RE: Adding new cipher to openssl.

2014-11-25 Thread Salz, Rich
> I was trying to add a new cipher to  openssl so as to  use it  with  the > digital certificate, is it possible ?  You asked this a week ago. You also asked this three weeks ago. The answer is yes it is possible but there is NO TOOL OR DOCUMENTATION. Stephen Henson suggested looking at the g

Re: Adding new cipher to openssl.

2014-11-25 Thread Viktor Dukhovni
On Wed, Nov 26, 2014 at 10:44:34AM +0530, Niraj Sorathiya wrote: > I was trying to add a new cipher to openssl so as to use it with the > digital certificate, is it possible ? Is this a homework assignment? A class project? This question does not belong on the openssl-dev list, moved to Bcc

Adding new cipher to openssl.

2014-11-25 Thread Niraj Sorathiya
Hello everyone, Greetings for the day.. ! I was trying to add a new cipher to openssl so as to use it with the digital certificate, is it possible ? Thankyou. Regards, Niraj.

RE: undefined reference errors, e.g. to `ERR_load_crypto_strings'

2014-11-25 Thread Scott Neugroschl
Reverse the order of the libraries. Use -lssl -lcrypto. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Alexander Raiola Sent: Tuesday, November 25, 2014 8:34 AM To: openssl-users@openssl.org Subject: undefined reference err

undefined reference errors, e.g. to `ERR_load_crypto_strings'

2014-11-25 Thread Alexander Raiola
Dear Sirs or Madams, I have the problem that I keep getting undefined reference errors whenever I try to access pretty much any OpenSSL-related command. I elaborated on my problem in the following thread: http://stackoverflow.com/questions/27106580/undefined-reference-to-err-load-crypto-strings C

FIPS mode with SP800-56b statements?

2014-11-25 Thread Alberto Roman Linacero
Dear all, I'm trying to map the SP800-56b NIST document to the OpenSSL capabilities running in FIPS mode. There is a table full of "should not", "should", "shall" and so on, needed to be filled by any NIST approved product, but there are certain issues, that seems that OpenSSL doesn't pass, and t

Freeze to mailing list memberships

2014-11-25 Thread Salz, Rich
We will soon be freezing the mailing list memberships for a couple of days. We are moving to a new server and upgrading the mail infrastructure. (For mail wonks who might care: replacing the aging majordomo setup with a more-current mailman setup, among other things.) -- Principal Security Engi

Query regarding openssl initialisation of aes-ni.

2014-11-25 Thread bhargav p
Hi All, I am using the below openssl version: # openssl version OpenSSL 1.0.0 29 Mar 2010 I am facing one problem with IPSec Strongswan daemon with openssl. Strongswan uses openssl APIs for packet encryption. In my hardwas aes-ni is enabled, this I have confirmed through /proc/cpuinfo. IPSec da

Re: CVE-0224-2014 CCS byte

2014-11-25 Thread Deepak
On Nov 22, 2014 2:35 AM, "Dr. Stephen Henson" wrote: > > On Sat, Nov 22, 2014, Deepak wrote: > > > Hi, > > > > Can a SSL client upgraded with patch for CVE-0224-2014 (say OpenSSL > > 0.9.8zb) talk to SSL server which does not have this patch (say OpenSSL > > 0.9.8u) ? > > > > Problem I have - > >