Re: Downage

What you mean by Downage on 8th March 2010?Can you please elaborate? On Mon, Mar 8, 2010 at 8:16 PM, The Doctor wrote: > > Downage on 8 MArch 2010 . When will this be rectified? > > -- > Member - Liberal International This is doc...@nl2k.ab.ca Ici > doc...@nl2k.ab.ca > God, Queen and countr

Re: error in SSLv3 read client hello

Hi Jean, You are getting this error because either client or server is trying to renegotiate the session. The OpenSSL team has applied the patch which will disable all the renegotiation and hence will break all renegotiation attempt .This patch is released to take care of Security Vulnerabilty Iss

Re: TLS extension support

Hi Daniel, I have gone through tls.h header file and i can see this /* ExtensionType values from RFC 3546 */ #define TLSEXT_TYPE_server_name 0 #define TLSEXT_TYPE_max_fragment_length 1 #define TLSEXT_TYPE_client_certificate_url 2 #define TLSEXT_TYPE_trusted_ca_keys 3 #define TLSEXT_TYPE_trun

Re: TLS extension support

,whether the handshake between server and client fails? if server uses openssl 9.8k and client 9.8d, what will happen handshake in this case. Thanks In advance Rajan On Fri, Sep 18, 2009 at 10:58 AM, tensy joseph wrote: > Hi Daniel, > > I have gone through tls.h header file and i can

Re: Issue with Private key with FIPS enabled openssl

009, tensy joseph wrote: > > > Thanks Stephan.. > > > > Was using key generated outside the FIPS mode . Is there any way , i can > use > > digest as sha1 when generating the key outside the FIPS mode so that > same > > key can be used in FIPS mode and non

Re: Issue with Private key with FIPS enabled openssl

Thanks Stephan.. Was using key generated outside the FIPS mode . Is there any way , i can use digest as sha1 when generating the key outside the FIPS mode so that same key can be used in FIPS mode and non FIPS mode ? Thanks In advance Rajan On Wed, Jul 8, 2009 at 8:45 PM, Dr. Stephen Hen

Re: Security Vulnerability issue in openssl 9.8 version

Customer are started asking me for this fix . So i need to release an immediate release of openssl with this fix . Not sure whether they are using DTLS . If any customer ask for the fix , i need to release the fix immediately (business policy). The patch which i have applied is this(for openssl 9.

Re: Security Vulnerability issue in openssl 9.8 version

I have used the following patch for this vulnerability issue http://cvs.openssl.org/chngview?cn=18187 http://cvs.openssl.org/chngview?cn=18206 http://cvs.openssl.org/chngview?cn=18154 Is this is the correct patch which solve the vulnerability issue in openssl 0.9.8h and openssl 0.9.8k Please h

Re: TLS handshake is not intiated when the SSL-ctx object has client certificate and private key on Openssl 0.9.8k

I have seen this problem earlier too .Many of them has reported this problem earlier also. I think this problem is becuase from openssl 9.8k onwards tls extension is enabled by default . My doudt is that if this is the case will the openssl 9.8k will work with any of the older openssl version too

Re: Basic Question

. On "Fri, May 29, 2009 at 7:10 PM, Dr. Stephen Henson wrote: > On Fri, May 29, 2009, tensy joseph wrote: > > > I have gone through the user guide again , i am little confused now . > This > > statement makes me confuse > > > > A HMAC-SHA1 digest of t

Re: Basic Question

to link to libcrypto.a at compile time. Please advice Thanks Rajan On Fri, May 29, 2009 at 5:50 PM, tensy joseph wrote: > My libcrypto.a is a shared library and also fipscansiter.o has been > incorporated in a shared library libcrypto.a .So to get the fipscanister.o > at compile

Re: Basic Question

libcrypto.a with the previously stored fipscansiter.sha value . Please correct me if i am wrong Thanks Rajan On Fri, May 29, 2009 at 4:46 PM, Dr. Stephen Henson wrote: > On Fri, May 29, 2009, tensy joseph wrote: > > > Still now i was believing that to all the application should link to &

Re: Basic Question

Still now i was believing that to all the application should link to libcrypto library at the compilation so that it can check the fipscanister.o hash value in the library with the prevouisly stored fips . As the user guide says 1. The HMAC-SHA-1 digest of the FIPS Object Module file must be cal

Re: FIPS & JNI Issues.

Are you static linking libcrypto library while building the your JNI application. If you are dynamic loading the library , then it will not fipas capability. Please reading USER guide of fips . On Fri, May 22, 2009 at 8:28 PM, Adams, Carl wrote: > Hello, > > > > Is the use of the FIPS OpenSSL m

Re: Backward compatiability of openssl

Hi, Recently i compiled my application with openssl 9.8h header file .My application failed and reported the Bio_test_flag is undefined symbol . Previously i was using openssl 9.8d and i am doing dynamic linking to openssl library . I have noticed that most of #define variable is changed to functi

Re: Openssl FIPS 1.1.2 to 1.2 conversion

I have tested the sample program . For me it only took 4 sec . I am using openssl fips 1.2 and openssl 9.8k . This is the output # time ./hmac -v hmac.c FIPS mode enabled c00a160be4bc5a9cf1e74bcf44c1b002734e5df1 real0m3.82s user0m3.62s sys 0m0.01s thanks rajan On Wed, Apr 29, 2009 a

Re: OpenSSL 1.0.0 beta 2 released

Can the future version of openssl support aix-xlc_r compiler .Presently it has the support for only aix-cc . Is this possible to support the aix-xlc_r and aix64-xlc_r Thanks Rajan On Tue, Apr 21, 2009 at 9:59 PM, OpenSSL wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > > Open