Re: Conditionally Patching output of Makefile from Configure?

2013-01-01 Thread Ben Laurie
On Mon, Dec 31, 2012 at 11:39 AM, Jeffrey Walton noloa...@gmail.com wrote: On Sun, Dec 30, 2012 at 3:20 PM, jb-open...@wisemo.com wrote: On 30-12-2012 21:01, Jeffrey Walton wrote: Hi All, While working on Apple with Mac OS X and iOS, I found I needed to patch OpenSSL 1.0.1c's Makefile.

Solved - Re: problem with self-signed crt in Apache

2013-01-01 Thread Robert Moskowitz
I had changed my hostname for the system, and that does not produce a new localhost.crt, so the message was from this cert content and the ssl.conf reference to the localhost.crt Grumble, Grumble. As for the '/' in the report of cert content, this seems to be a 'bug' in how the DN is

Best way to append to trusted CA bundle (RHEL)

2013-01-01 Thread Ray Van Dolson
I'm trying to extend the list of certifictaes (the default CA bundle) OpenSSL and OpenSSL-aware apps trust to include out Enterprise root cert. This is on a RHEL 5.x machine (0.9.8e plus backported RH patches). From reading, it seems like the proper way to do this is either to append the cert to

Re: Using OpenSSL in a makefile?

2013-01-01 Thread Daode
|On Mon, Dec 31, 2012 at 1:58 PM, Walter H. walte...@mathemainzel.info \ |wrote: | Hello, | | why does the following makefile not succeed? | | ... | I have isolated the problem: | | openssl crl -noout -text -in $ $@ | exits with exit code 1 instead of 0, why? | | openssl crl -noout

RE: problem with self-signed crt in Apache

2013-01-01 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz Sent: Monday, 31 December, 2012 17:02 I am running on Centos 6.3 where it looks like Openssl is 1.0.0-25 I am creating my cert with: openssl req -new -outform PEM -out certs/test.htt-consult.com.crt -newkey rsa:2048

Re: cannot password protect key file in FIPS mode

2013-01-01 Thread Jakob Bohm
On 1/1/2013 1:26 AM, Sial Nije wrote: Greetings, I need help to generate an ECDSA key file that is passphrase protected and the key file is used in FIPS mode. My application is StrongSwan linked with FIPS enabled libcrypto.so, version 1.0.1c. Seems FIPS capable openssl executable uses hard