Why does OpenSSL report google's certificate is "self-signed"?

2021-03-30 Thread Nan Xiao
Hi OpenSSL users, Greetings from me! I am using the master branch of OpenSSL and testing client-arg program (in demos/bio) with "google.com:443": # LD_LIBRARY_PATH=/root/openssl/build gdb --args ./client-arg -connect "google.com:443" .. (gdb) 91 if (BIO_do_connect(sbio) <= 0) { (gdb) 97

Australia's DTCA/DSGL Criminalisation of Encryption based Technologies.

2021-03-30 Thread openssl
G’Day from Down Under and to quell the conspiracy theorists & April Fools Day pranks Despite the coincidental reference to being officially launched on the 1st of April, 2021 to match the 5th anniversary of the criminalisation of encryption based technologies under the DTCA/DSGL...I do

Re: Unable to load the FIPs config file OpenSSL 3.0

2021-03-30 Thread Dr Paul Dale
Our general suggestion is to keep the FIPS configuration in it's own file and include that -- this helps when updating. Does a full path to the providers directory help? Could you try a build with debugging symbols so it's possible to see what's going on better? Set a breakpoint on OSSL_PROVID

Re: Compute HMAC using nCipher ENGINE and HSM-based symmetric key

2021-03-30 Thread Jan Just Keijser
Hi, On 30/03/21 20:58, Ron Kundla wrote: Hello! I have a requirement to generate a HMAC value using a secret/symmetric key inside the HSM. I have seen examples that use public/private keys to do such a thing, but nothing that would use an AES or a nCipher-specific HMAC key. Does OpenSSL suppor

Compute HMAC using nCipher ENGINE and HSM-based symmetric key

2021-03-30 Thread Ron Kundla
Hello! I have a requirement to generate a HMAC value using a secret/symmetric key inside the HSM. I have seen examples that use public/private keys to do such a thing, but nothing that would use an AES or a nCipher-specific HMAC key. Does OpenSSL support this function using the ENGINE subsystem?

Unable to load the FIPs config file OpenSSL 3.0

2021-03-30 Thread Bala Duvvuri via openssl-users
Hi All, Can you kindly help me with this error while running the below program that tries to load the configuration which has the FIPs provider? The program is built on build machine and to be run on linux MIPS platform and below error is seen: #include main () { OSSL_LIB_CTX *libctx