[openssl-users] Query on usage of openssl 1.1.0f with openssl-FIPS

2017-09-05 Thread Grace Priscilla Jero
Hi All, We would want to build our openssl 1.1.0f with FIPS but we noticed it is mentioned as “The 2.0 FIPS module is compatible with OpenSSL releases 1.0.1 and 1.0.2, and no others”. I am unable to find the openssl-fips module for 1.1.0f. Do you know when it will be available? Could you pl

[openssl-users] SSL_CTX_set_cipher_list returns failure for DHE-DSS-AES256-GCM-SHA384

2017-09-05 Thread mahesh gs
Hi All, I am using openssl version 01.01.00f for providing TLS and DTLS security for TCP and SCTP connection for our application. I have query regarding the "Ciphers" that are accepted by the SSL_CTX_set_cpiher_list API. The list of ciphers that are supported by openssl version 01.01.00f that is o

Re: [openssl-users] Problem with Last step in setup

2017-09-05 Thread Michael Richardson
Gerardi, Elio wrote: > I am getting the following error when I run the ‘make install’ command on > OPenSSL > make install > /Library/Developer/CommandLineTools/usr/bin/make depend && > /Library/Developer/CommandLineTools/usr/bin/make _all > *** Installing development fi

Re: [openssl-users] Problem with Last step in setup

2017-09-05 Thread Jakob Bohm
On 05/09/2017 17:37, Gerardi, Elio wrote: I am getting the following error when I run the ‘make install’ command on OPenSSL make install /Library/Developer/CommandLineTools/usr/bin/make depend && /Library/Developer/CommandLineTools/usr/bin/make _all *** Installing development files Canno

Re: [openssl-users] Problem with Last step in setup

2017-09-05 Thread Richard Levitte
In message on Tue, 5 Sep 2017 15:37:59 +, "Gerardi, Elio" said: Elio.Gerardi> I am getting the following error when I run the ‘make install’ command on OPenSSL Elio.Gerardi> Elio.Gerardi> make install Elio.Gerardi> Elio.Gerardi> /Library/Developer/CommandLineTools/usr/bin/make depend &&

Re: [openssl-users] Testing OCSP with openssl

2017-09-05 Thread Robert Moskowitz
On 09/05/2017 11:59 AM, Dr. Stephen Henson wrote: On Tue, Sep 05, 2017, Robert Moskowitz wrote: Jamie Nugyen's guide uses openssl to test OCSP with 'openssl ocsp': https://jamielinux.com/docs/openssl-certificate-authority/online-certificate-status-protocol.html What is unclear here is: Doe

Re: [openssl-users] Testing OCSP with openssl

2017-09-05 Thread Dr. Stephen Henson
On Tue, Sep 05, 2017, Robert Moskowitz wrote: > Jamie Nugyen's guide uses openssl to test OCSP with 'openssl ocsp': > > https://jamielinux.com/docs/openssl-certificate-authority/online-certificate-status-protocol.html > > What is unclear here is: > > Does openssl read the index.txt file once at

[openssl-users] Problem with Last step in setup

2017-09-05 Thread Gerardi, Elio
I am getting the following error when I run the ‘make install’ command on OPenSSL make install /Library/Developer/CommandLineTools/usr/bin/make depend && /Library/Developer/CommandLineTools/usr/bin/make _all *** Installing development files Cannot create directory /usr/local/include: No such fil

Re: [openssl-users] Testing OCSP with openssl

2017-09-05 Thread Robert Moskowitz
Michael, Thanks for this concise review. I look at it as the "Big Bang theory of Security". i.e. what comes first. And HOW DID we get those heavy metals beyond Iron? :) Bob On 09/05/2017 09:10 AM, Michael Wojcik wrote: From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Beh

Re: [openssl-users] Testing OCSP with openssl

2017-09-05 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Robert Moskowitz > Sent: Tuesday, September 05, 2017 08:43 > > Also he recommends password protecting the keypair. That results in > needing to provide the password at responder startup. Is this the > 'normal' approa

[openssl-users] Testing OCSP with openssl

2017-09-05 Thread Robert Moskowitz
Jamie Nugyen's guide uses openssl to test OCSP with 'openssl ocsp': https://jamielinux.com/docs/openssl-certificate-authority/online-certificate-status-protocol.html What is unclear here is: Does openssl read the index.txt file once at startup, or does it read it with each query. From the way

[openssl-users] Introduce a TLS application library - a proposal on the overall OpenSSL code structure

2017-09-05 Thread David von Oheimb
Back on 13 May 2016 I had proposed by email to a couple of people including Rich Salz a third library level (on top of crypto and ssl) with more high-level, application-oriented code. His response was: > That is a really interesting idea. Please bring this up on openssl-dev > mailing list. Then

Re: [openssl-users] [openssl-dev] How to use BIO_do_connect(), blocking and non-blocking with timeout, coping with errors

2017-09-05 Thread David von Oheimb
/[ Further below I quote my first two messages including my original questions and tentative code,// // since Cc'ing to openssl-users did not work when I tried first. In this way I hope to get further, // // more detailed responses by people with specific experience on the issues I mentioned,// //