[openssl-users] Dynamic link openssl with Visual Studio

2015-03-11 Thread Ken Goldman
I would like to use the Shining Light precompiled openssl binaries within Visual Studio. I can dynamic link with gcc and the libraries in OpenSSL/lib/MinGW I can static link with VS and the libraries in OpenSSL/lib/VC/static When I dynamic link with VS and the libraries in OpenSSL/lib/VC, it

[openssl-users] FIPS mode uses /dev/urandom ?

2015-03-11 Thread Alberto Roman Linacero
Dear all, I'm doing an strace to the FIPS validated version of openssl, and I'm seeing that is uses /dev/urandom. I thought that the FIPS validated module always use /dev/random, isn't this the case, or am I doing something wrong?. If it uses /dev/urandom, is it possible/advisable to change it to

Re: [openssl-users] How to make a rehandshake(renegotiation)?

2015-03-11 Thread Serj Rakitov
11.03.2015, 20:38, Salz, Rich rs...@akamai.com: Many servers have disabled client-initiated renegotation. I thought you were testing your client/server. Yes I want to test my own client and server. I don't disable renegotation manually. I don't know how to do this. Maybe it disabled by

Re: [openssl-users] FIPS mode uses /dev/urandom ?

2015-03-11 Thread Tom Francis
On Mar 11, 2015, at 11:40 AM, Alberto Roman Linacero aro...@alienvault.com wrote: Dear all, I'm doing an strace to the FIPS validated version of openssl, and I'm seeing that is uses /dev/urandom. I thought that the FIPS validated module always use /dev/random, isn't this the case, or am

Re: [openssl-users] Dynamic link openssl with Visual Studio

2015-03-11 Thread Serj Rakitov
11.03.2015, 20:22, Ken Goldman kgold...@us.ibm.com: I would like to use the Shining Light precompiled openssl binaries within Visual Studio. I can dynamic link with gcc and the libraries in OpenSSL/lib/MinGW I can static link with VS and the libraries in OpenSSL/lib/VC/static When I

Re: [openssl-users] Dynamic link openssl with Visual Studio

2015-03-11 Thread Serj Rakitov
11.03.2015, 20:22, Ken Goldman kgold...@us.ibm.com: I would like to use the Shining Light precompiled openssl binaries within Visual Studio. I can dynamic link with gcc and the libraries in OpenSSL/lib/MinGW I can static link with VS and the libraries in OpenSSL/lib/VC/static When I

Re: [openssl-users] How to make a rehandshake(renegotiation)?

2015-03-11 Thread Serj Rakitov
10.03.2015, 21:40, Salz, Rich rs...@akamai.com: Yes. You probably need more than that. :) Take a look at the apps/s_client and look for the 'R' constant to see how to do client-initiated reneg. I have took a look at the apps/s_client. I see only several lines of code about renegotiation:

Re: [openssl-users] Delay of email delivery for the list

2015-03-11 Thread Serj Rakitov
11.03.2015, 08:20, Kurt Roeckx k...@roeckx.be: The mta.opensslfoundation.net was only very temporary and should not be used.  openssl-users@openssl.org works just fine and doesn't have any delay for me. Ok.  You can always check the headers why or where it has any delay. It's not so

Re: [openssl-users] SSL_ERROR_WANT_READ, SSL_ERROR_WANT_WRITE

2015-03-11 Thread Jakob Bohm
On 10/03/2015 20:10, Serj Rakitov wrote: Hi, Jakob. Thanks for reply. Now I have seen OpenSSL code and something clear for me. WANT_READ/WANT_WRITE it's just an implementation for WOULDBLOCK: not fatal error for non-blocking IO. So, for example for socket and Windows it's just WSAEWOULDBLOCK

Re: [openssl-users] How to make a rehandshake(renegotiation)?

2015-03-11 Thread Salz, Rich
Many servers have disabled client-initiated renegotation. I thought you were testing your client/server. ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Delay of email delivery for the list

2015-03-11 Thread Billy Brumley
The mta.opensslfoundation.net was only very temporary and should not be used. openssl-users@openssl.org works just fine and doesn't have any delay for me. You can always check the headers why or where it has any delay. Guess I'll mention this here. After the mailing list changes, MARC

[openssl-users] Handling “OpenSSL internal error, assertion failed”

2015-03-11 Thread Tejaswini
When MD5 (or any non FIPS compliant) algorithm is used in FIPS mode, OpenSSL gives following error and application aborts. fips_md.c(146): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored Aborted (core dumped) In our application we want to

Re: [openssl-users] Handling ???OpenSSL internal error, assertion failed???

2015-03-11 Thread Dr. Stephen Henson
On Wed, Mar 11, 2015, Tejaswini wrote: When MD5 (or any non FIPS compliant) algorithm is used in FIPS mode, OpenSSL gives following error and application aborts. fips_md.c(146): OpenSSL internal error, assertion failed: Digest update previous FIPS forbidden algorithm error ignored Aborted

Re: [openssl-users] Delay of email delivery for the list

2015-03-11 Thread Salz, Rich
Guess I'll mention this here. After the mailing list changes, MARC stopped archiving the OpenSSL lists, e.g. Thanks, I'll get in touch with them. -- Senior Architect, Akamai Technologies IM: rs...@jabber.me Twitter: RichSalz ___ openssl-users

Re: [openssl-users] Handling ???OpenSSL internal error, assertion failed???

2015-03-11 Thread Tejaswini
Thanks Steve, for the input. It helps me in handling the error. -- View this message in context: http://openssl.6102.n7.nabble.com/Handling-OpenSSL-internal-error-assertion-failed-tp56907p56930.html Sent from the OpenSSL - User mailing list archive at Nabble.com.