openssl 3.0.3 minor patches to build on SCO OpenServer 5.0.7

> From: "Matt Caswell" > Subject: Re: openssl 1.1.1 minor patches to build on SCO OpenServer 5.0.7 > > Hi Kevin, > > The patch in s_socket.c is likely to be acceptable. It looks reasonable > to me, it may well be useful on other systems and can probably be &g

Re: openssl 1.1.1 minor patches to build on SCO OpenServer 5.0.7

to see if the patches look good, accept feedback, etc., and determine if there's a chance for merge (before generating a PR on a system that can interact with github). -- Kevin R. Bulgrien

openssl 1.1.1 minor patches to build on SCO OpenServer 5.0.7

---- I have made a branch on github, so that's how I know the first patch is not needed. Feedback? -- Kevin R. Bulgrien

iOS Bitcode support

Hello, Does the OpenSSL group have any experience or guidance on how to build OpenSSL 3 for Apple iOS Bitcode support? Regards, Kevin Millson

SHA1 Hashing in FIPS Provider

ncorrect? And in fact, all use of SHA-1 with FIPS is disallowed? Regards, Kevin Millson.

OpenSSL 3 FIPS on iOS

Hello All, Has anyone tried using the FIPS provider on iOS and got it uploaded and successfully reviewed by Apple? Apple won't let you just put the 'fips.dylib' in your app's bundle so we've wrapped it in a iOS Framework Bundle, which solves some of the problems. But Apple are scanning the dyl

Re: SM2/3/4 algorithm based TLS connections

Dear Matt Thank you for the quick reply and confirmation. Regards Kevin > Am 29.06.2021 um 12:02 schrieb Matt Caswell : > >  > >> On 29/06/2021 10:29, Kevin Lengauer wrote: >> Dear openssl-team and users >> Is it possible with OpenSSL 1.1.1k to do a TLS handsh

SM2/3/4 algorithm based TLS connections

; protocol is not part of OpenSSL (yet) based on this github issue: https://github.com/openssl/openssl/issues/12473 Thanks for any responses and help. Best regards Kevin

Using keylog_callback with LD_PRELOAD

0x7fd1aa7bf139 Return ctx 0x55809c1310c0 User-agent: * Disallow: /source/old Disallow: err404.html Any ideas? Thanks, -- Kevin Grigorenko

Re: [openssl-users] using a random number file for generation of keys/certificates

Can I not use the file directly, as to not rely whatsoever on the OS’s PRNG ? > On Sep 3, 2015, at 11:23 AM, Viktor Dukhovni > wrote: > > On Wed, Sep 02, 2015 at 09:53:05PM -0700, Kevin Long wrote: > >> I've been asked to use a hardware random number gener

Re: [openssl-users] using a random number file for generation of keys/certificates

ch are encased in epoxy ... you > have no way to verify that they're doing what they say they are. The data > quality coming out of those is fairly suspect in my mind (despite any > positive results from e.g. dieharder, etc). > > On Wed, Sep 2, 2015 at 9:53 PM, Kevin Long

[openssl-users] using a random number file for generation of keys/certificates

Hello, I’m using openssl to administer a root/intermediate CA and I use the certificates for a number of web servers and other applications. All of my users install my root CA certificate for trust. I’ve been asked to use a hardware random number generator to create the keys/certificates go

Re: [openssl-users] Cygwin untar of 1.0.1n gives "tar: A lone zero block at 46120"

.0.1n.tar.gz ~ $ >> >> On Fri, Jun 12 at 06:49 PM (UTC), "Kevin Layer" wrote: >> >> > It seems to build fine, though. >> > >> > I downloaded it via different means (directly to a Windows >> > machine and >> > on CentOS

[openssl-users] Cygwin untar of 1.0.1n gives "tar: A lone zero block at 46120"

It seems to build fine, though. I downloaded it via different means (directly to a Windows machine and on CentOS 6.6) and it did it on all copies. Just curious if anyone else had the issue. I'm running Cygwin 1.7.35 on Server 2008 R2. ___ openssl-user

Re: [openssl-users] FIPS mode restrictions and DES

"libraries" to be FIPS-validated, perhaps as separate crypto modules. Kevin On Tue, Apr 14, 2015 at 8:51 AM, jonetsu wrote: > Salz, Rich wrote > > As the old joke goes, "if you have to ask, you can't afford it." > > Well, exploration can be free.

Re: [openssl-users] FIPS mode restrictions and DES

"libraries" to be FIPS-validated, perhaps as separate crypto modules. Kevin On Tue, Apr 14, 2015 at 8:51 AM, jonetsu wrote: > Salz, Rich wrote > > As the old joke goes, "if you have to ask, you can't afford it." > > Well, exploration can be free.

Re: [openssl-users] openssl 1.0.2a vc++ 9 (VS 2008) 64-bit build failing

same errors. After your reply, I upgraded to the latest version, 2.11.8, and it worked. Thanks for reinforcing my assumption and putting me back on track. Regards, Kevin -- -Original Message- From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Thomas J. Hruska

[openssl-users] openssl 1.0.2a vc++ 9 (VS 2008) 64-bit build failing

about this project to really debug the build much further. So, thanks in advance! Regards, Kevin ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL version 1.0.1k released

With a more modern 64-bit MS compiler, I still get a failure. I see that Cygwin released theirs, so I'm guessing this is a MS compiler issue. cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_A

Re: [openssl-users] OpenSSL version 1.0.1k released

Anyone having trouble building on Windows? cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /Ox /O2 /Ob2 -DOPENSSL_THREADS -DDSO_WIN32 -W3 -Gs0 -GF -Gy -nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -DL_ENDIAN -D_CRT_SECURE_NO_DEPRECATE -DOPENSSL_USE_APPLINK -I. -DOPENSSL_NO_

Re: CMS question on encrypting and signing

cumented... Can someone point me in the right direction to do this efficiently? Even though I’m not passing a lot of data in these messages, I do need to keep the latency from processing down. Thanks, -Philip P.S. Back in May it sounded like Kevin Le Gouguec was trying to do something similar,

Test errors compiling FIPS-capable OpenSSL package on Ubuntu 12.04

I'm wondering if perhaps this test case doesn't detect fips mode properly, and shouldn't be running? Any feedback would be greatly appreciated - pretty new to rolling my own OpenSSL, so want to verify that I'm not doing something very wrong to arrive at this issue. Thanks,

Re: [1.0.2 beta 1] double free when using CMS with OAEP

ubject: Re: [1.0.2 beta 1] double free when using CMS with OAEP On Mon, May 12, 2014, Kevin Le Gouguec wrote: > (This is on 1.0.2 beta 1 as found on openssl.org/source) > > I'm getting a double free error when building a CMS EnvelopedData with RSA > OAEP. Here's how I'm se

[1.0.2 beta 1] double free when using CMS with OAEP

(This is on 1.0.2 beta 1 as found on openssl.org/source) I'm getting a double free error when building a CMS EnvelopedData with RSA OAEP. Here's how I'm setting things up (error checking left out for brevity): int flags = CMS_BINARY | CMS_USE_KEYID | CMS_PARTIAL | CMS_KEY_PARAM; CMS_Content

Re: [1.0.1] Nested CMS structures

;Tom Francis" To: openssl-users@openssl.org Sent: Friday, May 2, 2014 2:11:25 PM Subject: Re: [1.0.1] Nested CMS structures On May 2, 2014, at 3:19 AM, Kevin Le Gouguec wrote: > (tl;dr : see questions at the end) > > I'm trying to build nested CMS structures, as in, having a

[1.0.1] Nested CMS structures

(tl;dr : see questions at the end) I'm trying to build nested CMS structures, as in, having a file F, a signer S and a recipient R, I want to build a CMS-compliant message M which looks like: M = SignedData(ECI, SignerInfo(S)) ECI = EncapsulatedContentInfo( EnvelopedData( RecipientInfo(R) ) Wh

Re: [1.0.1f] Building a certificate request with RSA-OAEP as Public Key Algorithm

tl;dr: is it worth using OpenSSL to build a CMS EnvelopedData message when the key transport algorithm is RSA-OAEP? If so, how? Long version: After some more digging, I'll try to make my request more precise. Some context: I am generating a RSA key pair with an external engine (say a HSM with

Re: [1.0.1f] Building a certificate request with RSA-OAEP as Public Key Algorithm

Hello all, Trying to build a Certificate Signing Request using external means for crypto operations (eg key pair generation, signing). I'm relying on demos/x509/mkreq.c and the code in crypto/x509/. What I want to do is: - use external engine to generate RSA key pair - build X509_REQ as per mk

Re: [1.0.1f] RSA-PSS signing through EVP interface

I understand correctly, my mistake was assuming that a EVP_PKEY_CTX is a structure used only for key generation, rather than an all-purpose public key structure used for all operations. Sorry for spamming the list! - Original Message - From: "Kevin Le Gouguec" To: openssl-use

[1.0.1f] RSA-PSS signing through EVP interface

Hello, I'm having a hard time figuring out how to use the EVP interface to get a RSA-PSS signature. I can successfully call RSA_padding_add_PKCS1_PSS, but when I try to call the various macros for EVP_PKEY_CTX_ctrl. The thing is, I'm not sure in which order (if any) these functions should be c

SSL errors after migrating from 0.9.8k to 1.0.1 (Ubuntu 10.04 to 12.04)

help and I've searched endlessly for similar issues and found none. Also, I don't have access to the clients logs. Regards, Kevin Pattison

Re: OpenSSL PKI Tutorial updated

ar though, this has been a helpful tutorial for a noob to PKI. Thanks! Kevin On Sun, Apr 21, 2013 at 5:56 AM, Stefan H. Holek wrote: > Hi All! > > I have updated the OpenSSL PKI tutorial at readthedocs. The tutorial takes > a novel approach without ever referring to openssl.cnf or CA.pl

Re: How to create crt and pem

Thank you Dave. This is all new to me so your information is really helpful. Regarding your response: My files are in pem format. The default server.xml has I'll leave that in since it seems to be what I need http://www.digicert.com/ssl-support/pem-ssl-creation.htm talks about how to concatena

How to create crt and pem

Hi all. I'm a new user and am confused on how to generate .crt and .pem file. I am using Apache Tomcat with OpenSSL. I have a domain with a DNS entry pointing to the IP of my webserver. Their support have given me 3 files intermediate.txt -> intermediate certificate? milestone.lobby3.raknet.com.

[no subject]

Is there an SSL command that can be used to display CA cert information extracted from the certificate path associated with a cert?

Any OpenSSL update when FIPS object module v2.0 is released?

When the validation is obtained for FIPS Object Module v2.0, and that version is officially released, will there also be an update to OpenSSL? Or are those two now independent as long as v1.0.1 is used with the FIPS module? Thanks, Kevin

Re: FIPS fingerprint in .data not .rodata

On Tue, Feb 21, 2012 at 3:51 PM, Andy Polyakov wrote: >> Another option (but shoot it down if its bogus :-): I noticed that if I >> compile >> fipscanister.o without "-fPIC", then the const variables do get placed in >> the (really readonly) .rodata section as desired. I thought maybe if I did >>

Re: FIPS fingerprint in .data not .rodata

On Tue, Feb 21, 2012 at 1:11 PM, Andy Polyakov wrote: >> Though in FIPS 2.0 there is new option that might work in this case. >> Besides switching to another compiler that is. Introduced to rectify >> situation with rodata segments not being position-independent on Win64, >> defini

Re: FIPS fingerprint in .data not .rodata

On Mon, Feb 20, 2012 at 5:18 AM, Andy Polyakov wrote: > > >>> Though in FIPS 2.0 there is new option that might work in this case. > >>> Besides switching to another compiler that is. Introduced to rectify > >>> situation with rodata segments not being position-independent on Win64, > >>> defining

Re: FIPS fingerprint in .data not .rodata

On Sun, Feb 19, 2012 at 3:50 PM, Kevin Fowler wrote: > > > On Sun, Feb 19, 2012 at 11:52 AM, Andy Polyakov wrote: > >> >>> After I had gotten the extra "-f" options from Harvey for this >> platform >> >>> (BSD-powerpc), >> >

Re: FIPS fingerprint in .data not .rodata

On Sun, Feb 19, 2012 at 11:52 AM, Andy Polyakov wrote: > >>> After I had gotten the extra "-f" options from Harvey for this platform > >>> (BSD-powerpc), > >> Using -f[data|function]-sections options is inappropriate as they > >> undermine the idea of "capturing" fipscanister code and rodata betw

Re: FIPS fingerprint in .data not .rodata

On Sat, Feb 18, 2012 at 6:13 PM, Andy Polyakov wrote: > > The key thing I realized is that the incore script that comes with the > FIPS > > Object Module v2.0 tarball > > handles both native AND cross-compile scenarios. > > Even though FIPS 2.0 util/incore is capable of handling arbitrary ELF >

Re: FIPS fingerprint in .data not .rodata

On Fri, Feb 17, 2012 at 10:25 PM, Dr. Stephen Henson wrote: > On Fri, Feb 17, 2012, Kevin Fowler wrote: > > > Thanks Harvey, > > This seems to have worked as far as getting the .rodata section used. > This > > is what I see now: > > > > 001b5740 g O .r

Re: FIPS fingerprint in .data not .rodata

es but never appears to modify the executable or library. I've also tried static linking of libcrypto.a into the executable - same result. Help appreciated! Kevin On Thu, Feb 16, 2012 at 4:47 PM, Harvey Shepherd < harvey.sheph...@aviatnet.com> wrote: > Hi Kevin, > > I enco

fips-capable libcrypto.so build in netbsd

! I've searched but cannot find any sign of anyone coping with similar issues. Kevin

Re: FIPS/OpenSSL include directories

I'm asking here about the header files with the same name in both directories. I see that there are three fips-specific header files in the fips-2.0 include directory - which I would guess is what is getting picked up by the last "-I" in CFLAGS... On Sun, Jan 29, 2012 at 2:19 P

FIPS/OpenSSL include directories

? I.e., once I have the library, do I ever need the fips-2.0/include/openssl versions? Thanks, Kevin

B_ENDIAN for powerpc on fips/openssl

t to big-endian, so this may not be an issue. But, since it appeared inconsistent I thought I'd mention it. Thanks, Kevin

Re: FIPS cross-compile: issue with location of system include files

n question... Kevin On Wed, Nov 30, 2011 at 12:01 PM, Kevin Fowler wrote: > I think I know the answer to this but I'm hoping I am wrong. > > I am building the FIPS Object Module v2.0 (a recent snapshot) on an > x86-linux2 host for an embedded PowerPC target running NetBSD. Th

FIPS cross-compile: issue with location of system include files

Or is there a simpler solution I am overlooking? If not, I expect I will need to modify the Makefile, and thus invalidate the module... Kevin

Re: understanding fipsld usage

Thanks Steve, I have a follow-up below - just checking I have it straight. On Mon, Nov 21, 2011 at 10:11 AM, Dr. Stephen Henson wrote: > On Fri, Nov 18, 2011, Kevin Fowler wrote: > >> Let me first say I have read the User Guide and Security Policy >> repeatedly, as well as t

understanding fipsld usage

lated/re-embedded in the application itself? Thanks Kevin __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Ma

Re: "make test" fails for FIPS-capable OpenSSL build

Thank you - that was my problem On Tue, Nov 15, 2011 at 9:43 AM, Dr. Stephen Henson wrote: > On Mon, Nov 14, 2011, Kevin Fowler wrote: > >> Hi, >> I successfully built the FIPS 2.0 module (2010), its tests passed, and >> it was installed correctly in /usr/local/ss

"make test" fails for FIPS-capable OpenSSL build

stand what I may be doing wrong. I have OPENSSL_FIPS set to 1 in my environment. I am building/running on CentOS 5.6. Thanks, Kevin

"make test" fails for FIPS-capable OpenSSL build

stand what I may be doing wrong. I have OPENSSL_FIPS set to 1 in my environment. I am building/running on CentOS 5.6. Thanks, Kevin

Re: DSA Java (Sign Message) C OpenSSL (Verify Signature)

Both are win PC (x64) but cygwin gdb is probably (x86) Thanks for any suggestions! I'm pretty stumped at the minute. > > Regards, > -- > Kevin >

DSA Java (Sign Message) C OpenSSL (Verify Signature)

ad a idea of where to begin? Regards, -- Kevin

problem building 1.0.0d on Windows 7 64-bit

Btw, on the same machine, 0.9.8r builds fine. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

problem building 1.0.0d on Windows 7 64-bit

expression tmp32dll\md5-x86_64.asm(775) : error A2206: missing operator in expression Microsoft (R) Macro Assembler (AMD64) Version 8.00.40310.39 Copyright (C) Microsoft Corporation. All rights reserved. NMAKE : fatal error U1077: 'ml64' : return code '0x1' S

Problems building 1.0.0a on 64-bit Windows XP Pro

I searched the archives and didn't see anything like this. I can build on 32-bit XP with no problems. set ASM=ml64 /c /Cp /Cx /Zi perl crypto\md5\asm\md5-x86_64.pl tmp32dll\md5-x86_64.asm Use of uninitialized value $flavour in pattern match (m//) at crypto\md5\asm\md5-x86_64.pl l

RE: certs with the same Subject Name

d correct one. In my case, it works fine. Kevin -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Chris Bare Sent: Friday, June 11, 2010 9:53 AM To: openssl-users@openssl.org Subject: Re: certs with the same Subject Name >

Header file confliction for Openssl 1.0 and winsock2.h

, etc. At least OpenSSL should check all those pre-definitions to decide whether winsock.h or winsock2.h to be included or even none. Kevin __ OpenSSL Project http://www.openssl.org User Support Mailing

RE: memory growing when using SSL connections

I had a similar issue that was fixed by moving the CRYPTO_cleanup_all_ex_data command to the end of the application (as has been suggested). Have you tried running Valgrind with the application? This may tell you where the memory leak is occurring. --Kevin p.s. You will need to compile

Running in production with -DPURIFY?

It is reasonable/Ok to run a production system built with -DPURIFY? Is that extra bit of entropy critical? Sincerely, Kevin Regan F5 Networks

certificatate shows as V1 not V3

..\private\CA.key -CAcreateserial -out test.crt can anybody help? Kevin Potter UK Network Security Produban Phone +44 (0)1908 345167 Fax +44 (0)1908 346062 Mobile +44 (0)7803 886796 Email kevin.pot...@produban.co.uk Please consider the environment before printing this e-mail

Re: question about generating keys/certs to go with Rescorla's book examples

s book should work for you. I hope this patch is useful to others. Kind regards, --kevin -- GnuPG ID: B280F24EMeet me by the knuckles alumni.unh.edu!kdcof the skinny-bone tree. http://kdc-blog.blogspot.com/ -- Tom Waits diff -Naur c-examples.orig/Makefile c-e

RE: openssl connection problem...

Hi Carol, I believe you can add -state as a parameter to the client and server side to see what "phase" things are happening in. Kevin. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Carol Walter Sent

TLS SSL and virtual hosts

rity warning, but I think the ability to have multiple hosts under one certificate would be far more beneficial! Thanks in advace for the help opensslers, Kevin

Calling SSL_CTX_load_verify_locations multiple times?

eeing the following error: SSL error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned Is what I am trying to do supported? If so, is there something I'm doing wrong? If not, is there another way to accomplish this (adding CA certificates from multiple files into a single SSL context)? Th

OpenSSL for Win XP Professional

Openssl 9.7c. I get the error "Unable to load config info" "Unable to find 'distinguished_name' in config. This while trying to generate a certificate for self signing after a key generation. Is there a fix for this? I assume upgrading to 9.8i will fix this, but I don't know how to install a

question about generating keys/certs to go with Rescorla's book examples

ct available. It should be very easy to understand how I am generating the keys/certs here. Type "make test-setup" to generate the keys/certs. Type "make test-clean" to clean everything up. I would appreciate it if somebody could point out where I am going wrong. Thanks! --ke

Semantics of SSL_get_peer_certificate() - and fingerprinting

the public key that the server actually used to connect with me? 2) Is it cryptographically acceptable practice to for the client to remember (and use for future verification) just the SHA1 digest of the public key, rather than the public key in its entirety? Thanks in advanc

Question about V_CHECK in ENGINE.H

fns->static_state) goto skip_cbs; \ if(!CRYPTO_set_mem_functions(fns->mem_fns.malloc_cb, \ Any comments or clarifications will be appreciated. Thanks, Kevin Greaney

multiple inputs multiple outputs

overwrites the original. Because there are thousands of files, I don't want to have to type a password in for each file encrypted. Does anyone know of any possible solutions to this? Best Kevin

RE: Possible memory leak with RSA_private_encrypt?

ithin /usr/lib/libcrypto.so.0.9.8) ==21592==by 0x44B8631: (within /usr/lib/libcrypto.so.0.9.8) ==21592==by 0x44BB0EA: RSA_private_encrypt (in /usr/lib/libcrypto.so.0.9.8) ==21592==by 0x80490E7: main (in /shared/rsa_test1) --Kevin -Original Message- From: Kevin Regan Sent: S

RE: Possible memory leak with RSA_private_encrypt?

I found the issue. There is a custom patch used locally that seems to be leaking memory. I'm going to find the responsible coworker and make them pay for wasting out time. ;-) --Kevin -Original Message- From: Kevin Regan Sent: Monday, January 14, 2008 10:59 AM To: 'ope

RE: Possible memory leak with RSA_private_encrypt?

e memory definitely seems to be leaked in the RSA_private_encrypt call. --Kevin -Original Message- From: [EMAIL PROTECTED] on behalf of Kevin Regan Sent: Sun 1/13/2008 12:30 AM To: openssl-users@openssl.org Subject: Possible memory leak with RSA_private_encrypt? There is a good chance that I

Possible memory leak with RSA_private_encrypt?

There is a good chance that I am doing something wrong. However, the program below produces the following output from valgrind with OpenSSL v0.9.8g: ==12647== 1,032 bytes in 43 blocks are definitely lost in loss record 2 of 2 ==12647==at 0x4421846: malloc (vg_replace_malloc.c:149) ==12647==

0.9.7M or 0.9.8E

ovide me with the FIPS code even though it has not been officially certified. Should I just put the work in now and go to 0.9.8E? Any comments, considerations, or experiences would be most welcome. Thank you, Kevin Greaney

Re: How to check if the certificate is self signed

On 10/25/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Wed, Oct 25, 2006, Goetz Babin-Ebell wrote: > > It is always possible to have more than one certificate with the > same subject name. > > Only the combination issuer name / serial number must be unique. > (Last time I checked OpenSSL

Per-connection and per-server commands

Which of the following do I need to call for every connection and which once per server? TLSv1_server_method SSL_CTX_new set_tmpDH SSL_set_fd SSL_new __ OpenSSL Project http://www.openssl.org User

SSL_accept to return new socket

I need a new socket from SSL_accept the same way accept gives me a new socket, so I have a new socket for each user. How do I do this? __ OpenSSL Project http://www.openssl.org User Support Mailin

Re: BN_bin2bn problem

On 10/20/06, Nils Larsch <[EMAIL PROTECTED]> wrote: Olga Kornievskaia wrote: ... > Ok. Thanks. I was hoping that a leading zero was the answer to my real > problem which is. I'm using the above "p" and a generator "g" = 2 (both > are well-known group 2 DH parameters described in the RFC 2412).

undefined references compiling demo program

, libssl.a, and libssl.so.0.9.8 installed in /usr/local/ssl/lib. I'm new to openssl, so any help would be greatly appreciated. Thanks -- Kevin King [EMAIL PROTECTED] __ OpenSSL Project

Re: Solaris 10 x86-64 support?

These changes allow us to build on Solaris 10 Opteron, courtesy of Ahmon Dancy: --- openssl-0.9.7f/ConfigureSat Mar 12 03:28:21 2005 +++ openssl-0.9.7f-dancy/Configure Fri Mar 25 19:23:47 2005 @@ -198,6 +198,7 @@ "solaris-sparcv8-cc","cc:-xarch=v8 -xO5 -xstrconst -xdepend -Xa -DB_ENDIAN

Solaris 10 x86-64 support?

Anyone running on the Solaris for AMD Opteron? If so, what version and configuration do you use? Thanks. -- Kevin Layer [EMAIL PROTECTED]http://www.franz.com/ Franz Inc., 555 12th St., Suite 1450, Oakland, CA 94607, USA Phone: (510) 452-2000 FAX: (510) 452-0182

RE: cipher list

Hi, I would start at the following page in the documentation: http://www.openssl.org/docs/ssl/SSL_get_ciphers.html It not only gives you the details for get_ciphers, but it also provides link to the related APIs. Kevin. -Original Message- From: [EMAIL PROTECTED

Re: OpenSSL as part of OpenSA using Windows 2000

http://www.openssl.org > User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] OpenSA has horrible support, as in the non-existant type. Try downloading and installing the Web server from ww

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

me task as pkwrite.    Thanks for pointing me the right way.  Are you aware of any pitfalls or tips for getting what I want?    Thanks again   "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: On Mon, Oct 25, 2004, Kevin Fries wrote:> Yep. I used: > > .\pkwrite client.pem 12345

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

pem\pem_lib.c:637:Expecting: CERTIFICATE2260:error:23069068:PKCS12 routines:PKCS12_create:invalid null argument:.\crypto\pkcs12\p12_crt.c:85: I do wish the answer was that wasy, though. ;-)"Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: On Mon, Oct 25, 2004, Kevin Fries wrote:> &g

Re: Has anyone been able to run pkwrite.c with 0.9.7d?

alls to the openssl libraries seem to caus ea crash.  This was mentioned in a thread from months ago, I think.   Thanks again for the help. Kevin Fries   "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: On Fri, Oct 22, 2004, Kevin Fries wrote:> I'm hoping someone has a clue fo

Has anyone been able to run pkwrite.c with 0.9.7d?

me?  The openssl.exe itself seems to work fine.   Thanks in advance   Kevin Do you Yahoo!?vote.yahoo.com - Register online to vote today!

Unable to verify certificate

certificate) Can anyone on the forum help exlain what these mean? - I am trying to access this site via a WAP Browser using an WAP Proxy and I get the following error - Invalid certificate chain received -- Best Regards, Kevin Quinn Email [EMAIL PROTECTED

REMOVE

REMOVE

Re: Storing keys and certs on USB tokens using openssl(1)

Keys at least: there's an openssl engine for opensc aKeys at least: there's an openssl engine for opensc and one for pkcs11 libraries at www.opensc.org Kevin On Monday 02 August 2004 10:42 am, you wrote: > Hi openssl users, > > Is it possible to generate keys on USB tok

RE: Linking Error.

Layla, I haven’t used VC++ in a while…and have never used it from the cmd line…but I would try something from the makefile suggestion below.  Again, I’m not familiar with VC++, but will this work:   cl –I/path/to/openssl/headerfiles clientf.cpp   ??   -kevin   From

New to OpenSSL-Need a little help

there any special treatment I need to give the SSL_write/read ops?   I’m going out to buy a book now, but I’m sure there will be other questions from me.  Thanks for any help!   -kevin  

Syntax with the SSLRequire directive

x27;s a mix of C and Perl also some references to RFC822 Backus-Naur Form. TIA Kevin Ericson __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED

X509_NAME_oneline

I read in a posting somewhere that X509_NAME_oneline() is depracated. Can someone tell me the preferred alternative? Thanks, K.C. __ OpenSSL Project http://www.openssl.org User Support Mailing Li

Re: Using OpenSSL and smartcards with pkcs#11

Did you check out the documentation provided by opensc? http://www.opensc.org/docs.php You may want to use the opensc lists as well, since openssl plays a supporting (though large) role in the process. Kevin On Thursday 15 January 2004 04:34 am, Amira Solomovici wrote: > Hi, > > T

  1   2   >