RE: Building an "exportable" OpenSSL application

2012-10-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills > Sent: Tuesday, 16 October, 2012 11:41 > > If you are linking to OpenSSL DLLs, then your application > isn't statically > > linked against OpenSSL. .lib files can simply be > references to exports in .dll files. > > This is an

Re: FIPS seed_pid issue

2012-10-16 Thread Dr. Stephen Henson
On Sun, Oct 14, 2012, Kumar Ghanta wrote: > Thank you very much for the quick response Stephen. Is it fine if we allow > parent and child processes to share the same seed? I just want to know if > there are any NIST restrictions. If possible, can you please elaborate on > how does openssl takes ca

RES: Generating rsakey using openssl as lib

2012-10-16 Thread Leonardo Laface de Almeida
Hi, Dave. The answers are bellow. >> I was following the main function in genpkey.c file and >> following the same >> sequence for generating key pair. I've got some executing >> erros that took me >> some hours to get it. I still have the problem and I think it >> might be some >> errors in

RE: Generating rsakey using openssl as lib

2012-10-16 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Leonardo Laface de Almeida > Sent: Monday, 15 October, 2012 15:14 > I was following the main function in genpkey.c file and > following the same > sequence for generating key pair. I've got some executing > erros that took me > some hours to g

Re: FIPS seed_pid issue

2012-10-16 Thread Kumar Ghanta
Can somebody please respond to my question? OpenSSH is aborting if 1.1 fips module is used.Here my question is whether we need to comment this logic(by compiling with "GETPID_IS_MEANINGLESS") or we need to generate seed again for child process. I want to know under what circumstances we can build

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Steve, Thank you for the confirmation. It would be useful to put known issues & exceptions in the Users Guide, particularly for the FIPS validated versions, as they have such long cycles between when they will be revalidated. Thanks, -AJ - Original Message - From: Dr. Stephen Henson

RE: Building an "exportable" OpenSSL application

2012-10-16 Thread Charles Mills
> If you are linking to OpenSSL DLLs, then your application isn't statically > linked against OpenSSL. .lib files can simply be references to exports in .dll files. This is an important point. Can we be absolutely clear? My picture of how this works is that the .lib files contain small stubs so

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread Dr. Stephen Henson
On Tue, Oct 16, 2012, AJ wrote: > Any other comments on the actual issue here? > > I don't believe the inconsistency is the expected way the API should work. > It's a bug. The fix was applied to non-validated versions of OpenSSL but was too late to be included in the last validation. Steve. --

Re: Building an "exportable" OpenSSL application

2012-10-16 Thread Thomas J. Hruska
On 10/16/2012 7:25 AM, Charles Mills wrote: I have a Windows-only OpenSSL application developed in VS 2010. I have now been tasked with creating parallel "regular" and "exportable" (from the US) distributions of the application. I UNDERSTAND YOU CAN'T GIVE LEGAL ADVICE. I'M ONLY LOOKING FOR TECH

Re: Building an "exportable" OpenSSL application

2012-10-16 Thread Jeffrey Walton
On Tue, Oct 16, 2012 at 10:25 AM, Charles Mills wrote: > I have a Windows-only OpenSSL application developed in VS 2010. I have now > been tasked with creating parallel "regular" and "exportable" (from the US) > distributions of the application. There's no need for two versions. Its all exportable

Building an "exportable" OpenSSL application

2012-10-16 Thread Charles Mills
I have a Windows-only OpenSSL application developed in VS 2010. I have now been tasked with creating parallel "regular" and "exportable" (from the US) distributions of the application. I UNDERSTAND YOU CAN'T GIVE LEGAL ADVICE. I'M ONLY LOOKING FOR TECHNICAL INPUT HERE. The application statically

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Any other comments on the actual issue here? I don't believe the inconsistency is the expected way the API should work. Thanks, -AJ - Original Message - From: AJ To: "openssl-users@openssl.org" Cc: Sent: Friday, October 12, 2012 7:14 PM Subject: Re: Inconsistent behavior between FIP

RE: Firefox unhappy with my self signed Cert

2012-10-16 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Friday, 12 October, 2012 11:51 >As some additional info, I am suspecting this may be an issue with my config file. >I am using the same config file I used to set up my certificate authority, >which has under [ req ] a

Re: winsock.h inclusion in dtls1.h

2012-10-16 Thread YUN GAO
Thank you! It works. I added the code at the beginning of my source, it can be compiled then. I just wonder if this code can be added into the openssl/ssl.h G.Y On Sat, Oct 13, 2012 at 4:42 PM, Vladimir Belov wrote: > Hi. > Just do: > > #ifdef _WIN32 > #define NOCRYPT > #include > #include > #e