openssl freebsd 8.2 install, compile error

2012-02-18 Thread aram_baghomian
Hi, I want to compile openssl for freebsd 8.2 but MAKE program create some error which I don't know the reason of it. I use this commands. # config # make ERROR: -

Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-18 Thread Gatewood_Green
Tested with snapshots 20120216 After compiling openssl-fips-2.0 I get a working fips_test_suite. I compile openssl-1.0.1 and then link a simple a simple application (we'll can fips_can_test, see below). compiling like so: CC=/usr/local/ssl32/bin/fipsld FIPSLD_CC=gcc -m32

Re: Confused about OpenSSL and CA Certs

2012-02-18 Thread Michael S. Zick
On Fri February 17 2012, Dave Meetchum wrote: I am trying to use OpenSSL on iOS and Android in conjunction with libcurl for my applications HTTP interface. From what I understand OpenSSL does not come with a CA cert which is understandable. Also my understanding is that if you need a CA cert

Re: Confused about OpenSSL and CA Certs

2012-02-18 Thread MK
On Fri, 17 Feb 2012 12:12:43 -0700 Dave Meetchum yancy7...@gmail.com wrote: I am trying to use OpenSSL on iOS and Android in conjunction with libcurl for my applications HTTP interface. From what I understand OpenSSL does not come with a CA cert which is understandable. Also my understanding

Re: Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-18 Thread Dr. Stephen Henson
On Fri, Feb 17, 2012, gatewood_gr...@mcafee.com wrote: Tested with snapshots 20120216 After compiling openssl-fips-2.0 I get a working fips_test_suite. I compile openssl-1.0.1 and then link a simple a simple application (we'll can fips_can_test, see below). compiling like so:

Re: FIPS fingerprint in .data not .rodata

2012-02-18 Thread Kevin Fowler
On Fri, Feb 17, 2012 at 10:25 PM, Dr. Stephen Henson st...@openssl.orgwrote: On Fri, Feb 17, 2012, Kevin Fowler wrote: Thanks Harvey, This seems to have worked as far as getting the .rodata section used. This is what I see now: 001b5740 g O .rodata0010

Re: possible memleak

2012-02-18 Thread Botond Botyanszki
Hi, On Sat, 18 Feb 2012 12:47:34 +0800 (CST) Ziyu Liu lzyz...@126.com wrote: I think you may call the function [X509 *SSL_get_peer_certificate(const SSL *s)] to get a peer's certificate, but you have freed this certificate. SSL_get_peer_certificate will increase the reference count of this

RE: weak key check?

2012-02-18 Thread Edward Ned Harvey
From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of anthony berglas Taking a different slant, is it possible to provide the Entropy using a pass phrase.  So a given pass phrase will always generate the same key pair.  This means that for simple

Re: FIPS fingerprint in .data not .rodata

2012-02-18 Thread Andy Polyakov
The key thing I realized is that the incore script that comes with the FIPS Object Module v2.0 tarball handles both native AND cross-compile scenarios. Even though FIPS 2.0 util/incore is capable of handling arbitrary ELF binary (native or not), it's not used in non-cross-compile/native