Re: Role Separation

2019-09-16 Thread Jordan Brown
On 9/15/2019 8:29 AM, Kyle Hamilton wrote: > OpenSSL is a toolkit, not a full implementation.  More importantly, it > is a library, so anyone who can link against it can perform all > operations that the library can support, and the library has no > concept of role separation built in. Still more

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Matt Caswell
On 16/09/2019 16:26, Peter Sui wrote: > Hi Matt,  >        I said " It does not work" means, after I build the open-ssl1.1.1d with > or without the "enable-deprecated" configuration, then use the library, header > files in my application as before with the older version(1.0.2t), then my > build

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Peter Sui
Hi Matt, I said " It does not work" means, after I build the open-ssl1.1.1d with or without the "enable-deprecated" configuration, then use the library, header files in my application as before with the older version(1.0.2t), then my build failed, the errors are like: Error C3861 'HMAC_CTX_i

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Michael Wojcik
Matt has answered the main question, but as an aside: -D"_CRT_SECURE_NO_DEPRECATE" suppresses warning messages from Microsoft's Visual C compiler for using various standard C library functions, rather than using the optional "secure" ones (a misnomer, as they are at best somewhat easier to use

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Matt Caswell
On 16/09/2019 16:09, Peter Sui wrote: > Hi Matt, >         So you are saying configuring with "enable-deprecated" or not won't > make > the build different, they are all actually support the deprecated functions, > right ? Right. > If yes, then in my application , if  I have "OPENSSL_USE_DEPR

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Peter Sui
Hi Matt, So you are saying configuring with "enable-deprecated" or not won't make the build different, they are all actually support the deprecated functions, right ? If yes, then in my application , if I have "OPENSSL_USE_DEPRECATED" defined, the depecated functions in my application shou

Re: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Matt Caswell
On 16/09/2019 15:44, Peter Sui wrote: > Hi, >        From the openssl website, I got the folloeing instruction: > " > Access to deprecated functions/macros has been removed by default. To enable > access you must do two things. 1) Build OpenSSL with deprecation support (pass > "enable-deprecated

RE: building openssl-1.1.1d with "enable-deprecated"

2019-09-16 Thread Peter Sui
Hi, From the openssl website, I got the folloeing instruction: " Access to deprecated functions/macros has been removed by default. To enable access you must do two things. 1) Build OpenSSL with deprecation support (pass "enable-deprecated" as an argument to config) 2) Applications must defi

Re: Linker errors when trying to build OpenSSL with MD2 and RC5 support

2019-09-16 Thread Michael Wojcik
Did you read my previous response, where I listed the relevant Configure options? Be sure to expand included text, if you're using one of those braindead MUAs which hide it.

Re: Truncated Hmac and supported group extension in openssl1.1.1

2019-09-16 Thread Hubert Kario
On Friday, 13 September 2019 16:37:23 CEST Manish Patidar wrote: > Hi > > Is truncated hmac extension is supported in openssl1.1.1 ? no > is TLS1. 2 and lower TLS version supports supported group extension for > Finite Field GROUPS (DHE) ? I'm assuming the question is still about openssl 1.1.

Re: Problem in trying EVP Key Derivation example in openssl

2019-09-16 Thread Matt Caswell
On 14/09/2019 22:28, Bhuvan Sharma wrote: > Hey all, > I'm new to openssl community and I don't know much about it. I tried to use > openssl on my linux machine. I clone openssl git repo and executed these > commands as mentioned in the file "INSTALL": "./config", "make", "make test", > "make in