Re: i2d_X509_CINF() crash/valgrind trace

2009-06-12 Thread Neil Youngman
On Friday 12 June 2009 02:12:06 Kyle Hamilton wrote: This looks like you're trying to use a library compiled for multithreading without providing it the address of a lock or unlock function. This is, incidentally, programmer FAQ #1, readable at http://openssl.org/support/faq.html#PROG1 .

ssl client behind http proxy

2009-06-12 Thread Selçuk Cihan
Hi, i use openssl-0.9.8k on windows vista. i set up a local http proxy for development purposes. i need to be able to have ssl communication from a client that is behind http proxy. Socket creation and connecting to the local proxy server is fine(using winsock2) Then, from what i have grabbed

Re: Maintainers: Repository problem (0.9.7h too)

2009-06-12 Thread Michael S. Zick
On Thu June 11 2009, Paul Rogers wrote: On Fri, 12 Jun 2009 10:30:21 +1000, Jeremy Hunt jere...@optimation.com.au said: Yep, I just got a new copy this morning. openssl-0.9.7g in the openssl download repository is bad and has been for some time. There's a bad link in test/fips-aesdata,

Jesse Santana/AdminFinance/CSULB is out of the office.

2009-06-12 Thread Jesse Santana
I will be out of the office starting 06/12/2009 and will not return until 06/15/2009. I will respond to your message when I return. If you require immediate assistance, please contact our support line at net-h...@csulb.edu.

RE: FIPS

2009-06-12 Thread Lovette, Steve
Team In the NIST list of FIPS 140-2 certified products algorithms I do not see OpenSSL on that list. Are you embedding (hope) a certified product and/or algorithm that I am unaware of. This for us has become a hot item. Is it possible that I could get an answer from someone today or over the

Re: FIPS

2009-06-12 Thread Dr. Stephen Henson
On Fri, Jun 12, 2009, Lovette, Steve wrote: Team In the NIST list of FIPS 140-2 certified products algorithms I do not see OpenSSL on that list. Are you embedding (hope) a certified product and/or algorithm that I am unaware of. This for us has become a hot item. Is it possible that I could

Re: FIPS

2009-06-12 Thread Michael S. Zick
On Fri June 12 2009, Lovette, Steve wrote: Team In the NIST list of FIPS 140-2 certified products algorithms I do not see OpenSSL on that list. Are you embedding (hope) a certified product and/or algorithm that I am unaware of. This for us has become a hot item. Is it possible that I

General Questions.... Open SSL and Windows..

2009-06-12 Thread Carl Furner
1) Can I compile Openssl fips 1.2 with VC9 and have it still be validated? 2) Can I compile Openssl fips 1.2 on a win32 environment for x64. In otherwords, compile x64 on XP Windows and run Vista x64 with the binaries compiled and still be validated? 3) Is it possible to change the names

Re: FIPS

2009-06-12 Thread Kyle Hamilton
OpenSSL itself is not FIPS-validated and is not on the list. However, the OpenSSL FIPS Object Module (software version 1.2) is on that list, with certificate number 1051. (http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140crt/140crt1051.pdf) The reason you're not seeing it is likely

RE: FIPS

2009-06-12 Thread Lovette, Steve
Thank you all for responding. My bad. I simply missed it when I was researching for the use of RSA BSAFE in a new product we are considering and could not recall seeing. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Michael

Re: get x509 common name

2009-06-12 Thread Tim Hudson
Martin Kaiser wrote: Hi Jerry, Thus wrote Jerry Wang (jerry...@gmail.com): Does OpenSSL have a function for getting the common name from a X509 certificate? how about something like X509 *cert; X509_NAME *subjectName; char subjectCn[256]; subjectName = X509_get_subject_name(cert);