Re: OpenSSL 0.9.8f Win32 Compile Error

2007-10-22 Thread Thomas J. Hruska
Thomas J. Hruska wrote: I am trying to compile version 0.9.8f for Windows, using VC++ 6.0, ActivePerl, and MASM 6.15.8803. I am following the instructions in INSTALL.W32, which works fine for the previous 0.9.8f build, but when I get to the point of running "nmake -f ms\ntdll.mak" I get the foll

Re: OpenSSL 0.9.8f Win32 Compile Error

2007-10-22 Thread Dr. Stephen Henson
On Mon, Oct 22, 2007, Thomas J. Hruska wrote: > Thomas J. Hruska wrote: >>> I am trying to compile version 0.9.8f for Windows, using VC++ 6.0, >>> ActivePerl, and MASM 6.15.8803. >>> >>> I am following the instructions in INSTALL.W32, which works fine for >>> the previous 0.9.8f build, but when I

RE: Changing the expiry date of a cert

2007-10-22 Thread David Schwartz
Mark H. Wood wrote: > Further, it won't be a trust root until it's distributed and the > recipients are satisfied that it is legitimate. And I think that's > the real question: > > When my CA's certificate expires, can I update it without having to > deliver copies securely to everyone who i

Re: problems building the FIPS OpenSSL

2007-10-22 Thread Elia, Leonard F.
My own Win32 build procedure using MinGW went like this: tar xvf openssl-fips-1.1.1.tar cd openssl-fips-1.1.1 ./config fips make make test make install THEN tar xvf openssl-0.9.7m.tar cd openssl-0.9.7m ./config fips --with-fipslibdir=/usr/local/ssl/lib make make test (do NOT skip the tests)

Re: ECDSA and ECICS with OpenSSL

2007-10-22 Thread Marek Marcola
Hello > As I mentioned before, I am using the openSSL directory for its > support for the ECDSA. Which I need to implement the AACS standard. I > am not sure you are familiar with it, but in short the problem I am > encountering right now is that in the AACS Std the signatures are > represented as

Re: VeriSign certificate with openssl

2007-10-22 Thread Marek Marcola
Hello, > A follow-up question just for double check. The my_cert.pem file > consists of two parts: [RSA private key] and [certificate (public > key)]. Is this the correct sequence? I saw a certificate file that > contains three parts: [certificate (?)], [RSA private key], > [certificate (public key

0.9.8g fips

2007-10-22 Thread Blasdel, Jerry
Does anyone have an idea of when the 0.9.8x versions of OpenSSL will be fips compliant? The latest version of Apache (2.2.6) appears to require 0.9.8x of OpenSSL but it appears that these versions of OpenSSL do not have the hooks for building with fips enabled. Thanks in advance

Re: 0.9.8g fips

2007-10-22 Thread Steve Marquess
Blasdel, Jerry wrote: > Does anyone have an idea of when the 0.9.8x versions of OpenSSL will be > fips compliant? The latest version of Apache (2.2.6) appears to require > 0.9.8x of OpenSSL but it appears that these versions of OpenSSL do not > have the hooks for building with fips enabled. It's