Fipsinstall failing

2019-10-16 Thread Manish Patidar
Hi I am trying latest master code to install the fips, but it is not working. openssl fipsinstall -module ./fips.so -out fips.conf -provider_name fips - section_name fipsinstall -mac_name HMAC -macopt digest:SHA256 -macopt hexkey:000102030405060708090A0B0C0D0E0F10111213 It is failing in verify

Building and testing 1.1.1t with /MT run-time library

2019-10-16 Thread Michael Adria via openssl-users
Hi everyone, On Windows, we require both /MD and /MT builds of OpenSSL, with Control Flow Guard enabled. To do so, we tried using these steps in cmd.exe recently when compiling 1.1.1d for /MT (64-bit shown; we also build 32-bit): $ perl Configure VC-WIN64A no-asm --prefix= $ ms\do_ms $ perl

Re: Questions about secure curves

2019-10-16 Thread Jakob Bohm via openssl-users
To clarify, Firefox/Mozilla the organization enforces an unexplained policy of prohibiting all included CAs from issuing any P-521 certificate, thus effectively banning their use on public servers regardless of technical abilities. On 15/10/2019 19:02, Mark Hack wrote: I believe that Firefox doe