RE: problems with building the FIPS OpenSSL

2007-10-19 Thread Saju Paul
The MSYS directory /usr/local/ssl/lib is the Windows directory C:\msys\1.0\local\ssl (refered to in points 9 & 10); 1. there is no directory called /usr/local/ssl/lib 2. in step 10 I can find most of the files, but fips_premain.c.sha1 is no where to be found Hmm...these 2 points you have made see

RE: problems with building the FIPS OpenSSL

2007-10-19 Thread Saju Paul
The other thing that you may have missed is that the tarball 'openssl-fips-1.1.1.tar.gz' should be used ONLY to build the FIPS modules (which is the fipscansiter.o, an executable, a C source file and 2 signatures). You then need to use the tarball 'openssl-0.9.7m.tar.gz' (nothing before,nothing af

problems with building the FIPS OpenSSL

2007-10-19 Thread Paul Levin
I am trying to build FIPS OpenSSL 1.1.1 for Windows, as per the instructions in the UserGuide-1.1.1.pdf. For the most part it goes ok, but when I get to step 7, in section 4.3.2, there are several problems. there is no directory called /usr/local/ssl/lib in MSYS. in step 10 I can find most

Re: Segmentation fault in application creating too many threads.

2007-10-19 Thread Prabhu S
SHA_CTX *c is getting corrupted. GDB indicated ctx=0x0 in init(). However it was not the case. static int init(EVP_MD_CTX *ctx) { if(ctx != 0L) { return SHA1_Init(ctx->md_data); } else { printf("ctx is NULL\n"); //Never to be seen thou

Re: Possible memory leak or bad allocation strategy in openssl-0.9.8d - known issue?

2007-10-19 Thread G.W. Haywood
Hi there, On Fri, 19 Oct 2007, David Lobron wrote: > I am testing an Objective-C program that links with openssl-0.9.8d, > in a Linux environment. In testing, I noticed that RSS use was > creeping up fairly quickly I don't know why that might be, but the generic advice is to try the most recent

Possible memory leak or bad allocation strategy in openssl-0.9.8d - known issue?

2007-10-19 Thread David Lobron
Hi All, I am testing an Objective-C program that links with openssl-0.9.8d, in a Linux environment. In testing, I noticed that RSS use was creeping up fairly quickly, at the rate of about 50MB per day, under a load of roughly one SSL connection every three seconds. To test whether the p

Re: Changing the expiry date of a cert

2007-10-19 Thread Mark H. Wood
On Wed, Oct 17, 2007 at 08:34:56PM -0700, Jim Fox wrote: > > This was a certificate authority certificate. As such, the renewal has to > have > the same key and DN as the original in order to continue being a CA > for previously signed certificates. Further, it won't be a trust root until it's d

[ANNOUNCE] OpenSSL version 0.9.8g released

2007-10-19 Thread Lutz Jaenicke
OpenSSL version 0.9.8g released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 0.9.8g of our open source toolkit for SSL/TLS. This new OpenSSL version