Re: [openssl-users] OpenSSL.cnf File path

2015-06-05 Thread Thomas J. Hruska
On 6/4/2015 1:17 PM, Cathy Fauntleroy wrote: Hello, I have OpenSSL 1.0.2a installed on my Windows 7 box. I am attempting to generate a CSR so new security certificates can be issued and am running into the following error when the command to generate the .csr file is issued from the C:\OpenSSL-

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
2015-06-05 20:18 GMT+02:00 Matt Caswell : > > I see you got it working! Just some comments below > > On 05/06/15 12:34, Lorenzo Miniero wrote: > > I've started looking into filters and I have some doubts, though, also > > taking into account what you suggested, and I apologize again if this > > tu

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Matt Caswell
I see you got it working! Just some comments below On 05/06/15 12:34, Lorenzo Miniero wrote: > I've started looking into filters and I have some doubts, though, also > taking into account what you suggested, and I apologize again if this > turns out to be silly. As far as I've understood, what I

Re: [openssl-users] Building OpenSSL with FIPS crypto Module Linker forking too many processes

2015-06-05 Thread John Foley
Well, since you're using the fips-ecp tarball, you'll need to include no-ec2m when configuring OpenSSL 1.0.2a. But this isn't why you're seeing a fork error from fipsld. I'm using Ubuntu 14.04 (Is there a 14.4?) and don't see any issue. However, I'm not setting CC, FIPSLD and FIPSDIR. You shoul

Re: [openssl-users] Building OpenSSL with FIPS crypto Module Linker forking too many processes

2015-06-05 Thread OpenSSL Curious
-- View this message in context: http://openssl.6102.n7.nabble.com/Building-OpenSSL-with-FIPS-crypto-Module-Linker-forking-too-many-processes-tp58444p58472.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users mailin

Re: [openssl-users] Building OpenSSL with FIPS crypto Module Linker forking too many processes

2015-06-05 Thread OpenSSL Curious
REPOSTING TO PUSH TO OFFICIAL GROUP I was wondering if someone has seen this issue before. I am guessing the problem is on my side because can replicate it on Debian 8 and Ubuntu 14.4. I am using OpenSSL 1.0.2a and the crypto module from OpenSSL ecp 2.0.9 env settings CC=/home/myssluser/works

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
2015-06-05 12:30 GMT+02:00 Matt Caswell : > > > On 05/06/15 10:20, Lorenzo Miniero wrote: > > Just one quick question about this: are messages/packets passed to the > > BIO actually splitted, and then just queued by the mem BIO in the > > buffer, or can there be cases where a larger than normal bu

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
Eureka, I got it working! Thanks to the feedback from Matt and Alfred, I managed to create a filter that does what I need. To those who may be interested, it's available here: https://github.com/meetecho/janus-gateway/pull/254 Thanks for your great support! Lorenzo 2015-06-05 13:34 GMT+02:00 Lo

[openssl-users] fipsld linker out of control forking, last step of build

2015-06-05 Thread Mark
MAY BE REPOSTING TRYING TO MOVE FROM NABBLE TO OFFICIAL OPENSSL POSTINGI was wondering if someone has seen this issue before. I am guessing the problem is on my side because can replicate it on Debian 8 and Ubuntu 14.4. I am using OpenSSL 1.0.2c and the crypto module from OpenSSL ecp 2.0.9 env

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
2015-06-05 12:34 GMT+02:00 Alfred E. Heggestad : > > > On 05/06/15 11:20, Lorenzo Miniero wrote: > >> 2015-06-05 10:31 GMT+02:00 Matt Caswell > m...@openssl.org>>: >> >> >> >> >> On 05/06/15 08:09, Lorenzo Miniero wrote: >> > Hi all, >> > >> > first of all, apologies if this has

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Alfred E. Heggestad
On 05/06/15 11:20, Lorenzo Miniero wrote: 2015-06-05 10:31 GMT+02:00 Matt Caswell mailto:m...@openssl.org>>: On 05/06/15 08:09, Lorenzo Miniero wrote: > Hi all, > > first of all, apologies if this has been asked before. I've searched > archives pretty much everywhere,

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Matt Caswell
On 05/06/15 10:20, Lorenzo Miniero wrote: > Just one quick question about this: are messages/packets passed to the > BIO actually splitted, and then just queued by the mem BIO in the > buffer, or can there be cases where a larger than normal buffer is > passed to the BIO anyway, meaning a manual

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
2015-06-05 10:31 GMT+02:00 Matt Caswell : > > > On 05/06/15 08:09, Lorenzo Miniero wrote: > > Hi all, > > > > first of all, apologies if this has been asked before. I've searched > > archives pretty much everywhere, and only came to partial indications as > > to how this should be dealt with. > >

Re: [openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Matt Caswell
On 05/06/15 08:09, Lorenzo Miniero wrote: > Hi all, > > first of all, apologies if this has been asked before. I've searched > archives pretty much everywhere, and only came to partial indications as > to how this should be dealt with. > > The problem I'm facing deals with using DTLS with mem B

[openssl-users] DTLS fragmentation and mem BIO

2015-06-05 Thread Lorenzo Miniero
Hi all, first of all, apologies if this has been asked before. I've searched archives pretty much everywhere, and only came to partial indications as to how this should be dealt with. The problem I'm facing deals with using DTLS with mem BIOs, as I have to take care of transport myself. Specifica