Re: [openssl-users] Dynamic link openssl with Visual Studio

2015-03-12 Thread Thomas J. Hruska
On 3/12/2015 9:34 AM, Ken Goldman wrote: On 3/11/2015 1:39 PM, Serj Rakitov wrote: 11.03.2015, 20:22, "Ken Goldman" : I would like to use the Shining Light precompiled openssl binaries within Visual Studio. I think you must simply build static or dynamic libraries(as you need) with Visual C+

[openssl-users] HMAC-SHA1-96 in FIPS

2015-03-12 Thread Philip Bellino
Hello, I am using the Openssl-1.0.2 with openssl-fips-2.0.9 and have a question. In the FIPS-198-1 document, Chapter 5 discusses truncation with MACs. http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf I believe HMAC-SHA1-96 falls under this category, but I do not see its s

Re: [openssl-users] Dynamic link openssl with Visual Studio

2015-03-12 Thread Ken Goldman
On 3/11/2015 1:39 PM, Serj Rakitov wrote: 11.03.2015, 20:22, "Ken Goldman" : I would like to use the Shining Light precompiled openssl binaries within Visual Studio. I think you must simply build static or dynamic libraries(as you need) with Visual C++ yourself. And they will work. Shinin

Re: [openssl-users] How to make a rehandshake(renegotiation)?

2015-03-12 Thread Serj Rakitov
Hi, I managed to do a renegotiation. My mistake was that I start renegotiation when not all data were received or sended. Probably there was a situation when not all packets(records) were processed and i got a error: unexpected record or bad length. Really only one function SSL_renegotiate an

Re: [openssl-users] FIPS mode uses /dev/urandom ?

2015-03-12 Thread John Foley
You don't even need to modify e_os.h. You can just pass in a new value for DEVRANDOM using the gcc -D compiler option. For instance, maybe you have a hardware device mapped to a Linux device file called /dev/entropy1. You can override DEVRANDOM to use this device without modifying any OpenSSL co

Re: [openssl-users] FIPS mode uses /dev/urandom ?

2015-03-12 Thread Alberto Roman Linacero
Well... I'm just trying, for the test, to do something like: debian:~/openssl# strace -xe trace=file,read,write,close /usr/local/ssl/bin/openssl rand 10 [...] open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 3 read(3, "\xa9\xea\xf3\x6e\x08\x14\xe7\xeb\x11\x9c\x72\x64\x69\x54\x0d\x96\x43\x34\x

[openssl-users] FIPS_module_version_text()

2015-03-12 Thread Jason Schultz
Is this function available to call in OpenSSL 1.0.1? I'm trying to call it from my application running a FIPS capable version of OpenSSL (everything else works, turning FIPS on, etc), but I include fips.h but I get a compile error saying the function was not declared. I did find something in the

Re: [openssl-users] FIPS: Common method executed in case of error

2015-03-12 Thread jonetsu
> From: "Dr. Stephen Henson" > Date: 03/10/15 20:04 > I mean you could add a callback to FIPS_mode_set using > FIPS_post_set_callback: see the fips_test_suite.c application > for an example. The supplied callback is called during each > POST, continuous RNG and pairwise consistency checks. Th