Re: Question about OpenSSL 3.0 and static linking

2022-02-23 Thread Shunichi Shinohara
Thank you very much for your quick and great replies, Pauli, Richard and Matt!! > ./config --prefix=$HOME/local/openssl-3.0.1 no-shared no-module With this options, it works perfectly! Thanks again, Shino 2022年2月22日(火) 17:46 Richard Levitte : > > 'no-module' will do what you want. I notice

Re: Question about OpenSSL 3.0 and static linking

2022-02-22 Thread Matt Caswell
On 22/02/2022 07:54, pa...@openssl.org wrote: There is a define to allow this: STATIC_LEGACY but I don't remember how to specify it on the configuration command line. We should probably turn this on in a no-shared build. Configure with "no-module". Matt Pauli On 22/2/22 5:37 pm, Shun

Re: Question about OpenSSL 3.0 and static linking

2022-02-22 Thread Richard Levitte
'no-module' will do what you want. I noticed, though, that the documentation in INSTALL.md isn't entirely clear on what that does. ./config --prefix=$HOME/local/openssl-3.0.1 no-shared no-module Cheers, Richard On Tue, 22 Feb 2022 07:37:03 +0100, Shunichi Shinohara wrote: > > Hi List, > >

Re: Question about OpenSSL 3.0 and static linking

2022-02-21 Thread pauli
There is a define to allow this: STATIC_LEGACY but I don't remember how to specify it on the configuration command line. We should probably turn this on in a no-shared build. Pauli On 22/2/22 5:37 pm, Shunichi Shinohara wrote: Hi List, I have a question about OpenSSL 3.0 and static linking.

Re: Question About OpenSSL 3.0, FIPS and Solaris Support

2021-12-07 Thread Dr Paul Dale
The "unadopted" category is not the same as "unsupported".  We'll make an effort but if access to a physical machine is required, we will have to stop.  Whoever reports a problem will like have to assist with fixing it.  Be that by doing builds or writing code. The platform policy page categor

Re: Question about OpenSSL .....

2020-06-28 Thread Nicola Tuveri
Sorry, I forgot to include also a link to INSTALL.md I am linking the preview from PR#12109 again, as it has been improved to leverage Markdown formatting to be more readable: https://github.com/openssl/openssl/blob/be101175badd30402d2e480a79e98ade1343cbfd/INSTALL.md#installing-openssl Same ca

Re: Question about OpenSSL .....

2020-06-28 Thread Nicola Tuveri
Hello and welcome! > On my system (Debian 10 - Buster) is OpenSSL installed with Version 1.1. > Now, I want to install OpenSSL 3.x, but which is the best way for that? > > Deinstall the old one, or? First, keep in mind that 3.x is still in alpha development stage, so using it as the system-wide l

回复: Re: question about openssl speed and blowfish

2006-03-02 Thread 维宾 宋
I have tested n times,but the result is same. OpenVPN renegotiate  keys every a hour. Bf-cbc should be faster or fastest.but...Bernhard Froehlich <[EMAIL PROTECTED]> 写道: songwb wrote:> Dear friends> I use OpenSSL's speed command testing the speed of Blowfish and> AES,find bf-cbc faster than aes-

Re: question about openssl speed and blowfish

2006-03-02 Thread Girish Venkatachalam
AFAIK Blowfish key setup times are very high. That might account for the difference. All things being equal AES certainly gives you more security than any other cipher. And AES was chosen also because it was found fit for implementation on severely constrained embedded devices. So you get both

Re: question about openssl speed and blowfish

2006-03-02 Thread Dr. Stephen Henson
On Thu, Mar 02, 2006, ?? wrote: > Dear friends I use OpenSSL's speed command testing the speed of Blowfish and > AES,find bf-cbc faster than aes-128-cbc.But when I download a large file > from intranet of OpenVPN,find bf-cbc seems slower than aes-128-cbc,why? Can > you give help? thanks! >

Re: question about openssl speed and blowfish

2006-03-02 Thread Bernhard Froehlich
维宾 宋 wrote: > Dear friends > I use OpenSSL's speed command testing the speed of Blowfish and > AES,find bf-cbc faster than aes-128-cbc.But when I download a large > file from intranet of OpenVPN,find bf-cbc seems slower than > aes-128-cbc,why? Can you give help? thanks! > ---download rate--- > aes-

Re: Question about openssl genrsa

2004-09-24 Thread Charles B Cranston
Joppe Bos wrote: Hello everyone, I am fairly new with openssl and am trying to write a function which can make a public / private key pair with GMP (an open source big number library). I am doing this to compare the running time with openssl. I have a few questions regarding the openssl genrsa c

Re: Question about OpenSSL test server

2003-08-23 Thread Carlos G.A.
Hello: I'm rigth ?? if i'm right how can i know the key that is being used for decrypt the message ?? I have my problem fixed yet thanks :) --- Best regards Carlos Guzmán Álvarez Vigo-Spain _ Localiza y ponte en contacto con tus

Re: Question about OpenSSL test server

2003-08-23 Thread Carlos G.A.
Hello: The key derivation and encryption for TLS is done in ssl/t1_enc.c there's actually some debugging code in there already so if you #define TLS_DEBUG it should print out all the keys for you. I'm making more test using debugging features of openssl ( nice features ), i'm trying to build

Re: Question about OpenSSL test server

2003-08-21 Thread Carlos G.A.
Hello: The key derivation and encryption for TLS is done in ssl/t1_enc.c there's actually some debugging code in there already so if you #define TLS_DEBUG it should print out all the keys for you. Thanks very much i will try to do a build using this define :) Best regards Carlos Guzman Alvarez

Re: Question about OpenSSL test server

2003-08-20 Thread Dr. Stephen Henson
On Wed, Aug 20, 2003, Carlos G.A. wrote: > Hello: > > I'm making an implementation of the TLS 1.0 protocol in C#, for testing > it i'm using OpenSSL under Cygwin ( openssl s_server ... ), i have a > question about debug output, there are any way for know what are the > keys that the server is usi

Re: Question about OpenSSL test server

2003-08-20 Thread Carlos G.A.
Hello: www.rtfm.com/ssldump/ Thanks i will try it :) -- Best regards Carlos Guzman Alvarez Vigo-Spain _ Melodías, logos y mil servicios para tu teléfono en MSN Móviles. http://www.msn.es/MSNMovil/ ___

Re: Question about OpenSSL test server

2003-08-20 Thread Ashutosh Jaiswal
Using ssldump might help. It does a lot of decoding of the data exchanged between a client and server. www.rtfm.com/ssldump/ Ashu Carlos G.A. wrote: > Hello: > > I'm making an implementation of the TLS 1.0 protocol in C#, for testing > it i'm using OpenSSL under Cygwin ( openssl s_server ... ),