Re: RE: OpenSSL 1.0.1a

2012-04-25 Thread Peter Heimann
On 01/-10/-28163 08:59 PM, Spence, Thomas CIV USAF AFDW 844 CS/SCOX wrote: I am using AIX 5.3 with gcc 4.3.5. ld: 0711-317 ERROR: Undefined symbol: OPENSSL_ia32cap_P I had the same problem with the file crypto/evp/e_rc4_hmac_md5.c. Linking on non-x86 hardware failed. Try to replace this file

RE: EXTERNAL: Re: RE: OpenSSL 1.0.1a

2012-04-25 Thread Spence, Thomas CIV USAF AFDW 844 CS/SCOX
Million THANKS! I never knew about SNAP! Okay I did try 3 files: openssl-1.0.1-stable-SNAP-20120425.tar.gz (OpenSSL 1.0.1b-dev) openssl-1.0.2-stable-SNAP-20120425.tar.gz (OpenSSL 1.0.2-dev) openssl-SNAP-20120425.tar.gz (OpenSSL 1.1.0-dev) They are perfect without any error... I need

Re: EXTERNAL: Re: RE: OpenSSL 1.0.1a

2012-04-25 Thread Dr. Stephen Henson
On Wed, Apr 25, 2012, Spence, Thomas CIV USAF AFDW 844 CS/SCOX wrote: Million THANKS! I never knew about SNAP! Okay I did try 3 files: openssl-1.0.1-stable-SNAP-20120425.tar.gz (OpenSSL 1.0.1b-dev) openssl-1.0.2-stable-SNAP-20120425.tar.gz (OpenSSL 1.0.2-dev) openssl-SNAP-20120425

SSH/SFTP - DH_GEX group out of range

2012-04-25 Thread Johansen Daniel
Hi. Having this weird problem when connecting to a SFTP server. Client Debug: sftp - -oport= -F /usr/local/etc/ssh_config removed@removed OpenSSH_5.9p1, OpenSSL 1.0.1 14 Mar 2012 debug1: Reading configuration data /usr/local/etc/ssh_config debug1: /usr/local/etc/ssh_config line 1:

SV: SSH/SFTP - DH_GEX group out of range

2012-04-25 Thread Johansen Daniel
Why did my message become base64 encoded ? Vennlig hilsen Daniel Bjørnådal Johansen IT Konsulent, ITO Card Services -Opprinnelig melding- Fra: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] På vegne av Johansen Daniel Sendt: 25. april 2012 14:39 Til:

Re: Please tell me about encryption API of OpenSSL 1.0.1

2012-04-25 Thread MauMau
From: fr...@baggins.org I have modified your code to use XTS, which I think will achieve what you want to do: - It supports random read and write access to your data - It is standards based so you don't have to make up your own way of doing things and potentially open yourself up to security

SSH/SFTP - DH_GEX group out of range

2012-04-25 Thread Johansen Daniel
Hi. Having this weird problem when connecting to a SFTP server. Client Debug: sftp - -oport= -F /usr/local/etc/ssh_config removed@removed OpenSSH_5.9p1, OpenSSL 1.0.1 14 Mar 2012 debug1: Reading configuration data /usr/local/etc/ssh_config debug1: /usr/local/etc/ssh_config line 1:

Validating a TLS-capable AEC-CCM implementation

2012-04-25 Thread Muschick, Paul
So a colleague of mine added a new AES-CCM cipher suite to TLS and I've been trying to figure out how to validate it. NIST 800-38C has test cases, but not only can I not get those inputs in to a TLS session, it also seems like OpenSSL has a special use of the AAD field that I have to take into

Re: RE: OpenSSL 1.0.1a

2012-04-25 Thread zhu qun-ying
This error has caught a lots of people, I think it deserved a new version release to fixed this bug.  Or at least saying 1.0.1a is not suitable for not x86 platform on the web page and offering the daily snap as a work around.  As from the website, 1.0.1a is the latest released, and it contains

How to trust a 'root' certificate

2012-04-25 Thread Tammany, Curtis
Hello- I am running Apache 2.2.22 with OpenSSL 1.0.1 on Windows (XP for dev and server 2003 for production) I require client certificates. I am getting FAILED:unable to get local issuer certificate errors in my log file from Windows 7 clients. Digging suggested that I check the intermediate

Re: Please tell me about encryption API of OpenSSL 1.0.1

2012-04-25 Thread Matt Caswell (fr...@baggins.org)
On 25/04/12 15:03, MauMau wrote: Q1: Is AES-XTS officially supported by OpenSSL 1.0.1? I'm wondering if XTS is still an experimental feature in OpenSSL, because the file Changes in the OpenSSL 1.0.1 tarball does not refer to XTS. Well 1.0.1 is the latest stable version, and I have seen