Help needed with X509_STORE_CTX structure

HI, i need to set the current_issuer field in an object of the X509_STORE_CTX structure. Can any suggest the setter function for this. Also, current_crl_score and current_reasons also are needed to be 0 for me. Can you suggest setters for these variables. Thanks, Saketh. Notice: This e-mail t

need help with X509_STORE_CTX structure.

HI, i need to set the current_issuer field in an object of the X509_STORE_CTX structure. Can any suggest the setter function for this. current_crl_score and current_reasons also are needed to be 0 for me. Can you suggest setters for these variables. Thanks, Saketh. Notice: This e-mail togeth

X509_STORE_CTX object doubt

Hi, for X509_STORE_CTX object we have a function X509_STORE_CTX_set_cert to set the cert pointer (x509* cert) is there any get function for this variable. X509_STORE_CTX_get_current_cert is not for cert. Because, there is another variable current_cert. thanks, Saketh. Notice: This e-mail to

bignum to evp key

HI, i have EvpKeyPair from GenerateEvpKeyPair(dh_p, dh_g, &pEvpKeyPair) How can I get the public key and priv key from keypair. The below function gives them as bignums but not Evp_pkey. (EVP_PKEY_get_bn_param(pEvpKeyPair, OSSL_PKEY_PARAM_PUB_KEY, &pubKey) I want pub key and priv keys as evp_p

error with cipher EVP_des_ede3_cbc in openssl 3.0

Hi I am trying to encrypt and decrypt using EVP_des_ede3_cbc() type. iam using openssl3.0 the functions i am using are encryption side: EVP_EncryptInit_ex -> EVP_EncryptUpdate -> EVP_EncryptFinal_ex decryption side: -- EVP_DecryptInit_ex -> EVP_

Re: [EXTERNAL] Re: need some help with the block size value

i am using openssl 3.0 From: openssl-users on behalf of Matt Caswell Sent: Tuesday, February 15, 2022 6:45 PM To: openssl-users@openssl.org Subject: [EXTERNAL] Re: need some help with the block size value On 15/02/2022 12:13, Srinivas, Saketh (c) wrote: >

need some help with the block size value

Hi, i am trying to get the block size of EVP_des_ede3_cbc cipher using the below function but it's not returning anything. EVP_CIPHER_get_block_size(EVP_des_ede3_cbc()) Does anyone have any idea how to. thanks, Saketh. Notice: This e-mail together with any attachments may contain information

does Openssl 3.0 has backward compatiblity.

Does openssl 3.0 supports the openssl 1.0 pkcs12 files. Is it backward compatible. For me it giving error in PKCS12_parse function. thanks, Saketh. Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential an

error with p12 file importing

HI, I am getting this error while importing p12 file PKCS12_parse failed, error : error:0308010C:digital envelope routines::unsupported can anyone explain this? thanks, Saketh. Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Aff

Openssl 3.0 support

Hi, Does openssl 3.0 still support TLSv 1.0 and TLSv1.1. or they are deprecated, because there were some deprecations like sha1 etc. Thanks, Saketh. Notice: This e-mail together with any attachments may contain information of Ribbon Communications Inc. and its Affiliates that is confidential

Doubt regarding ssl options

Hi, what is the difference between SSL_CTX_set_min_proto_version and SSL_set_min_proto_version. How will they effect the SSL handsahke. I can see two versions numbers in the PCAP files, 1. content type is handshake , version v1.0 2. handshake type client hello, version v1.2 what is the

need help with EVP_PKEY_derive function to generate shared key

Hi, i am trying to modify a function which earlier used openss1 to compute shared key the aruguments to the function are: rc_vchar_t *pub , rc_vchar_t *priv ; '// public and private keys. if (eay_v2bn(&dh->pub_key, pub) < 0) goto end; if (eay_v2bn(&dh->priv_key, priv) < 0)

Help with TLS call on openssl3

HI, I am using Openssl3. while Run a TLS call, call connected successfully, but at the end of the call i got the error message: SSL3 alert write:fatal:decode error SSL error (a000126): unexpected eof while reading ERROR on SSL_read err=1 flag=0 Initiating SSL shutdown I think some issue whil

Re: [openssl-users] Query on TLS1.2 and use of DES ciphers

Thanks. Makes sense. But then why are the DES ciphers not listed in the supported cipher list for TLSv1.2 here?https://www.openssl.org/docs/apps/ciphers.html#TLS-v1.2-cipher-suites  truly, Srinivas. On Sunday, 28 June 2015 11:33 PM, "Salz, Rich" wrote: #yiv

[openssl-users] Query on TLS1.2 and use of DES ciphers

-cipher-suites. My question is given the above, how are my s_server and s_client able to connect through using the above cipher and TLS1.2? Is it a bug in the implementation of the s_server and s_client? Thanks.  truly, Srinivas.___ openssl-users mailing

[openssl-users] using openssl to create PKCS#7/CMS on windows

hashed and signed and only needs to be encoded in PKCS7, If yes, for which of the above case and how (please give some pointers on how to go about it). Thanks Srinivas On 1/30/15, Srinivas Rao wrote: > All, > > Please let me know if my below mentioned usage of PKCS7_sign()+adding >

[openssl-users] Wrong usage of PKCS7_add_signature()??

All, Please let me know if my below mentioned usage of PKCS7_sign()+adding signer info is wrong and how. Really appreciate your response. cheers and regards Srinivas On 1/29/15, Srinivas Rao wrote: > OpenSSL experts, > > Here the intention is to get the signed data (raw signature

[openssl-users] PKCS7_add_signature dumps core (windows)

the commented lines is the alternate way for this add signature function - that also dumps core at PKCS7_SIGNER_INFO_set() function. I have no clue as to what am I doing wrong here. Appreciate your help. regards Srinivas ___ openssl-users mailing

OpenSSL 0.9.8e_WIN32 is very slow on windows 2008 R2 server

All, We are using openssl-0.9.8e_WIN32 with Axis to connect the Webserivce using the https end point. We resently upgrade the servers to windows 2008 R2 servers from 2003. The application takes 30-50sec more on windows 2008 R2 servers. I found SSL_connect() API is taking more time on 2008 servers.

How do i upgrade from OPenSSL 0.9.8i to 0.9.8m

Hi, Will the my current OpenSSL 0.9.8i work with Apache HTTP Server 2.2 on solaris 10 update 5?or do i need to upgarde? I have couple of questions. How do i upgarde from OpenSSL 0.9.8i to 0.9.8m? I want to use with Apache HTTP Server 2.2 on Solaris 10 update 5? Sincerely, Srinivas Jonnalagadda

Re: Cam separate instances of apache http server use same Open SSL installation

hi Kyle, how about installing a new OPENSSL 0.9.8i with out disturbing the old one in a new directory and configuring the second apache HTTP server 2.0.63 to communicate with the new one. What are the implications of this and how does this work. Thanks in advance. sincerely, Srinivas

Cam separate instances of apache http server use same Open SSL installation

connecting to ome more installation of tomcat 5.5.9. Is this possible with OpenSSL? Help on this is highly appreciated. Thanks in advance, Sincerely, Srinivas Jonnalagadda __ OpenSSL Project http

Re: apache http server not connecting to correct open ssl --urgent help needed

che/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8b configured -- resuming normal operations Thanks, srinivas Jonnalagadda -Original Message- >From: Nikos Balkanas >Sent: Apr 3, 2009 7:11 AM >To: openssl-users@openssl.org >Cc: openssl-...@openssl.org >Subject: Re: apache http

apache http server not connecting to correct open ssl -- urgent help needed

use /usr/local/ssl. My problem now is when i start both are connecting to openssl 0.9.8b. Please tell me how to connect to both. Thanks, Srinivas Jonnalagadda __ OpenSSL Project http

getting warnings did my make pass for 0.9.8i -- urgent help needed

to date. -bash-3.00$ Thanks, Srinivas J -Original Message- >From: Sander Temme >Sent: Mar 27, 2009 11:43 PM >To: openssl-users@openssl.org >Subject: Re: How to install 2 instances of openssl on the same machine > > >On Mar 26, 2009, at 6:04 AM, Srinivas Jonnalaga

Re: how to uninstall openSSL Urgent help needed

Hi, I am using Sun Solaris version 10. any help i shighly appreciated. Regards, Srinivas J -Original Message- >From: The Doctor >Sent: Mar 26, 2009 5:12 PM >To: openssl-users@openssl.org >Cc: "openssl-...@openssl.org" >Subject: Re: how to uninstall openSSL Urg

Re: How to install 2 instances of openssl on the same machine

Sander, Thanks for providing info. I am using Sun Solaris Version 10. Regards, srinivas jonnalagadda -Original Message- >From: Sander Temme >Sent: Mar 27, 2009 11:43 PM >To: openssl-users@openssl.org >Subject: Re: How to install 2 instances of openssl on the same machine &g

Re: 答复: How to install 2 instanc es of openssl on the same machine

solev this openssl problem the next is that i have 2 different versions of apache http servers. Regards, Srinivas J -Original Message- >From: Kyle Hamilton >Sent: Mar 26, 2009 10:59 PM >To: openssl-users@openssl.org >Subject: Re: 答复: How to install 2 instances of openssl

Re: SSL_connect() fails after upgrade from OpenSSL 0.9.7d to OpenSSL 0.9.8j

Hi Vivek. How  did u upgrade i would like to know the process like how did you uninstall the previous version and install new version. I am sorry fo  you but i neded some inf on how to do this.   Sincerely, srinivas J -Original Message- From: "Vivek Mathew -X (vivmathe - WIPRO at

how to uninstall openSSL Urgent help needed

Hi, I would like to know how to uninstall openssl from my unix machine. Thanks, Srinivas Jonnalagadda __ OpenSSL Project http://www.openssl.org User Support Mailing List

How to install 2 instances of openssl on the same machine

Hi, I need to have 2 separate installations of apache2 http server refereing to 2 different versions of openssl. One is using 0.9.8b and the other uses 0.9.8i. How do i install open ssl in such a scenario. Help is urgently needed. Thanks in advance, Regards, Srinivas Jonnalagadda

FIPS Server

Hello all, I have a general query regarding FIPS mode. I am running an simple openssl https server based on openssl that services https requests from window clients. I have the following setting in my windows XP "Use FIPS comliant algorithms for encryption, hashing and signing set to 1" .

Re: Which version of SSL is supported in OpenSSL 0.9.7e

Yes it does From: Alex Chen To: openssl-users@openssl.org Sent: Friday, 20 February, 2009 1:00:04 AM Subject: Which version of SSL is supported in OpenSSL 0.9.7e We are using OpenSSL 0.9.7e and would like to know if it supports SSL 3.0? Alex

FIPS Server

Hello all, I have a general query regarding FIPS mode. I am running an simple openssl https server based on openssl that services https requests from window clients. I have the following setting in my windows XP "Use FIPS comliant algorithms for encryption, hashing and signing set to 1" .

FIPS Server

Hello all, I have a general query regarding FIPS mode. I am running an simple openssl https server based on openssl that services https requests from window clients. I have the following setting in my windows XP "Use FIPS comliant algorithms for encryption, hashing and signing set to 1" .

Re: SSL_accept Failure error:FFFFFFFF:lib(255):func(4095):reason(4095)

Yes, I have initialized the SSL library, SSL * init_context(char *keyfile, char *password) { . /* Initialize , load libraray and error strings */ /* OpenSSL_add_all_algorithms(); */ SSL_library_init(); SSL_load_error_strings(); .. } Hello, > I am new to OpenSSL.

SSL_accept Failure error:FFFFFFFF:lib(255):func(4095):reason(4095)

it throws the following error. I could not find the reason string for error code 4095. return code from SSL_accept (rr = -1) SSL_get_error = 1 SSL_accept Failure error::lib(255):func(4095):reason(4095) Can you guide me how to handle this case ? Thanks in advance Srinivas

RAND_pseudo_bytes function

Hi all, Can i use this function RAND_pseudo_bytes for generating a pseudo random number of 46 bytes? I think, this function is used for generating large keys of 1024 and above. Are there any limitations if i use this function for generating 46 byte pseudo randam number? Many Thanks and Regards,

shatest.c - SHA_Update()

Hi all, I am looking into the shatest.c file since i want to make use of sha-1 message digest. In this file openssl-0.9.6d/crypto/sha/shatest.c, 141 for (i=0; i<1000; i++) 142 SHA_Update(&c,buf,1000); 143 SHA_Final(md,&c); For chunks of data we can call

Error: unable to get local issuer certificate??

Hi, I have a problem in using the openssl with Netscape Certificate Server. I am using a certficate generated by the Netscape Certificate Server(residing in regionally different location machine) to run my server developed using openssl library. The server certificate got from Netscape certific

No Subject

Hi, Thanks for the soultion y'day. Now I am facing this new problme. How can we use the PKCS12 format certificate file when calling the functions 1) SSL_CTX_use_certificate_file(ctx, options.certfile, SSL_FILETYPE_PEM) 2) SSL_CTX_use_PrivateKey_file(ctx, options.certfile, SSL_FILETYPE_PEM) I

How can I get debug version....

Hi, I have downloaded the openssl-0.9.4.How can I get a debug version of the openssl. If I give the ./config it is taking "cc" and it dose not contain the debug mode. I need to use gcc with -g option to debug the code. Can any one of you please help me to compile the code with debug verison and