Drbg kat test data: Openssl-fips 2.0.16

Hi There is DRBG kat test data in fips_drbg_selftest.h. (Openssl-fips-2.0.16) Can anyone let me know, What is the source of this constant arrays. NIST link or any other source will be helpful? Regards Manish

Re: How to use openssl smine sign the email body only

Maybe I posted too many stuff. What my problem is "openssl smime" command signed everything fed to it. For example, I wanted to sign the following email body. /*Hi there, This is an test email.* / And after signed, the email became something like below, /Received: from localhost [127.0.0.1] by

Re: How to list ssl3 ciphers

On 7/10/19 1:10 AM, shiva kumar wrote: Hi, How to List the ssl3 ciphers in openssl1.1.1 The command "openssl ciphers -ssl3" is not working. Please help me jupiter # /usr/local/bin/openssl version OpenSSL 1.1.1c 28 May 2019 jupiter # /usr/local/bin/openssl ciphers -help Usage: ciphers [options

What's up with ectest?

Ectest has been broken for quite some time. What are the plans to get it fixed?

Re: looks like the support for Heart beat extension is removed from openssl

* Why the support for Heart beat extension is removed from openssl. It’s intended use was to check MTU along the path. That is not very useful any more. * How to handle abnormal disconnection in DTLS？ You should be able to detect time-outs and “failure to close” in your application.

Re: RAND_seed buffer freeing

On 11.07.19 12:00, tobias.w...@t-systems.com wrote: I`ve one question regarding RAND_seed, the first parameter refers to a buffer, who is freeing that buffer afterwards? Can I free it after the call to RAND_seed or is this done by openssl? You own the buffer, OpenSSL only reads its conten

Re: How to list ssl3 ciphers

Hi, Ssl3 is deprecated and disabled by default. Rebuild your OpenSSL with enable-ssl3 enable-ssl3-method options. Sent from my iPhone > On 11 Jul 2019, at 14:00, shiva kumar wrote: > > HI, > In OpenSSL 1.1.1 documentation it is mentioned as -ssl3 option is there as > follows, > openssl ci

Re: How to list ssl3 ciphers

HI, In OpenSSL 1.1.1 documentation it is mentioned as -ssl3 option is there as follows, *openssl* *ciphers* [*-help*] [*-s*] [*-v*] [*-V*] [*-ssl3*] [*-tls1*] [ *-tls1_1*] [*-tls1_2*] [*-tls1_3*] [*-s*] [*-psk*] [*-srp*] [*-stdname*] [*-convert name*] [*-ciphersuites val*] [*cipherlist*] but, in t

Re: OpenSSL Upgrade to 1.1.1c from very old version

Hello, On Thu, Jul 11, 2019 at 12:58 PM Umamaheswari Nagarajan < numamahesw...@pulsesecure.net> wrote: > Hi, > > > > In couple of modules in our product, we use very older version of OpenSSL > (0.97e) which are statically linked. > > > > We wanted to upgrade it to the latest version (1.1.1c) and

looks like the support for Heart beat extension is removed from openssl

Hi , Why the support for Heart beat extension is removed from openssl. I am referring latest version of openssl(openssl-1.1.1c) How to handle abnormal disconnection in DTLS？ Thanks! Shiva

RAND_seed buffer freeing

I`ve one question regarding RAND_seed, the first parameter refers to a buffer, who is freeing that buffer afterwards? Can I free it after the call to RAND_seed or is this done by openssl?

OpenSSL Upgrade to 1.1.1c from very old version

Hi, In couple of modules in our product, we use very older version of OpenSSL (0.97e) which are statically linked. We wanted to upgrade it to the latest version (1.1.1c) and also remove the static linking. Query- Can we upgrade from OpenSSL 0.97e to OpenSSL 1.1.1c directly or we have to move

How to use openssl smine sign the email body only

Hi there, I created a script to use "openssl smine" to sign emails in Postfix. The script is running the command below. openssl smime -sign -signer /etc/letsencrypt/live/mail.xxx.xxx/cert.pem -inkey /etc/letsencrypt/live/mail.xxx.xxx/privkey.pem -in $MESSAGEFILE -out $OUTFILE || { echo Problem