[openssl-users] How to prove a Certificate is Signed or not

Hi everyone, I am new to opennssl and now I am completely confused. Please help me out to solve my issue. I have implemented a code to sign the given CSR certificate (certReq.pem), then generate openssl signed Certificate (SignedCertificate.pem) using the details of certReq,pem. The code is like

[openssl-users] Posting a question

Hello, I have posted my question into the forum. Please kindly approve it as soon as possible. Thanking you, BR, Anil Kumar Reddy Morthala -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Jks converted to Pem error in veirfying

Hi Jan, Thanks for you reply. I have sent you the mail with the certificates. The version is. OpenSSL 0.9.8k 25 Mar 2009 ​Regards Anil​ Sent with MailTrack <https://mailtrack.io/install?source=signature&lang=en&referral=anilmathew...@gmail.com&idSignature=22&g

[openssl-users] Jks converted to Pem error in veirfying

issuer certificate Regards Anil Sent with MailTrack <https://mailtrack.io/install?source=signature&lang=en&referral=anilmathew...@gmail.com&idSignature=22> ___ openssl-users mailing list To unsubscribe: https://mta.o

TLS KDF

party/src/A.buildme/openssl/openssl-fips-1.2.ppc/test' make: *** [build_tests] Error 1 Thanks Anil

Re: How to get 'pre master secret' of a tls session?

DEBUG macro can be enabled to log this : TLS_DEBUG It will write the pre master key to standard output. This is where it is logging : tls1_setup_key_block Thanks On Thu, Mar 6, 2014 at 3:32 PM, Prasun Bheri wrote: > Hi Group, > for debugging purpose, I would like to log 'pre master secret' of

TLS 1.1 and 1.2 support in openssl-fips 1.2

: http://www.openssl.org/news/changelog.html can somebody confirm on this ? Thanks Anil

Re: Support for SHA-512/224 and SHA-512/256

Yes, I have searched a lot for SHA- 2 . Looks like there is no support for SHA-2 in openssl-fips 1.2 Thanks Anil On Fri, Oct 4, 2013 at 3:00 PM, Gnanasekar R wrote: > Hi!, > > Yes, this is SHA-512. I am interested in the 512/t variants for which the > IVs and the final digests le

SSL_connect failure if key size is less than 1024 bits in fips mode

his is the case.Not able to find the same check in code. Can somebody point me to code where in this check is made ? Thanks Anil

Re: error "unable to load PKCS7 object... wrong tag"

Thank you for your reply. I used HxD but could not find any occurrence of 0x30 followed by 0x82. Anything else to try? - Original Message - From: Dr. Stephen Henson To: openssl-users@openssl.org Cc: Sent: Wednesday, July 17, 2013 3:14 PM Subject: Re: error "unable to load PKCS7 object.

AES enc: Plain text and cipher text data size

Hi All, This is Anil. I have few questions related to AES encryption: --- 1. Does the size of encrypted data depends on the size of the plain text(considering plain text <= block size) ?

AES_encrypt : Size of the cipher text

Hi OpenSSL Team, I am Anil, trying to code aes encryption and decryption program using openssl library. I have coded a program which takes key and data as inputs and computes AES-128 cipher text and decrypt the same. *If the size of the data/Key changes, size of cipher text is also getting

Access Violation issue

Any Suggestions will be helpful Thanks Anil

Re: OpenSSL 1.0.0a and FIPS

p://www.openssl.org/docs/fips/fipsnotes.html>Thanks Anil On Wed, Jul 14, 2010 at 1:20 AM, Warren Halstead wrote: > Using OpenSSL 1.0.0a and OpenSSL FIPS 1.2 on Debian 5 > > After the configuration and installation of FIPS 1.2, I go into the > openssl-1.0.0a directory and attempt to

Re: Why 2 DLL's for building OpenSSL

by 2 dlls .. do you mean libssl and libcrypto ? On Mon, Jul 5, 2010 at 4:24 PM, Deckers, Rob wrote: > > I am trying to build OpenSSL by using CMake ( only for windows ) files to > generate visual studio solutions. > > Now I see that OpenSSL results in 2 .dll files. > > Is there a special reason

missing HMAC_CTX_cleanup and other symbols while building static crypto library in FIPS mode ..

s. The missing symbols are available in fipscanister.lib. Thanks Anil hmac-sha1.o : error LNK2019: unresolved external symbol _HMAC_CTX_cleanup referenced in function _hmac_sha1 hmac-sha1.o : error LNK2019: unresolved external symbol _HMAC_Final referenced in function _hmac_sha1 hmac-

OpenSSL with QT

t;. Please do send me any ideas which will help in resloving this issue . Best regards Anil H

Re: SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

x9f0094 in ssl23_get_client_hello (s=0x4015e0b0) at s23_srvr.c:261 #4 0x9efec4 in ssl23_accept (s=0x4015e0b0) at s23_srvr.c:203 #5 0x9f5310 in SSL_accept (s=0x4015e0b0) at ssl_lib.c:869 plain text is set on the out parameter by ret=readsocket(b->num,out,outl); it seems client is sending plain text ...

Re: SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

y]\n\370" here p[x] doesnt have any numeric values , and so p doesnt match any of the condition of ssl2 , ssl3 or tls1 , it returns unknown protocol. Any thoughts ? Thanks Anil On Wed, Jun 24, 2009 at 9:26 PM, Anil Tambe wrote: > i guess in my case , server is not able t

Re: SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

i guess in my case , server is not able to understand the client hello message .. any thoughts ? how do i debug it more .. On Thu, Jun 18, 2009 at 3:03 PM, Anil Tambe wrote: > Yes client is not able to connect and ssl23_get_client_hello is returning > -1 and so its going in > in s

Re: SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

0 (gdb) print *p[11] $16 = 0 Any suggestion what i should be looking at .. Any suggestion how do i reproduce this with openssl sample , i.e s_client and s_server ? Thanks Anil On Thu, Jun 18, 2009 at 10:45 AM, David Schwartz wrote: > > Anil Tambe wrote: > > > Getting the Below e

SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

try to post more detail information , till then .. does anybody have any idea about it ? has anybody encounter the issue ? This is observed only on HP-UX 11 11 PA machine. Thanks Anil

Re: Handshake fails on HPUX IA64 Release bits

optimization on HP-UX 11 23 IA64 platform. Thanks Anil On Tue, May 26, 2009 at 5:35 PM, Anil Tambe wrote: > More investigation shows that the issue is seen with ssl3 and tls1 , ssl2 > works fine ... > > ../util/shlib_wrap.sh ./ssltest -ssl2 Available compression methods: NONE > SSLv2, c

Re: Handshake fails on HPUX IA64 Release bits

940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:845: TLSv1, cipher (NONE) (NONE) 1 handshakes of 256 bytes done Thanks Anil On Tue, May 26, 2009 at 4:11 PM, Anil Tambe wrote: > > hi, > > Openssl Veriosn :: openssl 0.9.8g > Platform :: HP-UX 11 23 IA64 > > SS

Handshake fails on HPUX IA64 Release bits

hello A server waiting in SSL_accept - SSLv3 read client certificate A client waiting in SSL_connect - SSLv3 read finished A client wrote 256 server read 256 server wrote 256 client read 256 TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 512 bit RSA 1 handshakes of 256 bytes done Thanks Anil

Re: Setting Log level

thanks for the information , that helped .. henceforth i will be more selective and send email to appropriate alias .. Thanks Anil On Fri, May 8, 2009 at 5:32 AM, Dave Thompson < dave.thomp...@princetonpayments.com> wrote: > > From: owner-openssl-us...@openssl.org On Behalf O

Setting Log level

hi,How do we configure debug level / log level in openssl ? is there any way by setting which i can get more information in the logs ? Thanks Anil

Re: Empty Session_id in SSL session cache with openssl 0.9.8j and 0.9.8k

Thanks , the -no_ticket option worked , now i am able to see the session id. Thanks Anil On Tue, May 5, 2009 at 9:10 PM, Dr. Stephen Henson wrote: > On Tue, May 05, 2009, Anil Tambe wrote: > > > Hi, > > > >Below are the steps to reproduce the issue with opens

Empty Session_id in SSL session cache with openssl 0.9.8j and 0.9.8k

ks fine. It seems server side is not sending the session id as part of the initial hello, and as a result, the session caching is not working. When there is no session id, client simply discards that session and not cache it. Does anybody encounter the issue previously , any thoughts ? Thanks Anil

Empty Session_id in SSL session cache with openssl 0.9.8j and 0.9.8k

ks fine. It seems server side is not sending the session id as part of the initial hello, and as a result, the session caching is not working. When there is no session id, client simply discards that session and not cache it. Does anybody encounter the issue previously , any thoughts ? Thanks Anil

Re: openssl errors on aix 4.3 .config and make failing

hi, it seems that the configuration file is missing , please read the below and create one. http://www-01.ibm.com/support/docview.wss?uid=swg21270914 Thanks Anil On Sat, Apr 25, 2009 at 9:35 AM, Richard Francis wrote: > Hi, here's the output from .config and make failing; any

Re: SSL2_WRITE:ssl handshake failure:s2_pkt.c:428:

;msg_callback(0, s->version, 0, p, 3, s, s->msg_callback_arg); /* ERROR */* What does msg_callback do with p? Thanks Anil On Thu, Apr 9, 2009 at 4:40 PM, Ger Hobbelt wrote: > Patch for PR696 looks fine to me, though attached patch alternative > may be considered .1% &

Re: OpenSSL version 0.9.8k released

Thanks .. the information was helpful .. On Mon, Apr 6, 2009 at 8:09 PM, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > On Mon, Apr 06, 2009 at 06:29:17PM +0530, Anil Tambe wrote: > > > is the binary compatibility broken in 0.9.8k ? > > Not necessaril

Re: SSL2_WRITE:ssl handshake failure:s2_pkt.c:428:

d that patch and sslv2 client was able to do successful communication without passing the certificate .. Request you all to review the patch and let us know your thoughts on it ... Thanks Anil On Wed, Apr 8, 2009 at 6:06 AM, Dave Thompson < dave.thomp...@princetonpayments.com> wrote:

SSL2_WRITE:ssl handshake failure:s2_pkt.c:428:

ify error:num=27:certificate not trusted verify return:1 depth=0 /C=AU/ST=Queensland/O=CryptSoft Pty Ltd/CN=Server test cert (512 bit) verify error:num=21:unable to verify the first certificate verify return:1 22360:error:1407F0E5:SSL routines:SSL2_WRITE:ssl handshake failure:s2_pkt.c:428: Thanks Anil

Re: OpenSSL version 0.9.8k released

ripemd160_block_host_order sha1_block_asm_host_order _ossl_old_des_xwhite_in2out sha_block_data_order md5_block_host_order Please let us know .. thanks Thanks Anil On Wed, Mar 25, 2009 at 5:28 PM, OpenSSL wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > OpenSSL

SSL2_WRITE:ssl handshake failure:s2_pkt.c:428

n:1 depth=0 /C=AU/ST=Queensland/O=CryptSoft Pty Ltd/CN=Server test cert (512 bit) verify error:num=21:unable to verify the first certificate verify return:1 22360:error:1407F0E5:SSL routines:SSL2_WRITE:ssl handshake failure:s2_pkt.c:428: Thanks Anil

Re: make test

hi, please check configuration for this particular platform in Configure file .. is it uses BN_LLONG ? try replacing that with SIXTY_FOUR_BIT_LONG. Thanks Anil On Sat, Mar 21, 2009 at 12:31 AM, wrote: > Hi. I install openssl 0.9.8j on Mandriva 2009 x86_64 > > ./config --pr

bntest BN_sqr Test Fails on Linux ( SUSE and REDHAT ) Z Series 64bit ..

nto it ... Thanks Anil

Problems while linking on SUSE PPC 64 .. ( unresolvable R_PPC64_REL24 relocation against symbol `.stat' )

while linking on SUSE PPC 64. Thanks Anil

client & server cumminucation problem

e on macos (ppc) ..connection  between client and gateway  get establish... And client is able send data to gateway but gateway does not response ...   I dont know why gateway is not  able to send data to client ( mac os on ppc).. can anyone suggest whats going wrong.     Thanks in advance.

problem in client & server cumminication

macos (ppc) ..connection  between client and gateway  get estabish... Then  client is able send data to gateway but gateway does not resonse ...   I dont know why gateway is not ! able to sent data to client ( mac os on ppc).. can anyone suggest whats going wrong.     Thanks in advance.

Re: steps to use a dynamic engine from an application

NGINE_free() before application has done using the Engine?   Thanks, -Anil   Geoff Thorpe <[EMAIL PROTECTED]> wrote: Hi there,On November 29, 2005 03:05 pm, Anil Gunturu wrote:> I am just wondering about the steps to use a dynamic engine. Can> somebody verify this:> e = ENGINE_b

steps to use a dynamic engine from an application

to call ENGINE_finish() and ENGINE_free()? Thanks, -Anil Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

RE: question on linking dynamic engines

informations.I think you could also find a thread on this in openssl user mailing list archive.Hope it could help.regards,Fred-Original Message-From: Anil Gunturu [mailto:[EMAIL PROTECTED]Sent: Thu 10/6/2005 7:43 PMTo: Richard Levitte - VMS Whacker; openssl-users@openssl.orgCc: Subject:

Re: question on linking dynamic engines

How does it know the location of the library at runtime? Do I need to bundle the it engine library? Thanks, -AnilRichard Levitte - VMS Whacker <[EMAIL PROTECTED]> wrote: In message <[EMAIL PROTECTED]> on Wed, 5 Oct 2005 21:25:34 -0700 (PDT), Anil Gunturu <[EMAIL PROTECTED]>said

Trouble loading engine on arm

appreciated. -Anil Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort.

question on linking dynamic engines

ink to the hardware library?   Thanks, -Anil Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort.

Couple of questions regrading openssl engines

       NULL,    ibmca_rsa_mod_exp,    ibmca_mod_exp_mont,    NULL,    NULL,       0,    NULL,       NULL,       NULL    };   Do null values assume default methods? Thanks, -Anil Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort.

enigne support

Hi, Is it possible to use the openssl engine if the hardware supports only primitive bignumber operations (multiplication and modular exponentiaition)? Your help is greatly appreciated. Thanks, -Anil Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort.

RE: Archives & web interface for SSL-User group

I got it. http://marc.theaimsgroup.com/?l=openssl-users Thanks, Anil From: [EMAIL PROTECTED] on behalf of Anil Punjabi Sent: Thu 5/20/2004 12:08 PM To: [EMAIL PROTECTED] Subject: Archives & web interface for SSL-User group Hi all, Is there a way I

Archives & web interface for SSL-User group

Hi all, Is there a way I can access the old archived SSL-User messages? Also, is there a web based interface to it, where all messages on one topic are grouped together. Any suggestions to achieve such results would be appreciated. Thanks, Anil

RE: BIO_do_connect fails

Hi Scott, Just curious - what book are you using? Thanks, Anil From: [EMAIL PROTECTED] on behalf of Scott Morgan Sent: Thu 5/20/2004 7:46 AM To: [EMAIL PROTECTED] Subject: BIO_do_connect fails I'm new to sockets programming and OpenSSL so I'm

load CA certificate into IE & Netscape.

Hi All, I am using Apache1.3.19 with modssl2.8.4 and openssl0.96 + jserv.I have generated CA ,Server certificates and key. I would like to load CA certificate into IE and Netscape browsers using servlets.I ran servlet to set content-type application/x-x509-ca-cert.It didn't work and i even set "A

IE5.0(cipher strength 40)

Hi All; I have problem with IE5.0(cipher strength 40) on win98/NT platforms.Rest works fine. httpd.conf: SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP+eNULL in httpd.conf list of chipers openssl>openssl ciphers -v ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+L OW:+SSL

Load CA IE and NetScape

Hi All, I am using OpenSSL with Apache on Win32. OpenSSL 0.9.6, mod-ssl 2.8.2, Apache 1.3.19. I have generated CA using openssl. Installed CA certificate in the server by editing httpd.conf SSLCACertificatePath confsslprivate SSLCACertificateFile confsslCAcert.pem. Can any one suggest me, how

Refresh secured page causing problem

Hello, I am using apache_1.3.19 with modssl and openssl-0.96b.I have strange problem, when i hold the refresh button (F5) for about 1 minute to refresh the secured page then it throws memory exception. This problem is easily reproducible when we refresh the same secure page at same time from the

apache dies on win2k and pro with ssl enabled

exception. I don't know whether it is a common problem with apache+ssl or not. I will be very happy if somebody can help me with is problem. with regards, anil soleti __ Terrorist Attacks on U.S. - How can you help? Donate cash, emergency r

apache dies on win2k and pro with ssl enabled

exception. I don't know whether it is a common problem with apache+ssl or not. I will be very happy if somebody can help me with is problem. with regards, anil soleti __ Terrorist Attacks on U.S. - How can you help? Donate cash, emergency r