[openssl-users] FIPS Performance Question

2016-03-07 Thread James M Takahashi
https://www.openssl.org/docs/fipsnotes.html mentions the following: As a result of the POST performance issue we revisited the KAT (Known Answer Test) requirements in the POST process that were burning up most of those cycle. In consultation with a CMVP test lab we determined that it

[openssl-users] SSL_accept error code

2016-03-07 Thread Yan, Bob
Hi All, I have a SSL server application which use SSL_accept to accept the connections from client, see the code below: int retcode = SSL_accept(mSsl); unsigned long error = SSL_get_error(mSsl, retcode); ERR_error_string_n(error, errmsg, sizeof(errmsg)); When something

[openssl-users] Extracting certificate from RFC3161 time stamp response

2016-03-07 Thread Anton Wuerfel
Hello, for an university project I am implementing RFC3161 time stamps into git. when creating a TSQ it is possible to force the TSA server to include its signing certificate in the TSR. However, I was wondering how to extract this certificate at the client side, as neither 'openssl ts