Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jayalakshmi bhat
Hi Jakob, Thank you very much for detailed and helpful explanation. Regards Jayalakshmi On Sun, Jul 6, 2014 at 9:32 PM, Jakob Bohm wrote: > On 7/6/2014 10:44 AM, Kyle Hamilton wrote: > >> >> On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: >> >>> Thanks a lot for the explanation. We have range of

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jayalakshmi bhat
Hi Kyle, Thanks a lot for detailed explaination, it helped me lots. Regards Jayalakshmi On Sun, Jul 6, 2014 at 2:44 AM, Kyle Hamilton wrote: > > On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: > > Thanks a lot for the explanation. We have range of products that > > provides network connectivity.

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Jakob Bohm
On 7/6/2014 10:44 AM, Kyle Hamilton wrote: On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: Thanks a lot for the explanation. We have range of products that provides network connectivity. 1. On these we would be using TPM to provide additional security. 2. On the products that are bit slow in

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-06 Thread Kyle Hamilton
On 7/5/2014 10:51 AM, Jayalakshmi bhat wrote: > Thanks a lot for the explanation. We have range of products that > provides network connectivity. > > 1. On these we would be using TPM to provide additional security. > > 2. On the products that are bit slow in software cryptographic > operation,

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Jayalakshmi bhat
Hi Steve, Thanks a lot for the explanation. We have range of products that provides network connectivity. 1. On these we would be using TPM to provide additional security. 2. On the products that are bit slow in software cryptographic operation, we also would be using hardware acceleration ch

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Dr. Stephen Henson
On Sat, Jul 05, 2014, Jayalakshmi bhat wrote: > Hi All, > > We want to support a hardware accelerator on our device. We are using > OpenSSL with OpenSSL FIPS Object module. I wanted to know if we can add > engine support in OpenSSL FIPS Object module. > If you literally mean adding ENGINE suppo

Re: OpenSSL engine support in OpenSSL FIPS Object Module

2014-07-05 Thread Steve Marquess
On 07/05/2014 02:09 AM, Jayalakshmi bhat wrote: > Hi All, > > We want to support a hardware accelerator on our device. We are using > OpenSSL with OpenSSL FIPS Object module. I wanted to know if we can add > engine support in OpenSSL FIPS Object module. > > I welcome all valuable inputs. First,

Re: Openssl Engine for Utimaco CryptoServer

2009-12-23 Thread Ralf Hornik Mailings
Ralf Hornik Mailings wrote: [Success]: SO_PATH:/usr/lib/engines/engine_pkcs11.so [Failure]: MODULE_PATH:/opt/cserver/lib/libcs2_pkcs11.so 7104:error:260AC089:engine routines:INT_CTRL_HELPER:invalid cmd name:eng_ctrl.c:134: 7104:error:260AB089:engine routines:ENGINE_ctrl_cmd_string:invalid

Re: Openssl Engine Performance Benchmarks

2009-03-31 Thread Geoff Thorpe
On Tuesday 31 March 2009 23:16:10 Shasi Thati wrote: > Hi, > > I have a question regarding the openssl speed command. When I use this > command to test the crypto offload engine performance what is the > right command to use? > > Is it > > openssl speed -evp aes-128-cbc -engine xx -elapsed > >

RE: Openssl Engine Performance Benchmarks

2009-03-31 Thread David Schwartz
> Is it > openssl speed -evp aes-128-cbc -engine xx -elapsed > or > openssl speed -evp aes-128-cbc -engine xx It depends what you want to measure. > I have seen examples with both of them on the internet and I get > different results with each of them. What exactly does "elapsed" > opt

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Christopher Nebergall
>you could use RSA_set_method with RSA_PKCS1_SSLeay for example That was all I needed. I've got it working now. Thanks, Christopher __ OpenSSL Project http://www.openssl.org User Support Mailing L

Re: Openssl Engine calling code (soft pkcs11) also written in openssl conflict

2005-08-31 Thread Nils Larsch
Christopher Nebergall wrote: I've been working with some patches to curl I found on the curl mailing list to support openssl and opensc's engine_pkcs11. Basically it consists of Curl 7.14 + patch which adds dynamic engine support -> opensc-20050826 [engine_pkcs11.so] -> soft-pkcs11 1.2 o

Re: Openssl Engine

2002-09-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Tue, 24 Sep 2002 14:55:53 +0200, Michiels Olivier <[EMAIL PROTECTED]> said: olivier.michiels> Hi, olivier.michiels> Currently I've an application that creates keys, certificate requests olivier.michiels> and certificates using NFast and openssl-0.9.5. olivier.

Re: OpenSSL engine NFast

2002-09-25 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Wed, 25 Sep 2002 09:04:45 +0200, Michiels Olivier <[EMAIL PROTECTED]> said: olivier.michiels> I'm trying to uderstand how the engine object is olivier.michiels> working with openssl-engine. olivier.michiels> I'm using a NFast crypto device (chil) and when I oliv

Re: RE : openssl engine use

2002-07-25 Thread Geoff Thorpe
Hey there, On Thu, 25 Jul 2002, Frederic DONNAT wrote: > A sample of programming with engine is mod-ssl (initialize ENGINE before > everything else). You can also see "apps" directory of OpenSSL s_client, > s_server ... files > > Be also carefull between openssl-engine-0.9.6x and openssl-0.9.7 t

Re: openssl engine?

2001-10-12 Thread Richard Koenning
At 20:33 12.10.2001 +0200, Helmut Heilig wrote: >can anybody tell me the difference between openssl and openssl-engine. >Couldn't find anything about that in the FAQ. See: http://www.openssl.org/support/faq.html [MISC] 6. What is an 'engine' version? Ciao, Richard -- Dr. Richard W. Könning Fuj

Re: openssl engine version beta2 compilation problems

2000-09-19 Thread David Maurus
I've had the same problem and discovered the following patch: http://marc.theaimsgroup.com/?l=openssl-dev&m=96923042325868&w=2 The functions are loaded dynamically, so it is necessary to check whether they loaded or not (or your executable will crash on all machines which don't provide the NetSt