Re: [openssl-users] Hardware client certificates moving to Centos 7

2017-09-28 Thread Robert Moskowitz
On 09/28/2017 01:25 PM, Stuart Marsden wrote: Hi thanks for all the comments and suggestions, especially the ones I could understand centos 7 yum upgrade openssl version gives: OpenSSL 1.0.2k-fips 26 Jan 2017 it looks like echo 'LegacySigningMDs md5' >> /etc/pki/tls/legacy-settings a

[openssl-users] Query regarding the SCTP events for DTLS connections

2017-09-28 Thread mahesh gs
Hi, We have an application which has SCTP connections we have secured the SCTP connections using the openssl DTLS. DTLS is working as expected other than the SCTP events. We use the API "BIO_new_dgram_sctp" to create a BIO objects and we register a callback function to openssl using API "BIO_dgra

Re: [openssl-users] Hardware client certificates moving to Centos 7

2017-09-28 Thread Stuart Marsden
Hi thanks for all the comments and suggestions, especially the ones I could understand centos 7 yum upgrade openssl version gives: OpenSSL 1.0.2k-fips 26 Jan 2017 it looks like echo 'LegacySigningMDs md5' >> /etc/pki/tls/legacy-settings allows the reading of Md5 Client certificates (whic

Re: [openssl-users] FIPS Object Module 2.0, fipsalgtest.pl fails

2017-09-28 Thread Steve Marquess
On 09/28/2017 11:07 AM, Diaz de Grenu, Jose wrote: > I am trying to validate the FIPS Object Module. > > I have built the test tools as specified in [1] Appendix B.1 and I have > downloaded and extract the test vectors from [2]. > > At that point I run the following: > > perl fipsalgtest.pl -

[openssl-users] FIPS Object Module 2.0, fipsalgtest.pl fails

2017-09-28 Thread Diaz de Grenu, Jose
I am trying to validate the FIPS Object Module. I have built the test tools as specified in [1] Appendix B.1 and I have downloaded and extract the test vectors from [2]. At that point I run the following: perl fipsalgtest.pl --dir=/run/media/sda1/fips_tv/OSF_JN2859_OE46.results (where /run/m

Re: [openssl-users] PKCS7 and RSA_verify

2017-09-28 Thread ch
Hi! I thought the difference between PEM and DER is NOT ONLY a different encoding of the string? base64 vs. binary So to understand that clear please let me ask: If I convert a PEM-signature from base64 to binary then it is DER? Thanks Chris On 2017-09-28 11:23, Wouter Verhelst wrote: On 28

Re: [openssl-users] PKCS7 and RSA_verify

2017-09-28 Thread Wouter Verhelst
On 28-09-17 01:19, ch wrote> If the pkcs-signature is binary encoded it is not working for verifiying > a SMIME-message in my experience with > smime or cms-smime on the console. I tried to convert the binary ones to > base64 but that does not everytime the trick. What you call "base64" is commonl