RE: How to convert from PEM to DER format?

2013-02-04 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Srivardhan Hebbar >Sent: Tuesday, 29 January, 2013 04:57 >I have a string which has the certificate in PEM(Base64) format. >I want to convert it to DER format(unsigned char). How can I do it? >I wrote the following code: >This code is fail

RE: Compiling openssl fips in Windows

2013-02-04 Thread Jon Evers
Dave, I am linking libeay32.lib. I did try the .dll and tried to make it a "reference" in a VS2008 project, but that completely failed. If I understand correctly "ssleay32" is needed to implement SSL/TLS protocols? If so, I definitely need to include it. But, currently my linking issues don't

RE: Compiling openssl fips in Windows

2013-02-04 Thread Jon Evers
LM, I was using the Jan 18, 2013 version. It looks like the current is now Jan 25, 2013. However, those sections and paragraphs I quoted are still there. Just look down a few paragraphs to find them. Section 5.3.2 seems to be the root of my problem. I don't think my project, based on ms\nt

RE: Compiling openssl fips in Windows

2013-02-04 Thread Memmott, Lester
Jon, Regarding: According to my interpretation of the documentation, it should be included in libeay32.dll: Section 2.4.2 Note that except in the most unusual circumstances the FIPS Object Module itself (fipscanister.o) is not linked directly with application code. Section 4.3.3 The resulting F

Re: PEM_read_PrivateKey using ECDSA PEMS

2013-02-04 Thread redpath
First of all let me correct this I am using ECDSA to create and verify a signature for a document. I apparently cannot use the ecdsa.PEM *directory* and so here is my question. to this I am using ECDSA to create and verify a signature for a document. I apparently cannot use the ecdsa.PEM *dire

SSL ciphersuites related

2013-02-04 Thread Ravindra Bararawa
Hi All, I need some help to resolve some issues found after implimentinf SSL using openssl client. Below are the issues: 42873 - SSL Medium Strength Cipher Suites Supported [-/+] 26928 - SSL Weak Cipher Suites Supported [-/+] 53491 - SSL / TLS Renegotiation DoS [-/+] 31705 - SSL

RE: Null (or default) certificates?

2013-02-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Nathan Smyth > Sent: Friday, 01 February, 2013 08:47 > Is it possible to have null, untrusted, or shared > certificates, to simplify deployment for apps that don't care > about SSL? > > Basically I have an infrastructure that uses OpenSSL for

RE: PEM_read_PrivateKey using ECDSA PEMS

2013-02-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of redpath > Sent: Friday, 01 February, 2013 14:55 > I am using ECDSA to create and verify a signature for a document. > I apparently cannot use the ecdsa.PEM directory and so here > is my question. > Nit: ecdsa.pem is a file, containing (parame

RE: EVP_aes_128_cbc decrypt block ordering

2013-02-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Tage Korsdal Nielsen > Sent: Friday, 01 February, 2013 03:19 > New to OpenSSL, but designing a PC application that must encrypt a > stream of 48 bytes message blocks to a USB device with aes128.The iv's > gets generated and synchronized when t

RE: Compiling openssl fips in Windows

2013-02-04 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Jon Evers >Sent: Friday, 01 February, 2013 17:45 >I'm trying to link an application that will use openssl and fips. >I'm getting linker errors [using] MS Visual Studio 2008. >I'm trying to link the DLL, lib32eay.dll. Did you put libeay32.dll in

Re: OpenSSL wikibook

2013-02-04 Thread Pierre DELAAGE
Hello Steve, Nice to hear about your proposal. Just a few comments about docs : As I said I think that the command line doc is not so bad, for example. I think that some docs will benefit from a wiki, other docs...not. For API docs I really think that it must come from the code, as in java API.

Re: OpenSSL wikibook

2013-02-04 Thread Steve Marquess
On 02/02/2013 03:46 AM, Bry8 Star wrote: > It would be great to see a wiki site of OpenSSL, like: > https://wiki.openssl.org/ > > Then helpful, experienced and knowledgeable users can contribute > and help each-others. This is a good idea that has been proposed a number of times. It hasn't been