Build problem on HP-UX ia64

2007-12-19 Thread Tvrtko A. Ursulin
Hi all, I am trying to build 0.9.8g on HP-UX 11.23 ia64 using GCC 3.4.3 for 64-bit code size. So to configure the sources I ran: ./Configure --prefix=/opt/custom --shared hpux64-ia64-gcc Build runs OK up to the point when first shared library should be built (libcrypto.so.0.9.8) and then

Re: Build problem on HP-UX ia64

2007-12-19 Thread Marek Marcola
On Wed, 2007-12-19 at 10:08 +, Tvrtko A. Ursulin wrote: Hi all, I am trying to build 0.9.8g on HP-UX 11.23 ia64 using GCC 3.4.3 for 64-bit code size. So to configure the sources I ran: ./Configure --prefix=/opt/custom --shared hpux64-ia64-gcc Build runs OK up to the point when

Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-19 Thread Ben assis
Hi, On an imac intel dual core, I recently migrated to Leopard from Tiger 10.4.10. On my Tiger client I had installed my own web server using openssl and mod_ssl with Apache 1.3 server; https was working fine. On Leopard with apache 2.2.6 and OpenSSL 0.9.7, configuration files have significantly

Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-19 Thread Marek Marcola
On Wed, 2007-12-19 at 12:31 -0500, Ben assis wrote: Hi, On an imac intel dual core, I recently migrated to Leopard from Tiger 10.4.10. On my Tiger client I had installed my own web server using openssl and mod_ssl with Apache 1.3 server; https was working fine. On Leopard with apache 2.2.6 and

Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-19 Thread Ben assis
2007/12/19, Marek Marcola [EMAIL PROTECTED]: On Wed, 2007-12-19 at 12:31 -0500, Ben assis wrote: Hi, On an imac intel dual core, I recently migrated to Leopard from Tiger 10.4.10. On my Tiger client I had installed my own web server using openssl and mod_ssl with Apache 1.3 server; https

Re: Configuring ssl on apache and Leopard Mac OS 10.5.1

2007-12-19 Thread Marek Marcola
On Wed, 2007-12-19 at 13:15 -0500, Ben assis wrote: 2007/12/19, Marek Marcola [EMAIL PROTECTED]: On Wed, 2007-12-19 at 12:31 -0500, Ben assis wrote: Hi, On an imac intel dual core, I recently migrated to Leopard from Tiger 10.4.10. On my Tiger client I

FIPS Module on Mac OS X (Intel)

2007-12-19 Thread Jacob Barrett
I am unable to compile the FIPS module on an Intel Mac because the Configure script incorrectly adds the -DB_ENDIAN flag to the cc args. I have changed it for now in the Configure script, but fear that invalidates the FIPS security policy. Any help is much appriciated. Can this be overcome within

Re: FIPS Module on Mac OS X (Intel)

2007-12-19 Thread Dr. Stephen Henson
On Wed, Dec 19, 2007, Jacob Barrett wrote: I am unable to compile the FIPS module on an Intel Mac because the Configure script incorrectly adds the -DB_ENDIAN flag to the cc args. I have changed it for now in the Configure script, but fear that invalidates the FIPS security policy. Any help

Re: FIPS Module on Mac OS X (Intel)

2007-12-19 Thread Jacob Barrett
On 12/19/07 11:06 AM, Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Wed, Dec 19, 2007, Jacob Barrett wrote: Can this be overcome within the terms of the security policy or am I SOL on Intel Macs? No you can't change anything at all in the validate source so you are SOL. Figured so,

RE: FIPS Module on Mac OS X (Intel)

2007-12-19 Thread David Schwartz
No you can't change anything at all in the validate source so you are SOL. What if you made your own compiler that was identical to 'gcc' except that when asked to define 'B_ENDIAN' it defines 'L_ENDIAN'? I realize this may violate the spirit of the rule, but I believe it conforms to the

Re: FIPS Module on Mac OS X (Intel)

2007-12-19 Thread Steve Marquess
David Schwartz wrote: No you can't change anything at all in the validate source so you are SOL. What if you made your own compiler that was identical to 'gcc' except that when asked to define 'B_ENDIAN' it defines 'L_ENDIAN'? I realize this may violate the spirit of the rule, but I believe it

Perl SSL Certificates

2007-12-19 Thread David M. Funk
Folks, I wrote a webbot Perl script that goes through an entire checkout process and tests for validation. It works great. It has been in production for a while now. Now to make changes, I had to copy into our test environment and work with our test web server. (Change control go figure...)

CDP and IDP v3 extensions

2007-12-19 Thread Damir Dzeko
Hi all, I'm setting up a CA using OpenSSL. I would like it to have a CDP (CRL Distribution Point) which publishes the same CRL on two locations (different transports -- equal content). For that purpose I'd like to name the CDP using general name that would be included in both: CDP extension of

Re: CDP and IDP v3 extensions

2007-12-19 Thread Dr. Stephen Henson
On Thu, Dec 20, 2007, Damir Dzeko wrote: I'm using debian package of Version: 0.9.8g-3 (libssl0.9.8), and version string reported is: OpenSSL 0.9.8g 19 Oct 2007. Arch is i386. I have read the http://www.openssl.org/docs/apps/x509v3_config.html where (apart from that the document lacks any

a possible solution

2007-12-19 Thread j G
Hello Jim, I received your email and it concerns cross compiling. I believe if you look at embedded computers this may help. The reason that I say this is , I read a book on embedded computing and this was what they were talking about. They talk about cross compiling from