[Cryptography-dev] cryptography built with custom OpenSSL missing FIPS functionality

2019-10-03 Thread Ryan Hsu
Hi All, Running into an interesting problem here. I have built cryptography in a centos container using a custom OpenSSL (1.0.2t) with FIPS object module (2.0.16). This all works well and fine but FIPS functionality seems to be missing. For example, when running: print backend._lib.FIPS_mode_set(

[Cryptography-dev] Help to get a patch for ocsp and crl support for cryptography

2019-10-03 Thread salil GK
Hello I am not that an expert developer in cryptography. We are using cryptography module for certificate management. I was looking at our code base and found that there was a patch we applied to cryptography module to get ocsp and crl support. We have been using 2.1.4 cryptography version. But

Re: [Cryptography-dev] Help to get a patch for ocsp and crl support for cryptography

2019-10-03 Thread Paul Kehrer
We have OCSP and CRL support natively without any patches in cryptography, could you elaborate on what you think is missing? -Paul > On Oct 4, 2019, at 10:49 AM, salil GK wrote: > > Hello > > I am not that an expert developer in cryptography. We are using > cryptography module for certific

Re: [Cryptography-dev] Help to get a patch for ocsp and crl support for cryptography

2019-10-03 Thread salil GK
Oh - thanks for the confirmation. I didn't know that the support for ocsp and crl is natively available. I will do some tests and get back to you in case any issue is found. Could you please tell me if ocsp and crl support was available in 2.1.4 version of cryptography. Thanks GKS On Fri, 4 Oct

Re: [Cryptography-dev] Help to get a patch for ocsp and crl support for cryptography

2019-10-03 Thread Paul Kehrer
You can find this information in our change log (https://cryptography.io/en/latest/changelog/) We added OCSP in 2.4 but CRL support was present prior to 2.1.4. > On Oct 4, 2019, at 11:45 AM, salil GK wrote: > > Oh - thanks for the confirmation. I didn't know that the support for > ocsp and cr

Re: [Cryptography-dev] Help to get a patch for ocsp and crl support for cryptography

2019-10-03 Thread salil GK
Thanks a lot for timely response. It is of great help. I will test things out and get back to you in case any assistance is needed. Best regards GKS On Fri, 4 Oct 2019 at 09:17, Paul Kehrer wrote: > > You can find this information in our change log > (https://cryptography.io/en/latest/changelog