RE: Build the FIPS Object Module issue on Ubuntu 18.04

2019-05-15 Thread Paul Dale
Just noting that any module built in this manner is *not* FIPS compliant. The distribution must be unmodified and build exactly as per the documentation. Any change to the files or the build process renders the result invalid from a FIPS perspective. Pauli -- Oracle Dr Paul Dale | Cryptograp

Re: Build the FIPS Object Module issue on Ubuntu 18.04

2019-05-15 Thread sreekanth1m
I was able to generate FIPS Object Module - fipscanister.o fipscanister.o.sha1 fips_premain.c fips_premain.c.sha1 successfully but now struck in generating Build the FIPS capable library. followed below steps: $ . ./setenv-android.sh $ cd openssl-1.0.1e/ Next, fix the makefile and run configur

stunnel 5.54 released

2019-05-15 Thread Michal Trojnara via openssl-users
Dear Users, I have released version 5.54 of stunnel. Version 5.54, 2019.05.15, urgency: LOW * New features   - New "ticketKeySecret" and "ticketMacSecret" options     to control confidentiality and integrity protection     of the issued session tickets.  These options allow     for session resump

OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-15 Thread John Unsworth
>> Issue #pragma weak for a symbol only in the files that define that symbol, >> not in the ones that merely reference it. The problem is that those pragmas are in .h files. They contain inline functions that use those symbols. The pragmas were added because of problems with apps that used the

Re: fipsld ./fips_premain_dso: No such file or directory

2019-05-15 Thread sreekanth1m
@Roar, could you let me know where to add lpthread and bsymbolic to link statically as I am also facing the the same issue when making a FIPS library. Thanks -- Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html

Re: Crashes when generating certificate

2019-05-15 Thread Jakob Bohm via openssl-users
On 14/05/2019 18:39, Michael Wojcik wrote: From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Karl Denninger Sent: Tuesday, May 14, 2019 09:22 On 5/14/2019 09:48, Michael Wojcik wrote: I can't think of what remnant of the old certificate would be there, except the certi

Re: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-15 Thread Jakob Bohm via openssl-users
Alternative suggestion (from my understanding of the documentation quoted below): Issue #pragma weak for a symbol only in the files that define that symbol, not in the ones that merely reference it. The hoped effect would be: 1. Object files that merely reference a symbol will contain regular U

AW: Building openssh7.9p1 and above against openssl1.1.1b

2019-05-15 Thread Dr. Matthias St. Pierre
If the compilation errors are in openssh, then it might be better to ask the openssh people. Also, posting the precise error messages by the compiler would be of great help. As for your citation below: It seems to state that building against version 1.1.0 and 1.1.1 is supported, while building ag

Building openssh7.9p1 and above against openssl1.1.1b

2019-05-15 Thread Samiya Khanum via openssl-users
Hi, After upgrading openssl to 1.1.1b, I am getting compilation errors in the openssh code. Does Openssh 7.9p1 and above versions support building against the openssl 1.1.1b version? In Openssh release notes, below note is mentioned: All: support building against the openssl-1.1 API (releases 1.