Re: OpenSSL on Mac

2014-04-01 Thread Viktor Dukhovni
On Tue, Apr 01, 2014 at 10:01:16AM -0400, Jeffrey Walton wrote: > > However, alternative flags that achieve the same effect are available: > > > > To build a library whose SONAME involves an rpath: > > > > $ cc -shared -Wl,-flat_namespace -Wl,-undefined,dynamic_lookup \ > > -Wl,-instal

Re: OpenSSL on Mac

2014-04-01 Thread Jeffrey Walton
On Tue, Apr 1, 2014 at 9:24 AM, Viktor Dukhovni wrote: > On Tue, Apr 01, 2014 at 05:37:05AM -0400, Jeffrey Walton wrote: > >> You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`, >> and then `sudo make install`. Your updated version will be located in >> `/usr/local/ssl`. >> >> Usin

Re: OpenSSL on Mac

2014-04-01 Thread Viktor Dukhovni
On Tue, Apr 01, 2014 at 05:37:05AM -0400, Jeffrey Walton wrote: > You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`, > and then `sudo make install`. Your updated version will be located in > `/usr/local/ssl`. > > Using it in programs can be tricky, though. Apple's linkers do not

Re: OpenSSL on Mac

2014-04-01 Thread Jeffrey Walton
On Mon, Mar 31, 2014 at 3:18 PM, Landen Landens wrote: > My Mac still has OpenSSL 0.9.8. How may I update this to the latest stable > version? You can't because 0.9.8 and 1.0.1 are *not* binary compatible. You can download OpenSSL, `./Configure darwin64-x86_64-cc`, `make`, and then `sudo make in

Re: [openssl-users] OpenSSL on Mac

2014-04-01 Thread Erwann Abalea
Darwinports. -- Erwann ABALEA Le 31/03/2014 21:18, Landen Landens a écrit : My Mac still has OpenSSL 0.9.8. How may I update this to the latest stable version? I believe the latest stable version is at least 1.0.01 __ Open

OpenSSL on Mac

2014-04-01 Thread Landen Landens
My Mac still has OpenSSL 0.9.8. How may I update this to the latest stable version? I believe the latest stable version is at least 1.0.01

Build OpenSSL on Mac OS X

2012-02-22 Thread Alex Chen
I downloaded OpenSSL 0.9.8t and tried to build it under Mac OS X 10.6.8. I want to build a dynamic library with both 32-bit and 64-bit (Universal binary). I tried various flag with the Configure script but failed. Here are the parameters I feed to 'Configure': ./Configure threads shared no-hw zl

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-25 Thread Steve Marquess
On 05/24/2011 08:58 PM, Bill Durant wrote: > ... >> Ah that explains it. There is no darwin64-x86_64-cc target for the validated >> tarball so it isn't supported. It is possible to add new platforms via a >> change letter but so far no one has been interested in including that one. > > What is the

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread Bill Durant
On May 24, 2011, at 5:42 PM, Dr. Stephen Henson wrote: > On Tue, May 24, 2011, Bill Durant wrote: > >> On May 24, 2011, at 3:58 PM, Dr. Stephen Henson wrote: >>> On Tue, May 24, 2011, ciphertexto wrote: >>> On May 24, 2011, at 4:18 AM, Dr. Stephen Henson wrote: > > It can take a lon

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread Dr. Stephen Henson
On Tue, May 24, 2011, Bill Durant wrote: > On May 24, 2011, at 3:58 PM, Dr. Stephen Henson wrote: > > On Tue, May 24, 2011, ciphertexto wrote: > > > >> On May 24, 2011, at 4:18 AM, Dr. Stephen Henson wrote: > >>> > >>> It can take a long time to execute sometimes as it performs two slow DH > >>>

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread Bill Durant
On May 24, 2011, at 3:58 PM, Dr. Stephen Henson wrote: > On Tue, May 24, 2011, ciphertexto wrote: > >> On May 24, 2011, at 4:18 AM, Dr. Stephen Henson wrote: >>> >>> It can take a long time to execute sometimes as it performs two slow DH >>> parameter generation operations. Retry it a few times.

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread Dr. Stephen Henson
On Tue, May 24, 2011, ciphertexto wrote: > On May 24, 2011, at 4:18 AM, Dr. Stephen Henson wrote: > > > > It can take a long time to execute sometimes as it performs two slow DH > > parameter generation operations. Retry it a few times. If it still doesn't > > complete try: > > > > OPENSSL_FIPS=

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread ciphertexto
t; Has anyone been able to build a "working" 64-bit version of the >>>> FIPS-capable OpenSSL on Mac OS X 10.6.7 (SnowLeopard)? >>>> >>>> I have built a 64-bit version of the fipscanister from openssl-fips-1.2.3 >>>> on Mac OS X 10.6.

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-24 Thread Dr. Stephen Henson
On Mon, May 23, 2011, ciphertexto wrote: > On May 23, 2011, at 7:20 PM, Dr. Stephen Henson wrote: > > On Sun, May 22, 2011, Bill Durant wrote: > > > >> Hello, > >> > >> Has anyone been able to build a "working" 64-bit version of the > &

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-23 Thread Jeffrey Walton
On Tue, May 24, 2011 at 12:05 AM, ciphertexto wrote: > On May 23, 2011, at 7:20 PM, Dr. Stephen Henson wrote: >> On Sun, May 22, 2011, Bill Durant wrote: >> >>> Hello, >>> >>> Has anyone been able to build a "working" 64-bit version

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-23 Thread ciphertexto
On May 23, 2011, at 7:20 PM, Dr. Stephen Henson wrote: > On Sun, May 22, 2011, Bill Durant wrote: > >> Hello, >> >> Has anyone been able to build a "working" 64-bit version of the FIPS-capable >> OpenSSL on Mac OS X 10.6.7 (SnowLeopard)? >> >&g

Re: Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-23 Thread Dr. Stephen Henson
On Sun, May 22, 2011, Bill Durant wrote: > Hello, > > Has anyone been able to build a "working" 64-bit version of the FIPS-capable > OpenSSL on Mac OS X 10.6.7 (SnowLeopard)? > > I have built a 64-bit version of the fipscanister from openssl-fips-1.2.3 on

Building a 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7

2011-05-22 Thread Bill Durant
Hello, Has anyone been able to build a "working" 64-bit version of the FIPS-capable OpenSSL on Mac OS X 10.6.7 (SnowLeopard)? I have built a 64-bit version of the fipscanister from openssl-fips-1.2.3 on Mac OS X 10.6.7. But fips_shatest and the openssl command are core dumping w

Re: Problem building OpenSSL on Mac OS X with Kerberos support

2009-11-17 Thread monipol
./config alone won't enable Kerberos support, won't create a shared/ dynamic library, won't use zlib: Configuring for darwin-i386-cc no-krb5 [krb5-flavor not specified] OPENSSL_NO_KRB5 no-shared [default] no-zlib [default] no-zlib-dynamic [default] And true

Re: Problem building OpenSSL on Mac OS X with Kerberos support

2009-11-17 Thread monipol
./config alone won't enable Kerberos support. Also, it won't create a shared/dynamic library and won't use zlib: $ ./config (...) Configuring for darwin-i386-cc no-krb5 [krb5-flavor not specified] OPENSSL_NO_KRB5 no-shared [default] no-zlib [default] no-zlib-dy

Re: Problem building OpenSSL on Mac OS X with Kerberos support

2009-11-17 Thread Lou Picciano
al Message - From: "monipol" To: openssl-users@openssl.org Sent: Tuesday, November 17, 2009 6:54:08 AM GMT -05:00 US/Canada Eastern Subject: Problem building OpenSSL on Mac OS X with Kerberos support Hello. I'm having the following problem when building OpenSSL with Kerberos

Problem building OpenSSL on Mac OS X with Kerberos support

2009-11-17 Thread monipol
Hello. I'm having the following problem when building OpenSSL with Kerberos support, both 0.9.8l and 1.0.0beta4, on Intel Mac OS 10.5.8. I'm able to build both versions if I use --no-krb5, though. What should I be looking for in order to fix this build problem? Any pointers are greatly appr

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-16 Thread Steve Lihn
Anybody can help me with manipulating ASN1_OBJECT? 1) How do I create a new object identifier, say 1.10.20.30.40 ? 2) How do I set it into ASN1_OBJECT variable? 3) If i2d is performed and ASN1_OBJECT is read from a certificate, what is the internal structure? I want to be able to verify I am read

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-15 Thread Roy Wood
>There are some issues with a US company exporting anything dealing with >crypto - you may have heard that our government frowns on such practices >;-) . Ah yes-- the US government. Same government that grants all those software patents, right? :-) >However, since a diff file doesn't contai

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-15 Thread CJ Holmes
>>CJ Holmes <[EMAIL PROTECTED]> writes: >>> We've done it here at StarNINE for our WebSTAR product >>> , mainly because the alternatives are vastly more >>> expensive and don't support the Mac platform. OpenSSL doesn't exactly >>> support the mac, either, but since we hav

Re: OpenSSL on Mac (Was: Can US companies use OpenSSL?)

1999-09-14 Thread Roy Wood
>CJ Holmes <[EMAIL PROTECTED]> writes: >> We've done it here at StarNINE for our WebSTAR product >> , mainly because the alternatives are vastly more >> expensive and don't support the Mac platform. OpenSSL doesn't exactly >> support the mac, either, but since we have the