Re: seed/$RANDFILE confusion

2012-10-05 Thread Jeffrey Walton
On Fri, Oct 5, 2012 at 6:42 AM, Jakob Bohm wrote: > On 10/5/2012 9:54 AM, int0...@safe-mail.net wrote: >> >> > On computers that don't have a good /dev/*random, the randomness used >> > by OpenSSL comes only from things happening on the computer during the >> > few moments when the openssl tool is

RE: Where is the string "SSL23_GET_SERVER_HELLO" generated?

2012-10-05 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Dongcai Shen / Xiaoli Shen >Sent: Thursday, 04 October, 2012 04:57 >I am a newbie of using openssl and would like to seek help from you. >Thank you very much. >A common error message printed out by openssl is: >140770FC:SSL routines:SSL23_GET_

RE: How to store multiple signatures in a file

2012-10-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Henrik Grindal Bakken > Sent: Friday, 05 October, 2012 03:47 > Hi. I have a list of (RSA) signatures made on the same digest, and > I'd like to store them in a single file. > > A simple solution is obviously to e.g. store the length of sig0 >

RE: FIPS-compliant OpenSSL on Android

2012-10-05 Thread Jason D. Knight (FTL-ENG)
P.S. We are targeting Android 3.0 on ARMv7, and Android 4.0 on ARMv7. Thank you. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jason D. Knight (FTL-ENG) Sent: Friday, October 05, 2012 2:21 PM To: openssl-users@openssl.org

RE: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread Jeremy Farrell
What methods did you try? Googling for openssl windows brings up a variety of information and download pages as the first six hits, all of them directly relevant to what you want. Regards, jjf From: engineermike [mailto:engineerm...@mindspring

FIPS-compliant OpenSSL on Android

2012-10-05 Thread Jason D. Knight (FTL-ENG)
Hello. Here's my question in a nutshell: I would like to use OpenSSL in FIPS mode from an Android app. I know that I can use the NDK to build a native shared library (.so), and use JNI to load and call into that library from the Java app. Is it possible to enter FIPS mode with that arrangeme

How to store multiple signatures in a file

2012-10-05 Thread Henrik Grindal Bakken
Hi. I have a list of (RSA) signatures made on the same digest, and I'd like to store them in a single file. A simple solution is obviously to e.g. store the length of sig0 (32 bits, network byte order) first, then sig0, then l(sig1), then sig1, etc., but I was wondering if there was a standard w

RE: how to extract O= and OU= from a subject cert

2012-10-05 Thread mclellan, dave
Thank you Dr. Henson. Got it. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Thursday, October 04, 2012 12:22 PM To: openssl-users@openssl.org Subject: Re: how to extract O= and OU= from a subject ce

re: how to extract O= and OU= from a subject cert

2012-10-05 Thread mclellan, dave
Got it. thanks very much. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of lists Sent: Thursday, October 04, 2012 12:01 PM To: openssl-users@openssl.org Subject: > We know how to extract the subject and issuer from a cert

RE: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO Great, thanks all for Win32OpenSSL-1_0_1c.exe installation. Simon -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jakob Bohm Sent: Friday, October 05, 2012 10:44 AM To: openssl-user

Re: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Jakob Bohm
Running that file will install openssl.exe and all the related files at a location of your choosing, with openssl.exe in a "bin" subdirectory of whatever you choose when running Win32OpenSSL-1_0_1c.exe (or later). For example, if you choose "C:\Program Files (x86)\OpenSSL", the next step is "C:

RE: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO I don't have a chance to run Win32OpenSSL-1_0_1c.exe now. Can someone provide what's the steps I need to do after run Win32OpenSSL-1_0_1c.exe? (Basically I would run openssl command line at 1.0.1c version.) Thanks..Simon -Original Message- F

Re: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Mauricio Tavares
On Fri, Oct 5, 2012 at 9:16 AM, Hu, Yingwoei CIV USARMY ARDEC (US) wrote: > Classification: UNCLASSIFIED > Caveats: FOUO > > Hi, > > We used to have the openssl 0.9.8k at Windows 2003 server, at > \bin\openssl.exe to run the command line. > > As the new release openssl 1.0.1c, can we apply the ne

Re: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread carlyoung
http://slproweb.com/products/Win32OpenSSL.html [1] On Fri 05/10/12 2:37 PM , "engineermike" engineerm...@mindspring.com sent: HELLO, Links: -- [1] http://slproweb.com/products/Win32OpenSSL.html

RE: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread Charles Mills
http://www.openssl.org/related/binaries.html Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of engineermike Sent: Friday, October 05, 2012 9:37 AM To: openssl-users@openssl.org Subject: OpenSSL running on Windows XP/2003/7 Hello, I've b

OpenSSL running on Windows XP/2003/7

2012-10-05 Thread engineermike
Hello, I've been asked to create a certificate following a video that was made with step by step instructions. The video is using OpenSSL on a windows machine. I can't seem to locate the program for a windows machine. Can someone send me a link to the version of the program that will run on W

openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO Hi, We used to have the openssl 0.9.8k at Windows 2003 server, at \bin\openssl.exe to run the command line. As the new release openssl 1.0.1c, can we apply the new openssl at Windows 2003 server? I cannot find the openssl.exe but instead openssl.c th

RE: Documentation for TXT_DB errors?

2012-10-05 Thread Charles Mills
I hear you (whoever you are!). It's a playpen CA. I'm a software developer. These certificates will never be allowed out into the wild. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of lists Sent: Thursday, October 0

Re: seed/$RANDFILE confusion

2012-10-05 Thread Jakob Bohm
On 10/5/2012 9:54 AM, int0...@safe-mail.net wrote: > On computers that don't have a good /dev/*random, the randomness used > by OpenSSL comes only from things happening on the computer during the > few moments when the openssl tool is running. To gather up more > randomness, the openssl tool tri

Re: Non-Blocking and ENGINE

2012-10-05 Thread Dirk Menstermann
Thank you Stephen. On 04.10.2012 17:34, Dr. Stephen Henson wrote: > On Tue, Oct 02, 2012, Dirk Menstermann wrote: > >> Hello list, >> >> is there a way to use ENGINEs in a non-blocking way - meaning for a network >> operation (remote HSM) the thread can do something else instead of waiting >> fo

Re: seed/$RANDFILE confusion

2012-10-05 Thread int0x80
> On computers that don't have a good /dev/*random, the randomness used > by OpenSSL comes only from things happening on the computer during the > few moments when the openssl tool is running. To gather up more > randomness, the openssl tool tries to accumulate randomness over > multiple runs as f