Re: How to embed a CA certificate in a program ?

2011-06-07 Thread Michel
Hi Albrecht, I'm still wondering though how I could have found that out myself. :-( Unfortunately http://www.openssl.org/docs/ssl/SSL_CTX_set_cert_store.html reads: Currently no detailed documentation on how to use the X509_STORE object is available. Is there some more documentation

Cross-compilation of openssl-fips-1.2.2

2011-06-07 Thread Luca Bolognini
Hallo,I'm trying to cross-compile openssl-fips-1.2.2 for an arm embedded device.These are the steps I followed:[bolognini@davinci17 ~/software/openssl-fips-1.2.2]$ export CROSS_COMPILE=/opt/ti/codesourcery/bin/arm-none-linux-gnueabi-[bolognini@davinci17 ~/software/openssl-fips-1.2.2]$ export

Re: Bug in EVP_DigestFinal_ex() in version 1.0.0d?

2011-06-07 Thread Erwin Himawan
Hi Victor, If I understand these printout correctly, my compilation environment is mixed. However, can you confirm? When the code crashes, here are the print outs: OPENSSL_VERSION_NUMBER: 9470255 SSLeay(): 268435535 When the code does not crash, here are the print outs:

Re: Bug in EVP_DigestFinal_ex() in version 1.0.0d?

2011-06-07 Thread Victor Duchovni
On Tue, Jun 07, 2011 at 10:05:19AM -0500, Erwin Himawan wrote: Hi Victor, If I understand these printout correctly, my compilation environment is mixed. However, can you confirm? When the code crashes, here are the print outs: OPENSSL_VERSION_NUMBER: 9470255 Converted to

Re: Bug in EVP_DigestFinal_ex() in version 1.0.0d?

2011-06-07 Thread Erwin Himawan
Viktor, Thanks for your help. Once I fix my compilation environment, everything works ok. Thanks again. Regards, Erwin On Tue, Jun 7, 2011 at 10:22 AM, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Tue, Jun 07, 2011 at 10:05:19AM -0500, Erwin Himawan wrote: Hi Victor,

Re: Bug in EVP_DigestFinal_ex() in version 1.0.0d?

2011-06-07 Thread Victor Duchovni
On Tue, Jun 07, 2011 at 10:42:54AM -0500, Erwin Himawan wrote: Thanks for your help. Once I fix my compilation environment, everything works ok. Glad it works for you. When the code crashes, here are the print outs: OPENSSL_VERSION_NUMBER: 9470255 Converted to hexadecimal,

RE: Using PCKS Padding in OpenSSL

2011-06-07 Thread Eric S. Eberhard
I would point out in that last approach -- encrypting and sending un secure (which is a good idea in many cases) does have a few considerations. If the data is sensitive (like magnetic strip data from a credit card) this is completely NOT ALLOWED. PCI and PA-DSS won't allow it to hit the

Re: Using PCKS Padding in OpenSSL

2011-06-07 Thread Jeffrey Walton
On Tue, Jun 7, 2011 at 3:21 PM, Eric S. Eberhard fl...@vicsmba.com wrote: I would point out in that last approach -- encrypting and sending un secure (which is a good idea in many cases) does have a few considerations.  If the data is sensitive (like magnetic strip data from a credit card) this

Re: Open SSL Error 14094412

2011-06-07 Thread David Mitchell
On 05/31/2011 03:02 PM, David Mitchell wrote: On May 31, 2011, at 2:32 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of David Mitchell Sent: Friday, 27 May, 2011 12:35 I'm having some problems with EAP-TLS in FreeRadius 2.1.10. I have a client where

RE: Using PCKS Padding in OpenSSL

2011-06-07 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Eric S. Eberhard Sent: Tuesday, 07 June, 2011 15:21 I would point out in that last approach -- encrypting and sending un secure (which is a good idea in many cases) does have a few considerations. If the data is sensitive (like magnetic