Re: [openssl-users] Non-self-signed SSL certificates for private hosted DNS zones

2017-03-07 Thread Traiano Welcome
Hi Viktor Thanks for this confirmation. I think the correct approach would be to use our internal CA. On Tue, Mar 7, 2017 at 7:16 PM, Viktor Dukhovni wrote: > > > On Mar 7, 2017, at 2:21 AM, Traiano Welcome wrote: > > > > I have a private DNS zone hosted on AWS route 53, only resolvable from

Re: [openssl-users] error making Private RSA

2017-03-07 Thread Salz, Rich via openssl-users
> > My source can be viewed at: mt-umunhum-wireless.net/Sources/rsa/rsa.c Gives a 403. > > My main guess is that your allocation for the PEM buffer is too small > > -- is key/key_len pointing to a static buffer? > > It points to a char string Not sure what that means. Please post your code he

Re: [openssl-users] error making Private RSA

2017-03-07 Thread william estrada
> Not sure this is the proper way to use this mailing system? > > My source can be viewed at: mt-umunhum-wireless.net/Sources/rsa/rsa.c > What version of openssl? I'm guessing 1.0.2. > > Put this line inyour code > ERR_load_ERR_strings(); > And youll get a more informative message. Did t

Re: [openssl-users] undefined symbol fabs in file test/ct_test.o in openssl 1.1.0e on solaris

2017-03-07 Thread Michael Wojcik
> From: markus.sondereg...@juliusbaer.com > [mailto:markus.sondereg...@juliusbaer.com] > Sent: Tuesday, March 07, 2017 10:49 > To: Michael Wojcik > Subject: Re: undefined symbol fabs in file test/ct_test.o in openssl 1.1.0e on > solaris For threads that originated on openssl-users, please send mes

Re: [openssl-users] Non-self-signed SSL certificates for private hosted DNS zones

2017-03-07 Thread Viktor Dukhovni
> On Mar 7, 2017, at 2:21 AM, Traiano Welcome wrote: > > I have a private DNS zone hosted on AWS route 53, only resolvable from > within some specific VPCs. > It appears some applications require an SSL certificate associated with > the private DNS zone, and this SSL certificate should come from

Re: [openssl-users] How to compile the static binary version of openssl

2017-03-07 Thread Viktor Dukhovni
> On Mar 7, 2017, at 5:28 AM, Yu Chen wrote: > > Currently I'm trying to get a static binary of openssl command via > compilng the openssl-1.1.0e. What do you mean by "static binary"? Is it enough for the "ssl" and "crypto" libraries to be statically linked into the "openssl" executable? Or d

[openssl-users] How to compile the static binary version of openssl

2017-03-07 Thread Yu Chen
Hi, Currently I'm trying to get a static binary of openssl command via compilng the openssl-1.1.0e. I've tried to configure with no-shared, but the bin/openssl is still dynamic linked. Thus I added -static to the end of CFLAG, it just can not get compiled. Anyone know how to get a static openssl co