RE: Extract of Public key and Serial number from Certificate

2012-02-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of praveenpvs > Sent: Tuesday, 21 February, 2012 10:24 > When I extracted the public key and saved to file, the Public > key file looks like [---END--- line incomplete] > I am not able to figure out what is problem. > Any suggestions/thoughts?? >

Re: FIPS fingerprint in .data not .rodata

2012-02-21 Thread Kevin Fowler
On Tue, Feb 21, 2012 at 3:51 PM, Andy Polyakov wrote: >> Another option (but shoot it down if its bogus :-): I noticed that if I >> compile >> fipscanister.o without "-fPIC", then the const variables do get placed in >> the (really readonly) .rodata section as desired. I thought maybe if I did >>

Re: FIPS fingerprint in .data not .rodata

2012-02-21 Thread Jeffrey Walton
On Tue, Feb 21, 2012 at 3:51 PM, Andy Polyakov wrote: >> Another option (but shoot it down if its bogus :-): I noticed that if I >> compile >> fipscanister.o without "-fPIC", then the const variables do get placed in >> the (really readonly) .rodata section as desired. I thought maybe if I did >>

Re: FIPS fingerprint in .data not .rodata

2012-02-21 Thread Andy Polyakov
> Another option (but shoot it down if its bogus :-): I noticed that if I > compile > fipscanister.o without "-fPIC", then the const variables do get placed in > the (really readonly) .rodata section as desired. I thought maybe if I did > that and went the static route - build libcrypto with no-sh

Re: FIPS fingerprint in .data not .rodata

2012-02-21 Thread Kevin Fowler
On Tue, Feb 21, 2012 at 1:11 PM, Andy Polyakov wrote: >> Though in FIPS 2.0 there is new option that might work in this case. >> Besides switching to another compiler that is. Introduced to rectify >> situation with rodata segments not being position-independent on Win64, >> defini

Re: Extract of Public key and Serial number from Certificate

2012-02-21 Thread praveenpvs
I am having some problem with the following piece of code.. When I extracted the public key and saved to file, the Public key file looks like: -BEGIN PUBLIC KEY- MIGdMA0GCSqGSIb3DQEBAQUAA4GLADCBhwKBgQCcKeojdze5WBip9ZT5GzNu6gcg X/Vw4hftCDIQ5TQ6DHDxKxBfapCgKx/4tIgomsm3P9Q6JjhxOZjv/zOvlmQDt

Re: Extract of Public key and Serial number from Certificate

2012-02-21 Thread praveenpvs
Thanks Stephen and DaveThank you very much for your inputs.. X509 *x509; int main() { x509 = NULL; fp=fopen("RSAKey.cer","rb"); if(fp == NULL) { printf("Could not open the file \n"); return 0; } else {

Re: FIPS fingerprint in .data not .rodata

2012-02-21 Thread Andy Polyakov
> Though in FIPS 2.0 there is new option that might work in this case. > Besides switching to another compiler that is. Introduced to rectify > situation with rodata segments not being position-independent on Win64, > defining __fips_constseg might prove useful even in this situatio

Re: weak key check?

2012-02-21 Thread Chris Dodd
On 02/19/2012 07:36 PM, anthony berglas wrote: Exactly. So you need about 112 bits of "entropy" / Pass Phrase to generate a good 2048 bit key. Remember that the vast majority of 2048 bit numbers are not valid key pairs. My question is, has this been done, or would it be easy to do given the

s_server supporting multiple clients

2012-02-21 Thread Erwin Himawan
Hi folks, Can the s_server support multiple clients connections? Thanks, Erwin