[openssl-users] Problem in RSA encrypt and Decrypt using EVP

2016-01-28 Thread Sugumar
Hi, I have problem in RSA encrypt and decrypt using EVP methods. My below program is some times working fine and some times it fails to decrypt the message. That means when i executing the below code 2 times working fine 3rd time it fails to decrypt. Please point out the error. Code: #include #

[openssl-users] How to enable FIPS mode system-wide for the FIPS capable OpenSSL?

2016-01-28 Thread security veteran
Hi All: Is there a way to enable FIPS mode globally, instead of having to explicitly invoke the FIPS_mode_set() API from each application, for enabling the FIPS mode? The reason I ask is, it will be much easier to enable FIPS mode if there're many applications which rely on OpenSSL for crypto wor

[openssl-users] stunnel 5.30 released

2016-01-28 Thread Michal Trojnara
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dear Users, I have released version 5.30 of stunnel. The ChangeLog entry: Version 5.30, 2016.01.28, urgency: HIGH * Security bugfixes - OpenSSL DLLs updated to version 1.0.2f. https://www.openssl.org/news/secadv_20160128.txt * New features

Re: [openssl-users] SSL version status

2016-01-28 Thread Karl Denninger
On 1/27/2016 07:56, Nulik Nol wrote: > Hi, > I have to implement SSL/TLS in a proprietary web server daemon. I am > only familiar with SSL as a user, not as developer, so my question is. > What versions of SSL should I support for best compatibility and > optimal development time? How much old brow

[openssl-users] OpenSSL Security Advisory

2016-01-28 Thread OpenSSL
s of 1.0.1 are advised to upgrade. Support for versions 0.9.8 and 1.0.0 ended on 31st December 2015. Those versions are no longer receiving security updates. References == URL for this Security Advisory: https://www.openssl.org/news/secadv/20160128.txt Note: the online version of

[openssl-users] OpenSSL version 1.0.2f published

2016-01-28 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.2f released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.2f of our open source

[openssl-users] OpenSSL version 1.0.1r published

2016-01-28 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1r released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1r of our open source

Re: [openssl-users] Acessing a proxy with OpenSSL

2016-01-28 Thread Marcos Bontempo
Thanks for your answer! Have you got a C example using the CONNECT request to the proxy?In this case I want to avoid NAT. It helped a lot!Thanks. To: openssl-users@openssl.org From: t...@convey.de Date: Thu, 28 Jan 2016 12:47:48 +0100 Subject: Re: [openssl-users] Acessing a proxy with OpenSSL

Re: [openssl-users] Acessing a proxy with OpenSSL

2016-01-28 Thread Bernhard Fröhlich
Am 28.01.2016 um 12:02 schrieb Marcos Bontempo: Hello, I'm using this example to make a SSL connection: http://fm4dd.com/openssl/sslconnect.htm. Now I want to also acess a HTTPS proxy. Is there a way to acess a HTTPS proxy with the OpenSSL library? Any tip will be very helpful, Thanks. See

[openssl-users] Acessing a proxy with OpenSSL

2016-01-28 Thread Marcos Bontempo
Hello, I'm using this example to make a SSL connection: http://fm4dd.com/openssl/sslconnect.htm.Now I want to also acess a HTTPS proxy. Is there a way to acess a HTTPS proxy with the OpenSSL library? Any tip will be very helpful,Thanks. ___