RE: [EXTERNAL] howto get a .so.X.Y.Z file rather than indivdual .o files in a libSOMETHING.a

2014-08-04 Thread Jeremy Farrell
I don't understand what you mean by "but not, by default, that the .so files expect dependancies in another archive(member) search request". It sounds like the core of your issue is that you're trying to build AIX shared libraries, so you need to configure "shared". If that's producing .so files

Re: [EXTERNAL] howto get a .so.X.Y.Z file rather than indivdual .o files in a libSOMETHING.a

2014-08-04 Thread Sands, Daniel
On 8/4/2014 7:06 PM, Sands, Daniel wrote: > To generate a .a of shared objects instead of static objects, really all you > do is build the shared object(s) and create an archive out of them. There is > no special magic about it beyond creating the shared object in the first > place. When lin

Re: [EXTERNAL] howto get a .so.X.Y.Z file rather than indivdual .o files in a libSOMETHING.a

2014-08-04 Thread Michael
I was - perhaps - not clear enough. Want I want is all the .o files together in a single file that can be a single member of an archive. Using the ./config shared got it to make .so files with everything combined - but not, by default, that the .so files expect dependancies in another archive(me

Re: [EXTERNAL] howto get a .so.X.Y.Z file rather than indivdual .o files in a libSOMETHING.a

2014-08-04 Thread Sands, Daniel
To generate a .a of shared objects instead of static objects, really all you do is build the shared object(s) and create an archive out of them. There is no special magic about it beyond creating the shared object in the first place. When linking a new program to an archive of shared objects,

Re: Query on X509 certificate validation- EVP_VerifyUpdate & EVP_VerifyFinal

2014-08-04 Thread Viktor Dukhovni
On Mon, Aug 04, 2014 at 03:21:23PM +, Viktor Dukhovni wrote: > On Mon, Aug 04, 2014 at 05:43:47AM +, Mitra, Rituparna (STSD) wrote: > > > 1. app1: sends a CGI POST request to app2 ? the POST request has the > > UN (username). > > > > 2. app2: does a CGI GET to receive the UN

Re: Query on X509 certificate validation- EVP_VerifyUpdate & EVP_VerifyFinal

2014-08-04 Thread Viktor Dukhovni
On Mon, Aug 04, 2014 at 05:43:47AM +, Mitra, Rituparna (STSD) wrote: > 1. app1: sends a CGI POST request to app2 ? the POST request has the UN > (username). > > 2. app2: does a CGI GET to receive the UN within app1?s POST request. > > 3. app2: has app1?s x509 certificate a

RE: Query on X509 certificate validation- EVP_VerifyUpdate & EVP_VerifyFinal

2014-08-04 Thread Salz, Rich
Start by isolating the steps. The username is in the formdata? Can you run the openssl command-line program, for example, to encrypt the username you get? -- Principal Security Engineer Akamai Technologies, Cambridge MA IM: rs...@jabber.me Twitter: RichSalz

Re: test

2014-08-04 Thread Mauricio Tavares
On Mon, Aug 4, 2014 at 8:02 AM, Michael wrote: > Apology for the test, but not seeing my mails arrive. Think they do not like you anymore? I am replying to both the list and you directly, so you should get 2 equally useless emails. > _

test

2014-08-04 Thread Michael
Apology for the test, but not seeing my mails arrive. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Re: Question on EVP_DecryptFinal_ex

2014-08-04 Thread Thulasi Goriparthi
On Mon, Aug 4, 2014 at 4:50 AM, David Li wrote: > Hi Thulasi/Rich, > > Thanks! This prompted me to uncover another bug in the code. I did encrypt > an extra block of zeros! Now everything makes sense. > > Can't help to dig a little deeper into this: In AES-CBC mode, the > decryption can be parall

howto get a .so.X.Y.Z file rather than indivdual .o files in a libSOMETHING.a

2014-08-04 Thread Michael
Dear all, I wish I knew better - howto use ld to craft an archive member, but I do not. (Below was sent to openssl-dev, if it arrived, please ignore for now - however, once I understand this AND if I figure out a "simple" change, I shall submit a patch for future AIX builds.) === To be comp

openssl dgst and capi engine question

2014-08-04 Thread Vladimir Simonov
Hi all, I'm trying to use openssl command line utility to sign data file with key located in Windows Certificates Store. I generated 1024 bit dsa private key and certificate. Converted them to pkcs12 format and imported the certificate into WCS. openssl dsaparam -rand $ssl_sign_program -C -out $