the current console before "Enter PEM pass phrase" prompt being carried out is set with ECHO on (termios). After using that prompt to get a pass phrase, applications using stdin with ECHO off such as in the case of pseudo-