About OPENSSL platform

Hi All, Could you do me a favor to know whether openssl support to run on opteron (AMD) platform? If yes, which version? And how to set configure file? Thanks and regards, Leo

openssl 0.9.4

Hi All, Could you give me quick reply that whether openssl 0.9.4 could support multi-threads application? Thanks and regards, Leo

Installation Problems

Hi, I'm new to openssl & have recently downloaded openssl-0.9.8j.tar & had tried installing it but encountered errors. I've also installed "libiconv-1.11-sol10-sparc-local.gz" & "gcc-3.4.6-sol10-sparc-local.gz" Below are my steps: # isainfo sparcv9 sparc # uname -a SunOS training2 5.10 Generi

How to retieves the count of certificates in certificate store

Hi all, How can i retrieves the count of certificates in certificate store in LINUX? ex: CA's, self-signed etc. Any direct API is there in LINUX? -- View this message in context: http://www.nabble.com/How-to-retieves-the-count-of-certificates-

Re: openssl 0.9.4

Leo, Liangyou Wang (liangwan) schrieb: Hi All, Could you give me quick reply that whether openssl 0.9.4 could support multi-threads application? Thanks and regards, Leo Hi Leo, see http://www.openssl.org/support/faq.html#PROG1 Hope it helps Ted ;) -- PGP Public Key Information Down

RE: openssl 0.9.4

Yes. Thank you. Regards, --Ajeet Kumar Singh _ From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Leo, Liangyou Wang (liangwan) Sent: Monday, January 19, 2009 7:40 AM To: openssl-users@openssl.org Subject: openssl 0.9.4 Importance

RE: About OPENSSL platform

Hi Wang, It will support AMD also. Openssl only depends upon OS like window, unix etc. Please check what OS you are using. Regards, --Ajeet Kumar Singh _ From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Leo, Liangyou Wang (liangw

How to detect dead peers with DTLS?

Hi everybody, how can I detect a dead server with *DTLS*? I'm developing an application (IPFIX exporter and collector) that only *sends* data using DTLS over UDP. Imagine the collector (DTLS server) crashes and comes up again. The exporter (DTLS client) does not notice the fact that the serve

Re: openssl 0.9.4

Yes it supports multithread applications. On Mon, Jan 19, 2009 at 7:40 AM, Leo, Liangyou Wang (liangwan) < liang...@cisco.com> wrote: > Hi All, > > Could you give me quick reply that whether openssl 0.9.4 could support > multi-threads application? > > > > Thanks and regards, > > Leo > -- reg

ECDSA signature verification

Hi, I'm new to OpenSSL, having just installed openssl-fips-1.2. I'm looking for some guidance in how to use OpenSSL (from the command line) to verify ECDSA signatures. In particular, I have the following questions: * is it possible to define our own curves (rather than using one of the pred

RE: reducing the size of openssl package

U should enable require Preprocessor for Encryption and Auth. Algorithm. Thank you. Regards, --Ajeet Kumar Singh Sarve Bhavantu Sukhina ,Sarve Santu NiramayaSarve Bhadrani Pashyantu , Maa Kaschit Dukha Bhagh Bhavet -Original Message- From: owner-openssl-us...@openssl.org [m

RE: How to detect dead peers with DTLS?

> Please note that I can not solve this problem via the protocol that I > use on top of DTLS - which is IPFIX - because IPFIX - by definition - > only *sends* but does not receive data. I.e. I can not infer that the > server crashed from the fact the he does not send any data because he > does not

Hashing bit-oriented data

Hello, Using the OpenSSL command line, is it possible to compute hashes of data which is not a whole number of bytes in length? For example, a block of data consisting of (say) 110 bits? Padding the data is not an option, because we need to be able to verify hashes which have been computed exte

Re: openssl 0.9.4

On Mon, Jan 19, 2009, Leo, Liangyou Wang (liangwan) wrote: > Hi All, > > Could you give me quick reply that whether openssl 0.9.4 could support > multi-threads application? > Yes but the use of such an ancient version of OpenSSL is STRONGLY discouraged. Several critical security fixes have been

Re: How to detect dead peers with DTLS?

Hi Daniel, why not use DTLS on top of SCTP? SCTP would check using its heartbeat mechanism whether the connection is still alive. Best regards Michael On Jan 19, 2009, at 10:47 AM, Daniel Mentz wrote: Hi everybody, how can I detect a dead server with *DTLS*? I'm developing an application

Re: Installation Problems

I think you have taken bad version of openSSL

Re: How to detect dead peers with DTLS?

On Mon, Jan 19, 2009 at 10:47 AM, Daniel Mentz wrote: > Please note that I can not solve this problem via the protocol that I use on [...] > the fact the he does not send any data because he does not send data anyway > (except Handshake messages like ServerHello, ServerKeyExchange, etc.). I > gues

Re: Hashing bit-oriented data

On Mon, Jan 19, 2009 at 1:48 PM, Young, Alistair wrote: > Hello, > > Using the OpenSSL command line, is it possible to compute hashes of data > which is not a whole number of bytes in length? For example, a block of > data consisting of (say) 110 bits? > > Padding the data is not an option, becau

Re: reducing the size of openssl package

You mean specify the various no-xyz (e.g. no-md5, etc.) options when ./config -uring the OpenSSL source tree for building? Anyway, toggling the various OPENSSL_NO_* #define's (which are all toggle-able through ./config commandline options if I am not mistaken) is the fast lane towards reducing Ope

RE: Installation Problems

I had the same problem. I made a change that will make it work but it would be good if someone else could verify if the change is necessary. In the Makefile under the fips directory, where it does the cp -p of the fips modules, I had to add the prefix of $(FIPSLIBDIR) to each of the files being c

RE: Hashing bit-oriented data

-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ger Hobbelt Sent: 19 January 2009 14:00 To: openssl-users@openssl.org Subject: Re: Hashing bit-oriented data > On Mon, Jan 19, 2009 at 1:48 PM, Young, Alistair wrote: > > Hello,

Re: which algorithms are enabled by default with fips?

Hi All, Will the Openssl community will release all the openssl with fips support ie next release of openssl will support fips capability? Thanks Joshi Chandran On Mon, Jan 12, 2009 at 7:23 PM, Steve Marquess wrote: > PGNet wrote: > >> On Sun, Jan 11, 2009 at 3:42 PM, Steve Marquess < >> ma

Re: Installation Problems

On Mon, Jan 19, 2009, Blasdel, Jerry wrote: > I had the same problem. I made a change that will make it work but it > would be good if someone else could verify if the change is necessary. > > In the Makefile under the fips directory, where it does the cp -p of the > fips modules, I had to add t

Re: which algorithms are enabled by default with fips?

It has already been released. Pick up the openssl-fips-1.2.tar.gz distribution, and the openssl-0.9.8j.tar.gz distribution. Also be aware that you MUST configure the openssl-fips package *EXACTLY* as described in the Security Policy. I am not going to try to reiterate the rules here, nor the com

Importing OpenSSL CRL into Windows 2003 error

A native Windows CRL includes the following additional extensions : Authority Key Identifier CA Version Next CRL Publish I was able to add Authority Key Identifier and CA Version via the new_oids section: msCAVersion=1.3.6.1.4.1.311.21.1 msCRLNextPublish=1.3.6.1.4.1.311.21.4 I also added th

Re: How to detect dead peers with DTLS?

Thank you all for your answers. I think I will go for the hack that misuses re-negotiation as a kind of heartbeat, keep alive or echo request. I tried to avoid this hack at first because it is a computational burden. AFAIK re-negotiation means restarting from scratch which means that expensive pu

Re: How to detect dead peers with DTLS?

Hi Daniel, comments in-line. Best regards Michael On Jan 19, 2009, at 10:54 PM, Daniel Mentz wrote: Thank you all for your answers. I think I will go for the hack that misuses re-negotiation as a kind of heartbeat, keep alive or echo request. I tried to avoid this hack at first because it

Format of index.txt file

Hi all, I need to know the format of the index.txt file, becuase I have to write on it from a python script. I was googling about it, but I don't find too much information. The only things I found was that: Field1 Field2 Field3 Field4 Field5 Unkown Unkown The fie

Re: Format of index.txt file

It's true that it's not very well documented. The source gives some hints, though. apps/apps.h: #define DB_type 0 #define DB_exp_date 1 #define DB_rev_date 2 #define DB_serial 3 /* index - unique */ #define DB_file 4 #define DB_name 5 /* i