[openssl-users] Removing some systems

We are planning on removing the following systems from OpenSSL 1.1: Netware OS/2 There are a few reasons for this. In no particular order they include: these platforms are no longer supported by the vendor; the configurations and builds have not been testable by the team for years and might

Re: [openssl-users] [openssl-dev] openssl 1.0.1p PEM_write_bio_RSAPrivateKey fail. error: ASN1_get_object:too long

On 17/03/2016 06:32, Ranjith Kumar A. wrote: > Need help. This is a question about using the OpenSSL libraries, further discussion should be on openssl-users; I've set 'reply-to' appropriately, but I don't know what the mailing list will do with it. I’m not able to encrypt a key using passphr

[openssl-users] OpenSSL version 1.1.0 pre release 4 published

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.1.0 pre release 4 (beta) === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 1.1.0 is currently in beta. OpenSSL 1.1.0 pre release 4 has now be

Re: [openssl-users] Questions about OCB and Wrap modes

On 15/03/16 11:12, Michel wrote: > Hi, > > > > As there was some discussion about AEAD, I am still curious to know why > OCB mode isn't flagged as one of them : > > assert( EVP_CIPHER_flags( EVP_aes_128_ocb() ) & > EVP_CIPH_FLAG_AEAD_CIPHER );failed ? > > > > Can someone please expla

Re: [openssl-users] 'makedepend' in openssl builds: clarify need and correct usage

On 03/14/2016 04:26 PM, PGNet Dev wrote: Must use it, (1) https://wiki.openssl.org/index.php/Compilation_and_Installation Dependencies If you are prompted to run make depend, then you must do so. Which I currently attempt to do, but get the reported errors about not fin

Re: [openssl-users] help on des_cblock

My mistake. I was reading the calls backwards. The use of c_str() there is fine. Ignore my previous comment. From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Jason Qian Sent: Friday, March 18, 2016 2:34 PM To: openssl-users@openssl.org Subject: Re: [openssl-users] h

Re: [openssl-users] 'makedepend' in openssl builds: clarify need and correct usage

> > Wait, are you saying that OpenSSL 1.1.0 no longer implements all the > > known SSL/TLS versions (some of which are disabled by default because > > of security)? > > > > That would mean it is no longer a full featured TLS and SSL toolkit? SSlv2 is a bug, not a feature :) Perhaps less flippant

Re: [openssl-users] 'makedepend' in openssl builds: clarify need and correct usage

On 16/03/2016 22:52, Jeffrey Walton wrote: After ./configure ... I'm prompted Since you've disabled or enabled at least one algorithm, you need to do the following before building: make depend Exec'ing the 'make depend' stage returns lots of warnin

Re: [openssl-users] Naive: how to generate EC public key from EC private key?

> On Mar 17, 2016, at 6:32 PM, Blumenthal, Uri - 0553 - MITLL > wrote: > > Oh, and I'd much prefer to stay at the EVP level, rather than invoke BIO > primitives for this task. Well you can work with http://openssl.org/docs/manmaster/crypto/EC_KEY_key2buf.html to extract EC public key octets.

Re: [openssl-users] About no-ssl2

On 16 March 2016 at 22:58, Viktor Dukhovni wrote: > On Wed, Mar 16, 2016 at 10:52:39PM +, Richard Moore wrote: > > > On 16 March 2016 at 22:39, Viktor Dukhovni > > wrote: > > > > > On Wed, Mar 16, 2016 at 11:32:28PM +0100, Michel wrote: > > > OpenSSL 1.1.0 has no vestigial SSLv2 code, and so

Re: [openssl-users] Naive: how to generate EC public key from EC private key?

On Fri, Mar 18, 2016, Viktor Dukhovni wrote: > On Fri, Mar 18, 2016 at 06:59:36PM +, Blumenthal, Uri - 0553 - MITLL > wrote: > > > Answered my own question: should use EVP_PKEY_bits(pkey) instead. > > That's not the right way to determine the curve id. > > > >How do I determine what curve