[openssl.org #2483] X509 conversions

2011-03-31 Thread Gordon Talge via RT
Hi, I am running an old computer with Debian/GNU 2.2. Please don't tell me to upgrade my computer or my compiler. I can't right now. I would like to run lynx 2.8.7 with openssl support. It fails to compile with openssl because it calls X509_get_ext_d2i and my present installed verion of openssl

FIPS and AES NI engine

2011-03-31 Thread Peter Beal
Hi All, I need to create a FIPS validated version based on 0.9.8r. This library also needs to utilize the Intel AES instructions. My current plan is to patch in the AESNI engine and then move pertinent logic over into the FIPS Canister. Is this a reasonable approach to achieve this? Or,

Re: FIPS and AES NI engine

2011-03-31 Thread Steve Marquess
Peter Beal wrote: Hi All, I need to create a FIPS validated version based on 0.9.8r. This library also needs to utilize the Intel AES instructions. My current plan is to patch in the AESNI engine and then move pertinent logic over into the FIPS Canister. Is this a reasonable approach to

Re: FIPS and AES NI engine

2011-03-31 Thread Peter Beal
Hi Steve, Thanks for the fast reply. So it sounds like I should discuss this with the test lab with which we're working to see what they say. My time working in OpenSSL can still be counted in weeks, so I'd be very interested in your opinion on this. Either way, it'll help me in

RE: [openssl.org #2483] X509 conversions

2011-03-31 Thread Dave Thompson
Some basic ideas in case you haven't already tried them: From: owner-openssl-...@openssl.org On Behalf Of Gordon Talge via RT Sent: Thursday, 31 March, 2011 03:22 [stuck on] Debian/GNU 2.2 [want] lynx 2.8.7 [needs] X509_get_ext_d2i I downloaded the new openssl library and it seems to