Anybody successful enabling FIPS mode in wince kernel mode DLL ?

2013-05-28 Thread Abhijit Ray Chaudhury
HI , Anybody successfully enabled FIPS mode in wince as kernel mode dll ? I Have faced following problem when giving baseaddress > 0xC000 to link.exe : = link.exe won't accept baseaddr > 2GB, even with /LARGEADDRESSAWARE flag. link.exe accepts baseaddr >

Re: Pipe command not working: windows

2013-05-28 Thread Ed Gonzales
I was running the command while i was in OpenSSL. once i just ran the command from the bin directory it all worked fine. non interactively.. lol. On Tue, May 28, 2013 at 3:50 PM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org On Behalf Of Ed Gonzales > >Sent: Tuesday, 28 May, 2013

Re: Get signature from a CMS_SignerInfo

2013-05-28 Thread Phillip Hellewell
On Tue, May 28, 2013 at 4:38 PM, Phillip Hellewell wrote: > Before I switched from PKCS7 to CMS, I had the ability to get the > actual signature (encrypted digest) by looking at > signer_info->enc_digest->data. > > Now that is encapsulated with no way to get at it, Same problem goes for the encry

RE: Pipe command not working: windows

2013-05-28 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Ed Gonzales >Sent: Tuesday, 28 May, 2013 17:35 >So how would i compare modulus in OpenSSL windows and use the >pipe option? Run OpenSSL in non interactive mode? I just tried >to use the "-batch" option and it don't recognize that either.. >is

Get signature from a CMS_SignerInfo

2013-05-28 Thread Phillip Hellewell
Before I switched from PKCS7 to CMS, I had the ability to get the actual signature (encrypted digest) by looking at signer_info->enc_digest->data. Now that is encapsulated with no way to get at it, even though I can get the rest of the signer info using these two functions: CMS_SignerInfo_get0

Re: Pipe command not working

2013-05-28 Thread Ed Gonzales
nevermind.. i got it.. thanks all for your help. On Tue, May 28, 2013 at 2:35 PM, Ed Gonzales wrote: > So how would i compare modulus in OpenSSL windows and use the pipe option? > Run OpenSSL in non interactive mode? I just tried to use the "-batch" > option and it don't recognize that either..

Re: Pipe command not working

2013-05-28 Thread Ed Gonzales
So how would i compare modulus in OpenSSL windows and use the pipe option? Run OpenSSL in non interactive mode? I just tried to use the "-batch" option and it don't recognize that either.. is there a file to edit? On Mon, May 27, 2013 at 7:46 AM, Jakob Bohm wrote: > On 5/24/2013 8:58 PM, Dave T

RE: SSL_VERIFY_PEER and self-signed certificates

2013-05-28 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Brice André > Sent: Monday, 27 May, 2013 23:45 > You are right, I am using a self-signed certificate for use by my > server. In fact, I do not perform client authentication in my > application : only the server shall be authentified by ssl. The

Re: Question about FIPS Enabled OPENSSL in WINCE platform

2013-05-28 Thread Steve Marquess
On 05/28/2013 09:28 AM, Abhijit Ray Chaudhury wrote: > Hi, > > We have an application running in WINCE Kernel address space as a DLL. > We require to have it compiled against FIPS enabled openSSL. > > ... > > To get around the problem we have added following line in msincore > script, all the b

Question about FIPS Enabled OPENSSL in WINCE platform

2013-05-28 Thread Abhijit Ray Chaudhury
Hi, We have an application running in WINCE Kernel address space as a DLL. We require to have it compiled against FIPS enabled openSSL. For that we followed following steps: = 1. compiled openssl-fips2.0.3 and built fipscanister.lib. 2. took openssl-1.0.1c and link

RE: server certificate verification fails

2013-05-28 Thread Hazrat Shah
Is there a particular library version I should be using? What is the recommended site to load the binary files from? From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of Hazrat Shah Sent: Tuesday, May 28, 2013 8:39 AM To: op

RE: server certificate verification fails

2013-05-28 Thread Hazrat Shah
The certificate is for a client and is self signed. From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of Dave Thompson [dthomp...@prinpay.com] Sent: Monday, May 27, 2013 10:51 PM To: openssl-users@openssl.org Subject: RE: ser