Need help with building fips module on 32 bit Window

2013-02-17 Thread nys2013
openssl-fips-2.0.tar.gz Perl version: 5.8.8 Windows XP 32 bit MSVS 2010 = cd C:\fips\openssl ms\do_fips no-asm ... fips_premain.c link /nologo /subsystem:console /opt:ref /debug /fixed /map /out:out32dll\fips_t est_suite.exe @C:\DOCUME~1\szou\LOCALS~1\Temp\nm7A8.tmp Creating

Re: Need help with building fips module on 32 bit Window

2013-02-17 Thread Jeffrey Walton
Hi wenxue, Get hash failure http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/1025761add9b41dc? NMAKE : fatal error U1077: 'c:\Perl\bin\perl.EXE' : return code '0x2' Stop. On Windows, ERROR_FILE_NOT_FOUND is 0x0002. Jeff On Fri, Feb 15, 2013 at 7:21 PM, nys2013

Re: OCSP stapling

2013-02-17 Thread Jeremy Harris
On 02/16/2013 10:51 PM, Dr. Stephen Henson wrote: So you could supply an application defined callback that just calls X509_verify_cert too which keeps the current behaviour. If that call is successful you can then note the chain for future use using X509_STORE_CTX_get1_chain(). That's fine

Seg fault from d2i_RSAPrivateKey_fp

2013-02-17 Thread Nick
Calling d2i_RSAPrivateKey_fp with the address of a non-NULL 2nd param yields a seg fault for me. It seems to work if I pass the address of a NULL ptr instead (commented out in the repro code below). I'm calling it in the same manner that I call d2i_X509_fp which also works. Environment:

Failed SSL/HTTP connections via Apache(2.4.3)SSL when going from 1.0.1c to 1.0.1e

2013-02-17 Thread Joel Bion
Here is the output from a machine connecting to my server, once with it running 1.0.1c and also with it running 1.0.1e. I have spent hours trying to work this issue. I have it down to this: I have a two bootable partitions on my computer. The only relevant difference between them is the first has

Re: Seg fault from d2i_RSAPrivateKey_fp

2013-02-17 Thread Dr. Stephen Henson
On Sun, Feb 17, 2013, Nick wrote: Calling d2i_RSAPrivateKey_fp with the address of a non-NULL 2nd param yields a seg fault for me. It seems to work if I pass the address of a NULL ptr instead (commented out in the repro code below). I'm calling it in the same manner that I call d2i_X509_fp

Re: Failed SSL/HTTP connections via Apache(2.4.3)SSL when going from 1.0.1c to 1.0.1e

2013-02-17 Thread Joel Bion
Here is the output from running an 'openssl s_client -debug' command (as much verbosity as I could quickly find.) The key difference between the two seems to be in the 1.0.1e case, there is this extra text at the end. 1.0.1c does not show this error. 13780:error:140790E5:SSL

DTLS connection problems

2013-02-17 Thread T J
Hi I'm have some problems getting a client to connect to a server using DTLS. My code is based on Robin Seggelmann's DTLSv1 example at fh-muenster.de. I'm implementing it on a point-point network only (data connection between 2 radios), IP4 over udp so I've stripped it down a bit. In my

Re: x509 certificate conforming to RFC 3739

2013-02-17 Thread Walter H.
On 15.02.2013 07:42, Walter H. wrote: On Fri, February 15, 2013 07:07, Matthew Hall wrote: On Fri, Feb 15, 2013 at 07:03:20AM +0100, Walter H. wrote: Hello, can someone, please tell me, how to generate a certificate that conforms to http://www.ietf.org/rfc/rfc3739.txt (RFC 3739) Thanks,