Convert a Windows CA to a Linux CA

Hello all, actually I'm using a windows server for a CA authority to issue primary certificates for applications. These certificates are issued with a specific OID: 1.3.6.1.5.5.7.3.1,1.3.6.1.5.5.7.3.2 Can I migrate my CA to Linux, moving the already issued certificates and using linux tu cre

OpenSSL client through proxy

Hello. I have to connect to my OpenSSL server through proxy server. How can I establish this connection? Thanks. __ OpenSSL Project http://www.openssl.org User Support Mailing List

No Shared Cipher

Hi Friends, I am facing some difficulties with OpenSSL implementation and am stuck at handshake failure. I have created a normal .exe (which acts as a server) which opens port 36003 and loads the required certificate and private key and waits for any incoming connection. Once I recieve connection

CMPV2

Does OpenSSL support the CMPv2 protocol on the server-side adn client-side for certificate request/generation? thanks, Vasanthi ---

Algorithm usage in the world.

Dear OpenSSL team, I'd like to use OpenSSL package, and its internal components as SSLeay, in many parts of the world (as UE and USA). Are there some restriction problem about?...can I use all algorithms in that nations (the first one could be France)? Thanks in avantage. Daniele Di Lorenzo

OpenSSL Error

Dear All, I am facing some problem when I tried to compile the application. This application was building fine, but after adding a file called "digestclient.c" (to support HTTPs), it's throwing the following error. Can anyone give some input on this. digestclient.obj : error LNK2001: unresolve

Re: CMPV2

Hi Vasanthi, so far there is no official CMP support in OpenSSL. I am in the process of implementing the client site interoperable with available CMP capable CAs. So far, it is possible to do the IR and KUR sequences with Cryptlib and IR with Insta Certifier. More compatibility and seqences will b

How to use the HMAC() function

Hello everybody, I have a doubt about how to use the HMAC() function. I developed this code in C language: (abridged) ... unsigned char *auth = NULL; unsigned char *session_auth_key; unsigned char *auth_tag; . . auth = HMAC(EVP_sha1(), session_auth_key, auth_key_length, length,

0.9.8 version that is fips compliant?

All, Is there a 0.9.8 version of OpenSSL that is fips compliant? Steve thought there would be one available possibly around February/March timeframe of this year. After looking closer, it appears that 0.9.7m does not have the following vulnerability http://www.openssl.org/news/secadv_20071012.tx

Re: 0.9.8 version that is fips compliant?

Blasdel, Jerry wrote: All, Is there a 0.9.8 version of OpenSSL that is fips compliant? Steve thought there would be one available possibly around February/March timeframe of this year. Alas, that schedule has slipped. We lost a month plus due to the unexpected ordeal of getting the vulner

Re: How to use the HMAC() function

Hello, > I have a doubt about how to use the HMAC() function. I developed this code in C > language: (abridged) > > ... > unsigned char *auth = NULL; > unsigned char *session_auth_key; > unsigned char *auth_tag; > . > . > auth = HMAC(EVP_sha1(), session_auth_key, auth_key_length, length, >

Re: OpenSSL Error

Hello, > I am facing some problem when I tried to compile the application. This application was > building fine, but after adding a file called "digestclient.c" (to support HTTPs), it's > throwing the following error. Can anyone give some input on this. > > digestclient.obj : error LNK2001: u

Re: No Shared Cipher

Hello, > I am facing some difficulties with OpenSSL implementation and am stuck at > handshake failure. > I have created a normal .exe (which acts as a server) which opens port 36003 > and loads the required certificate and private key and waits for any > incoming connection. > Once I recieve con

Re: OpenSSL client through proxy

Hello, > I have to connect to my OpenSSL server through proxy server. How can I establish this connection? Establish tcp connection through proxy (connect, socks5, transparent, reverse or any other) and next run SSL on this tcp connection. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ___

RE: 0.9.8 version that is fips compliant?

All, Is OpenSSL version 0.9.7m vulnerable to this security notice http://www.openssl.org/news/secadv_20071012.txt? Reading through the notice it sounds like they recommend upgrading to 0.9.8g but that only those versions PRIOR to 0.9.7m are affected. We must build a fips compliant OpenSSL and

Re: 0.9.8 version that is fips compliant?

On Tue, Feb 26, 2008 at 03:06:17PM -0600, Blasdel, Jerry wrote: > All, > > Is OpenSSL version 0.9.7m vulnerable to this security notice > http://www.openssl.org/news/secadv_20071012.txt? > > Reading through the notice it sounds like they recommend upgrading to > 0.9.8g but that only those versio

RE: 0.9.8 version that is fips compliant?

Viktor, http://www.securityfocus.com/bid/25831/info has 0.9.7m as being vulnerable. I'm not sure how one can try to get them to correct it on their list. Thanks, Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Victor Duchovni Sent: Tuesday, F

Re: 0.9.8 version that is fips compliant?

On Tue, Feb 26, 2008 at 05:02:27PM -0600, Blasdel, Jerry wrote: > Viktor, > > http://www.securityfocus.com/bid/25831/info has 0.9.7m as being > vulnerable. > > I'm not sure how one can try to get them to correct it on their list. > Sorry, my mistake, not theirs, the fix for this issue has no

Re: How to reestablish a DTLS connection?

Datagram is stateless, so to be able to detect a broken session, the application will need to support heart-beat. Alex On Wed, Feb 20, 2008 at 5:31 AM, João Pedro Patriarca <[EMAIL PROTECTED]> wrote: > Hi, > > > > After a DTLS connection established a peer fails (e.g. the client). The > other

Session resumption with DTLS - does it work?

Hi, When I hit "R" on openssl s_server and s_client, the session is torn down and not resumed. May I assume DTLS session resumption is broken? Or not supported in s_server and s_client? Thanks, alex.

Problem on compilation of Openssl

Dear All; I am compiling the openssl that time I got some function and mapping of function which is not in openssl source. This is as follows: PKCS8_PRIV_KEY_INFO_it() // This function is not available in openssl ; PKCS8_PRIV_KEY_INFO_new () // this function is not going to map

Re: OpenSSL Error

Where I'll get these libraries "-lcrypto" and "-lssl". I am using "Win32OpenSSL-0_9_8g.exe" and I couldn't able to find those libraries you've mentioned. Subhankar Kumar Katyayan Tata Consultancy Services Mailto: [EMAIL PROTECTED] Website: http://www.tcs.com __

Re: OpenSSL Error

To add on in my prev mail. The C file which I am trying to compile on window having some linking issue, but at the same time when I tried to build it on Linux it was building fine. Where I'll get these libraries "-lcrypto" and "-lssl". I am using "Win32OpenSSL-0_9_8g.exe" and I couldn't abl

Help regarding error

when i compile the program p192.c i get following error [EMAIL PROTECTED] ~]# gcc p192.c /tmp/ccicrxZV.o: In function `main': p192.c:(.text+0x12): undefined reference to `DH_new' p192.c:(.text+0x31): undefined reference to `BN_bin2bn' p192.c:(.text+0x3e): undefined reference to `BN_new' p192.c:(.