The 'make depend' regenerates the dependencies for the makefiles. The
dependencies will change depending on the configuration options you've
passed to OpenSSL. If you're new to using GNU make, here's a decent
explanation:
http://make.mad-scientist.net/papers/advanced-auto-dependency-generatio
All;
I'm an administrator/engineer responsible for compiling Apache with OpenSSL
supporting FIPS mode. I've got a good process down that generally works.
However, I am looking for a little help on some details because I am not a
developer and am not about digging through the source code to figu
It's me again,
:-)
If you have to store binary data without a way to get the correct length
later, you should instead endode it in a 'textual' form before storage :
base64 or hexa.
Is it what you were asking for ?
-Message d'origine-
De : openssl-users [mailto:openssl-users-boun...@opens
Hi again Phil,
May be I read your mail too quickly.
>
so we don't have the correct encrypted length value to pass to
the decryption routine.
How is it possible ?
If you stored the encrypted data, you should at least know the size of what
is in the file or the database column, don't you ?
_
Hi Phil,
First, let me emphasized that Richard was rigth in a previous post : it is
not good pratice to compare login info to decrypted password.
It is better NOT to keep user password when possible, and compare login to
salted hash password instead.
As you already know : the encrypted length is
Steve Marquess
writes:
>> Are you certain? For a user-space component like OpenSSL, this is
>> obviously true, but I think you could argue that a kernel module's
>> "Operational Environment" has no relation to the Linux distro, only to
>> the kernel it's loaded by and the hardware architecture (
On 03/27/2015 04:45 AM, Henrik Grindal Bakken wrote:
> Steve Marquess
> writes:
>
>>> If the CMVP bureaucracy insists on a specific kernel version
>>> for the platform number, this should be one of the "Long Term
>>> Support" kernel releases to maximize longevity (assuming that
>>> regular OS pat
Michel,
Thank you very much for your email.
The example given in your email works out fine if the encryption and decryption
are performed in the same routine.
The problem we are having is that we perform the encryption and then at some in
the future we need to do the decryption.
At that point, we
Another problem is that compiled cross-compiled OpenSSL with fips should
start in its own prompt but it only spews the expected signature and
exits. I have modified fipsld scripts as shown in the manual and this
does not help. Incore was used from the tarball but maybe i have to use
some special mo
Steve Marquess
writes:
>> If the CMVP bureaucracy insists on a specific kernel version
>> for the platform number, this should be one of the "Long Term
>> Support" kernel releases to maximize longevity (assuming that
>> regular OS patching within a version number is still accepted
>> as "same pla
10 matches
Mail list logo
