Connetions getting dropped due to wrong version number.

2012-03-06 Thread ankit dwivedi
Hi all, I am new to this forum, kindly pardon me if the question is naive. I have already tried searching the Error code in the mailing list but got no positive results. Scenario : I have deployed openssl on my machine and wrote a utility which uses a function to verify the data send and receiv

Re: Providing libraries for Crypto::SSLeay

2012-03-06 Thread SB Tech
So, just to clarify: Apple have deprecated OpenSSL in 10.7.x, and also appear to no longer provide complete Perl libraries either? Is the make problem related to the YAML issue, or is it separate? If separate, how can I show you the make errors? I posted everything that was displayed in the Term

RE: x509 -nameopt show_type crash

2012-03-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Curt Sampson > Sent: Tuesday, 06 March, 2012 00:38 > If I run > > openssl x509 -nameopt show_type -noout -text -in user-a1.crt > > against the certificate below, the openssl command line > program appears > to crash in the middle of prin

RE: Please Clarify.Intermediate certificate verification ?

2012-03-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Edward Ned Harvey > Sent: Tuesday, 06 March, 2012 13:18 > > From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > > us...@openssl.org] On Behalf Of Mr.Rout > > > > 1) what is intermediate certificate validation ? > > When you generate

RE: Need help on using AES_wrap_key() function

2012-03-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of pkumarn > Sent: Monday, 05 March, 2012 23:35 > To: openssl-users@openssl.org > Subject: Need help on using AES_wrap_key() function > 1. As i understand AES_wrap_key(), first argument AES_KEY > *key is the key > which needs to be wrapped and *in

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Dr. Stephen Henson
On Tue, Mar 06, 2012, Jacob White wrote: > I added the /fixed and it worked at first. > > >From the command line I called: > openssl version -a > "Warning: can't open config file: /usr/local/ssl/openssl.cnf" > . > . > . > It displays other config settings. > > Then I call: > set OPENSSL_FIPS=1 >

Tutorials on OpenSSL integration with nCipher HSM (nShield) ?

2012-03-06 Thread Sunjeet Singh
Hi, Most of the references on this forum on how to use nCipher HSM with OpenSSL using the CHIL API (or CAPI) are outdated. I was wondering if anyone had any pointers to helpful resources in this regard. I've been reading up about it here and there and I'm aware of the commands to use for engin

RE: Please Clarify.Intermediate certificate verification ?

2012-03-06 Thread Edward Ned Harvey
> From: owner-openssl-us...@openssl.org [mailto:owner-openssl- > us...@openssl.org] On Behalf Of Mr.Rout > > 1) what is intermediate certificate validation ? When you generate a CSR, the CA can sign it directly, or they can sign it via an intermediate. I'm not quite sure what's the point of the

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Jacob White
I added the /fixed and it worked at first. >From the command line I called: openssl version -a "Warning: can't open config file: /usr/local/ssl/openssl.cnf" . . . It displays other config settings. Then I call: set OPENSSL_FIPS=1 openssl md5 README Output: "5320:error:2D06B06F:FIPS routines:FIPS_

Please Clarify.Intermediate certificate verification ?

2012-03-06 Thread Mr.Rout
Folks, Can somebody clarify my doubts on below questions 1) what is intermediate certificate validation ? 2) Is it required to keep chained certificate or End user certificate at Server Side 3) How to generate intermediate certificate using Openssl command ? Please clarify. Thanks in advance.

Re: Providing libraries for Crypto::SSLeay

2012-03-06 Thread Jakob Bohm
On 3/5/2012 9:21 PM, SB Tech wrote: I've installed openssl 1.0.0g, but I'm still receiving an error when running the following command. The error is a different one, however: $ sudo cpan install Crypt::SSLeay Going to read '/Users/REDACTED/.cpan/Metadata' Database was generated on M

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Dr. Stephen Henson
On Tue, Mar 06, 2012, Jacob White wrote: > I am using Windows 7 Professional Service Pack 1 with Visual Studio 2010 > (So, VC++ 2010). > When building the FIPS capable OpenSSL after ms\do_nasm edit the makefile ms\ntdll.mak and try adding /fixed to the line with LFLAGS on it. Steve. -- Dr Steph

Re: Cannot get openssl-1.0.1 into fips mode

2012-03-06 Thread Jacob White
I am using Windows 7 Professional Service Pack 1 with Visual Studio 2010 (So, VC++ 2010). On Mon, Mar 5, 2012 at 3:57 PM, Dr. Stephen Henson wrote: > On Mon, Mar 05, 2012, Jacob White wrote: > > > After downloading openssl-1.0.1beta3 and using "perl Configure VC-WIN32 > > fips enable-static-engin

OpenSSL FIPS Module 2.0 status update

2012-03-06 Thread Steve Marquess
The OpenSSL FIPS Object Module 2.0 is now in "coordination" status at the CMVP. That's usually a good sign that the formal validation award is imminent (as in "a week or three..."). -Steve M. -- Steve Marquess OpenSSL Software Foundation, Inc. 1829 Mount Ephraim Road Adamstown, MD 21710 USA +1

Re: Re: client certificates suddenly not accepted anymore: squid: SSL unknown certificate error 12 -> User error, not a library error

2012-03-06 Thread Marcus . Daniel
I just want to wrap up my problem so that others can learn from my ignorance: Squid's logs aren't very verbose, so I only got "SSL unknown certificate error 12" , when it suddenly wouldn't accept my client certificates anymore. That's the same error you get when a certificate has expired. But

Need help on using AES_wrap_key() function

2012-03-06 Thread pkumarn
Hi, I am using openssl for encryption in my project and currently i am stuck with few issues... 1. As i understand AES_wrap_key(), first argument AES_KEY *key is the key which needs to be wrapped and *in is the wrapping key. Correct me if i am wrong. int AES_wrap_key(AES_KEY *key, const unsigne