Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Tony Girgenti
Hello, Is OpenSSL compatible with SAFESEH(safe exception handling feature)? https://msdn.microsoft.com/en-us/library/100ezk17.aspx Thanks, Tony -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Michael Wojcik Sent: Monday, June 27, 2016 6:15 P

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Matt Caswell > Sent: Monday, June 27, 2016 15:53 > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Getting error 'SSLv2_client_method': identifier > not found > > I would always recommend using the version

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Matt Caswell
On 27/06/16 20:49, Michael Wojcik wrote: > The simplest fix is to change "SSLv2_client_method" to > "SSLv23_client_method". (Inserting a single character; can't get much > simpler than that.) But since you really don't want to talk to a server > that only supports SSLv3, you might as well use TLS

Re: [openssl-users] [SPAM] Re: Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Tony Girgenti
Hello, Thanks for your help. If I change the statement to m_pSSLctx = SSL_CTX_new(SSLv3_client_method()); The compiler gives the error: "LNK2026 module unsafe for SAFESEH image." Can you give more information about how to not use SSLv2? Thanks, Tony -Original Message- From: openssl-u

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Jakob Bohm
"Unsafe for SAFESEH" is a completely different error: It means that at least one file or library in your program was either not compiled with the /SAFESEH switch or is an assembler module without the magic incantation to tell the linker it contains no Structured Exeption Handlers.In either cas

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Tony Girgenti
Michael, Thank you for your explanation of where my program is and what I should do to continue using some kind of SSL. I first need to figure out how this program uses SSL. Then I can go ahead and try to use TLSv1.2. I did try to use "SSLv23_client_method" and got the same compile err

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Michael Wojcik
SSLv2 is no longer supported, and neither are the SSLv2_*_method calls. (And yes, this causes build problems when updating to newer OpenSSL builds; and while that causes some pain, it was the Right Thing to do.) As Rich said, don't use SSLv2. Don't use SSLv3. If you can help it, don't use anyth

Re: [openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Salz, Rich
Do not use SSLv2. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

[openssl-users] Getting error 'SSLv2_client_method': identifier not found

2016-06-27 Thread Tony Girgenti
Hello, I migrated a Visual Studio 6.0 C++ program to Visual Studio 2015 C++. The program uses OpenSSL. I have downloaded and installed OpenSSL-Win32 version 1.0.2g. I'm trying to figure what I need to do to fix the error I am getting on this line: m_pSSLctx = SSL_CTX_new(SSLv2_client_meth

Re: [openssl-users] How to encode text request of 'req -text -noout''s output?

2016-06-27 Thread Matthew Donald
The file ca.csr is already readable by an application. It is a PEM-encoded ASN.1 formatted file. You can use the openssl library calls to decode the CSR and extract individual fields. The printed output of the -text option is generated by X509_REQ_print_ex() (which you can find in openssl/crypto

Re: [openssl-users] openssl 1.1 and sendmail

2016-06-27 Thread Matt Caswell
On 26/06/16 19:24, Carl Byington wrote: > I am trying to modify the sendmail 8.16 snapshot to use openssl 1.1, but > ran into a few issues. > > > SSL_CTX_set_tmp_rsa_callback() was used to setup a temporary rsa key. It > seems we never need to generate temp rsa keys since all the ephemeral > rs

Re: [openssl-users] openssl 1.1.0-pre5 errors with --api=1.0.0

2016-06-27 Thread Matt Caswell
On 27/06/16 00:00, Carl Byington wrote: > Compiling openssl 1.1.0-pre5 with: > > ./Configure --api=1.0.0 --prefix=/usr/local > --openssldir=/usr/etc/pki/tls enable-ec_nistp_64_gcc_128 zlib sctp > enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 no-mdc2 > no-rc5 no-ec2m no-gost no

Re: [openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

2016-06-27 Thread Ken Chow
I think you should refer the way of building Android application https://wiki.openssl.org/index.php/Android . Trying to warp libcryto.so to your dynamic library by the specified FIPS compiler, once you successfully generated your dynamic library, then no need to specify FIPS compiler for compiling

Re: [openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

2016-06-27 Thread Sahil Gandhi
Hi Steve, Could you please elaborate in detail? Many Thanks, Sahil On Mon, Jun 27, 2016 at 12:49 PM, Sahil Gandhi wrote: > Hi Jakob, > > Thanks a lot for your time and detailed explanation. > > Regards, > Sahil > > On Fri, Jun 24, 2016 at 7:13 PM, Jakob Bohm wrote: > >> On 24/06/2016 15:24, S

Re: [openssl-users] openssl 1.1.0-pre5 errors with --api=1.0.0

2016-06-27 Thread Matt Caswell
On 27/06/16 00:00, Carl Byington wrote: > > Do you want comments like this on this -users list, or the -dev list? Bug reports should either be raised as an issue in github (https://github.com/openssl/openssl/issues) or sent to r...@openssl.org. Matt signature.asc Description: OpenPGP digita

Re: [openssl-users] Regarding FIPS capable openssl (I want to combine libcrypto.a and libssl.a)

2016-06-27 Thread Sahil Gandhi
Hi Jakob, Thanks a lot for your time and detailed explanation. Regards, Sahil On Fri, Jun 24, 2016 at 7:13 PM, Jakob Bohm wrote: > On 24/06/2016 15:24, Sahil Gandhi wrote: > >> Hi Steve, >> >> Could you please help me out? >> I tried to re-read that part of user-guide but no success. >> I know