Re: openssl 0.8.9h sha256

2008-08-15 Thread Rafiqul Ahsan
Mike, I have installed openssl on 64 bit OS. I believe 64-bit libraries produced by default if we try to build OpenSSL on a 64-bit platform. I would still like to verify whether the installed openssl is 32, or 64 bit . Can you please let me know the necessary commands to verify it ? On 8/15/08,

Re: openssl 0.8.9h sha256

2008-08-15 Thread Michael S. Zick
On Thu August 14 2008 23:05, Rafiqul Ahsan wrote: > Hi David, > > I believe 2048 could not be the issue (as you said because I am using > 64 bit OS), > Which will probably run either 32bit or 64bit userland code. Next question: Are you running 64bit openSSL? (You could be running 32bit openSSL a

Re: openssl 0.8.9h sha256

2008-08-14 Thread David Johnston
We saw these same errors in a WiMAX test network with Free Radius. Moving from an older 32 bit Fedora to a current 64 bit Fedora and the stock freeradius and freeradius-util packages made it work and made the errors you exhibit disappear. openssl0.9.8h manifestly does support the necessary al

Re: openssl 0.8.9h sha256

2008-08-14 Thread Rafiqul Ahsan
Hi David, I believe 2048 could not be the issue (as you said because I am using 64 bit OS), this is about supporting sha256 algorithm either with 0.9.8h, or my Freeradius 2.0.5 (both are latest). Because sha1 works well with my installation with even RSA 2048 key. And ofcourse, as per my previous

Re: openssl 0.8.9h sha256

2008-08-14 Thread Rafiqul Ahsan
Hi David, Thanks for your reply...I believe I am running Freeradius, and openssl0.9.8h on 64 bit OS. If you want I can post the certs output as well. Pls let me know. I need to make this working, and I have been working on this for last 2 weeks and seeing the same error. Here is the command used

Re: openssl 0.8.9h sha256

2008-08-14 Thread David Johnston
Sergio wrote: For the other side, i don't know anything about WiMAX, but i suposse that credentials are the same. Hope this helps __ I do. WiMAX certs (the ones uses in EAP-TLS and EAP-TTLS sessions over the airlink to identi

Re: openssl 0.8.9h sha256

2008-08-14 Thread Rafiqul Ahsan
Hi Sergio, I tried with SHA1, and it is working just fine (Signature Algorithm: sha1WithRSAEncryption). Now, sha256 is not really working...is really openssl 0.9.8h supports this advanced algorithm ? I have given the output as below...but freeradius suggests that with the patch it should work wit

RE: openssl 0.8.9h sha256

2008-08-13 Thread Ajeet kumar.S
Ahsan Sent: Wednesday, August 13, 2008 7:19 PM To: openssl-users@openssl.org Subject: Re: openssl 0.8.9h sha256 Thanks, I will try to figure out as you suggested. Rafi On 8/13/08, Sergio <[EMAIL PROTECTED]> wrote: > Rafiqul Ahsan escribió: > > > Found a previous postings li

Re: openssl 0.8.9h sha256

2008-08-13 Thread Rafiqul Ahsan
Thanks, I will try to figure out as you suggested. Rafi On 8/13/08, Sergio <[EMAIL PROTECTED]> wrote: > Rafiqul Ahsan escribió: > > > Found a previous postings like this where Alan Dekok answered that > > FreeRadius use SSL from openssl, and if SSL supports any advanced > > algorithm FreeRadius s

Re: openssl 0.8.9h sha256

2008-08-13 Thread Sergio
Rafiqul Ahsan escribió: Found a previous postings like this where Alan Dekok answered that FreeRadius use SSL from openssl, and if SSL supports any advanced algorithm FreeRadius should support it (I actually added a patch to FreeRadius to make sure this supports all digests). I am currently tryin

Re: openssl 0.8.9h sha256

2008-08-12 Thread Rafiqul Ahsan
Found a previous postings like this where Alan Dekok answered that FreeRadius use SSL from openssl, and if SSL supports any advanced algorithm FreeRadius should support it (I actually added a patch to FreeRadius to make sure this supports all digests). I am currently trying to find out whether I ha

Re: openssl 0.8.9h sha256

2008-08-12 Thread Sergio
Rafiqul Ahsan escribió: I see an error like below when trying to use EAP_TLS/TTLS authentication with Certs that has Signature Algorithm: sha256WithRSAEncryption . Can anybody tell me why SSL does not like the TLS session ? I would appreciate your help. here is the radiusd -X log: ++[suffix] re