Re: [openssl-users] Freeze to mailing list memberships

On 26/11/14 02:05, Salz, Rich wrote:> We will soon be freezing the mailing list memberships for a couple of days. We are moving to a new server and upgrading the mail infrastructure Are you aware that the headers for the mailman configuration are inconsistent; some specify the previous opens

FIPS mode: failure during build-test of shared library: FIPS_check_incore_fingerprint:fingerprint does not match

I'm working with the Debian/Ubuntu openssl package for Ubuntu 13.10, Saucy, version 1.0.1e. I'm trying to adapt the Debian package-build to produce a FIPS-linked openssl. I've followed the procedure to download, build and install the FIPS canister v2.0.1 which was successful: $ ../../openssl-f

Re: BIO/SSL concepts and multiple connections

Thanks, but that file is hardly commented at all and just makes it more confusing... On 4 December 2012 00:30, Daniel Black wrote: > On 03/12/12 14:25, TJ wrote: >> Can someone please explain these concepts to me? I can't find much >> that explains it in plain English in

BIO/SSL concepts and multiple connections

Can someone please explain these concepts to me? I can't find much that explains it in plain English in the docs... I have been tasked with altering application code that uses an embedded webserver so that it uses OpenSSL for TLS/SSL functions. Being an embedded system with limited resources, I wa

Incore adjust?

In the previous version of the FIPS module (openssl-fips-1.2.3), the incore script had an incore_adjust value. The new version (openssl-fips-2.0.1) is a perl script and I cannot see how to adjust the offset for our processor. Can anyone point me in the right direction here? ___

Re: SP 800-90 DRNGs

Yes, well I was led to believe that there was no advantage in having the FIPS module if our product was being independently validated anyway. I'm finding out now that's not true, so I'm putting it back in. Thanks Steve. TJ On 25 October 2012 02:33, Steve Marquess wrote: > On 1

Re: connection with two-way SSL authentication in OpenSSL

You might want to look at EAP-TLS. On 12 October 2012 03:55, Jakob Bohm wrote: > On 10/11/2012 4:48 PM, Abyss Lingvo wrote: >> >> Hi All >> >> Does anybody know how establish connection with two-way SSL >> authentication in OpenSSL? >> I have read chapter 5 "SSL/TLS programming" in "Network secur

Re: fipscanister.o: file not recognized

On 7 September 2012 23:54, Steve Marquess wrote: > On 09/07/2012 12:24 AM, TJ wrote: >> I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). >> >> ./Configure no-asm no-hw linux-generic32 >> make -j1 -C openssl-fips > > Might as well stop ri

fipscanister.o: file not recognized

I'm doing a cross platform FIPS build (FIPSv2.0.1 with OpenSSL 1.01c). ./Configure no-asm no-hw linux-generic32 make -j1 -C openssl-fips seems to build ok and produces the fipscanister.o etc in the openssl-fips/fips directory. So far so good, but then cd openssl && \ ./Configure fips no-asm no-h

Re: C API to determine OpenSSL version?

e this helps, TJ ~ No day in which something is learned is ever wasted. -TJ Saunders ~ __ O

Re: Specifications of the .pem container file

.g. for PEM files). You may also be interested in the Public Key Cryptography Standards (PKCS), some of which define formats for bundling together various cryptographic materials: http://en.wikipedia.org/wiki/PKCS In particular, PKCS#7 and PKCS#12 may be useful for you. Hope thi

Whya are there .so.2, .so.4 and .so.0?

them from one another? I am trying to build h323 apps and getting all sorts of "library not found errors" concerning .so.2 and .so.4. tj __ OpenSSL Project http://www.openssl.org Us