SHA-2 support in openssl?

2009-11-17 Thread smitha daggubati
Hello all, Does openssl have support for SHA-2. ? I know that SHA-2 is part of the crypto library but looking at the way the context is setup in ssl_ctx_new we are setiing up ret->sha1=EVP_get_digestbyname("ssl3-sha1")) So is there a way to establish an openssl connection using SHA-2 currently

Re: FIPS

2009-02-27 Thread smitha daggubati
thank you all for your time On Fri, Feb 27, 2009 at 8:55 PM, Steve Marquess wrote: > Kyle Hamilton wrote: > > The answer to your question is: there might be, but this is FAR > > beyond the level where anyone other than a specialist will be able to > > help you. > > How true. I've hesitated to we

FIPS

2009-02-26 Thread smitha daggubati
Hello all, I am going through the FIPS userguide and security policy documents and have a few questions. We have a proprietary kernel where we already have ported the openssl code. Our proprietary kernel is a monolithic kernel and to port the openssl library we had to modify the openssl code. A sim

Re: FIPS Server

2009-02-24 Thread smitha daggubati
possible then? On Mon, Feb 23, 2009 at 3:13 AM, Kyle Hamilton wrote: > On Sun, Feb 22, 2009 at 7:56 AM, smitha daggubati > wrote: > > Thanks David and kyle for your time. > > Kyle, > > "though current practice includes "procurement", not necessarily > >

Re: FIPS Server

2009-02-22 Thread smitha daggubati
er must also be > FIPS-validated, which means that it must use a validated cryptographic > module in accordance with that module's security policy. > > -Kyle H > > On Thu, Feb 19, 2009 at 10:23 PM, smitha daggubati > wrote: > > Hello all, > > I have a gener

FIPS Server

2009-02-19 Thread smitha daggubati
Hello all, I have a general query regarding FIPS mode. I am running an simple openssl https server based on openssl that services https requests from window clients. I have the following setting in my windows XP "Use FIPS comliant algorithms for encryption, hashing and signing set to 1" . Using IE