Question regarding openssl program to compute the hashes and finger-prints.

Hello All , I have a question regarding c_rehash utility used to create symbolic links to files named by the hash values. I understand that c_rehash calls openssl to compute the hash by invoking the following command : $OPENSSL x509 -hash -fingerprint -noout -in $file What I noticed, recent

encrypting video files AES-ECB

question: trying to encrypt a uncompressed video file(nv12) with AES128-ECB using openssl utility. but once i decrypt the encrypted video file with same key, i'm not able to playback the video file. ami missing some thing or is there a known limitation? Thanks, Raghu

RE: encrypting video files AES-ECB

You would need to tell everyone your exact command line (with key obfuscated, etc), but I suspect you are not specifying an [consistent] IV to the encrypt and decrypt commands? Carl From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on

AW: encrypting video files AES-ECB

$ openssl 'aes-128-ecb' -pass 'pass:testpass' x.pl x2 $ openssl 'aes-128-ecb' -pass 'pass:testpass' -d x2 x3 $ diff x.pl x3 $ -- Deutsche Telekom AG Seamless ICT Security Infrastructure Management im Auftrag T-Systems International GmbH Dipl. Inf Alexander Elgert Langwadener Strasse 17

Re: Question regarding openssl program to compute the hashes and finger-prints.

On 5/14/2013 8:33 AM, Khadija Amin (khamin) wrote: Hello All , I have a question regarding c_rehash utility used to create symbolic links to files named by the hash values. I understand that c_rehash calls openssl to compute the hash by invoking the following command : $OPENSSL x509 -hash

RE: Similar issuer dn mod_ssl client authentication issue

From: owner-openssl-us...@openssl.org On Behalf Of Michele Mase' Sent: Monday, 13 May, 2013 05:33 I'm testing a client authentication using [Apache with 1.0.0-fips] I have 2 CA's x509 pem files, bundled. CA1 signs client1 certificate files CA2 signs client2 certificate files I should use two

Re: FIPS Capable Ciphers List

On Wed, May 15, 2013 at 12:58:37AM +, Santhosh Kokala wrote: I have a use case where an admin can configure the Ciphers from UI. I have this code in the backend that tries to set the cipher meth = TLSv1_client_method(); ctx = SSL_CTX_new(meth); sslretval =

RE: FIPS Capable Ciphers List

Viktor gave some excellent advice. I'd tweak it by removing 'export' as something to support. And perhaps use weak, good, strong -- whatever, keep the number of choices very small. I'd suggest to not use default since folks will get upset if it changes. They are more accepting if the

Re: FIPS Capable Ciphers List

On Tue, May 14, 2013 at 09:42:08PM -0500, Salz, Rich wrote: Viktor gave some excellent advice. I'd tweak it by removing 'export' as something to support. And perhaps use weak, good, strong -- whatever, keep the number of choices very small. I'd suggest to not use default since folks will

RE: FIPS Capable Ciphers List

So the Postfix team finds SMTP servers that support EXPORT and nothing stronger? Wow, I am very surprised. For those who don't know, export strength crypto was a creation of the US government in the early 1990's, and the rules were removed in 2000. It's been more than a dozen years, it's time