Re: Building OpenSSL with Emscripten

2019-05-09 Thread Sunghyun Park
I realized I made a mistake when I tried that option before. Now it works great. Thank you! :) On Thu, May 9, 2019 at 10:43 PM Dr Paul Dale wrote: > Configure with the _no-asm_ option. > > It will be a **lot** slower. > > > Pauli > -- > Dr Paul Dale | Cryptographer | Network Security & Encryptio

Re: Building OpenSSL with Emscripten

2019-05-09 Thread Jakob Bohm via openssl-users
By the way, has anyone worked on a feature or patch to use browser provided crypto functions (WebCrypto etc.) when compiled to pseudo-javascript via EmScripten or WebAssembly? On 10/05/2019 07:43, Dr Paul Dale wrote: Configure with the _no-asm_ option. It will be a **lot** slower. On 10 May 2

Re: Building OpenSSL with Emscripten

2019-05-09 Thread Dr Paul Dale
Configure with the _no-asm_ option. It will be a **lot** slower. Pauli -- Dr Paul Dale | Cryptographer | Network Security & Encryption Phone +61 7 3031 7217 Oracle Australia > On 10 May 2019, at 3:33 pm, Sunghyun Park wrote: > > Nice to meet you all :) > > I faced a problem while buildin

Building OpenSSL with Emscripten

2019-05-09 Thread Sunghyun Park
Nice to meet you all :) I faced a problem while building assembly code in OpenSSL (e.g., crypto/x86_64cpuid.s) with Emscripten. Since Emscripten does not support compilation for assembly code (As far as I know), I'm wondering if there is any version of OpenSSL that does not require compiling assem

Re: Openssl1.1.1 fips certification

2019-05-09 Thread Dr Paul Dale
There is no confirmed timeline for FIPS availability for OpenSSL 3.0. There will never be a FIPS 1.1.1 version. It is almost certain that there will be a gap between the end of support of 1.0.2 (end of this year) and a FIPS validated 3.0 release. If FIPS is vital for you then there is an exte

Openssl1.1.1 fips certification

2019-05-09 Thread Manish Patidar
Hi Can you please tell me what is the plan for fips certification for openssl1.1.1, when the fips version will be available ? Regards Manish

Re: Issue in linking Openssl1.1.1b to application

2019-05-09 Thread vin
Hi Ken I am almost struck in registering the built dll to windows 7 32 bit machine. Can you provide me the details on which all openssl1.1.1b output lib files and output dll files that needs to be linked to any application while building in visual studio?? Or any steps needs to be added while b

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread ramakrushna mishra
Hi , The results on a AIX machine looks more bad If I am interpreting them correctly. openssl 1.1.0e : The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes 16384 bytes sha1 65019.16k 151552.49k 266

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread ramakrushna mishra
Hi, Could anyone please help me wth it. Following are sslc speed results for SHA1. sslc speed sha1 Doing sha1 for 3s on 16 size blocks: 16858430 sha1's in 2.98s Doing sha1 for 3s on 64 size blocks: 14147528 sha1's in 3.00s Doing sha1 for 3s on 256 size blocks: 6436755 sha1's in 2.99s Doing sha1

Re: Issue in linking Openssl1.1.1b to application

2019-05-09 Thread Kenneth Goldman
> From: vin > To: openssl-users@openssl.org > Date: 05/09/2019 01:24 PM > Subject: Re: Issue in linking Openssl1.1.1b to application > Sent by: "openssl-users" > > Hi Ken > > Thanks for the reply.If I am not wrong ,You are asking me to set the path of > the dll in set path environment variable in

Re: OpenSSL 1.1.1b tests fail on Solaris

2019-05-09 Thread Dennis Clarke
On 5/9/19 4:56 PM, John Unsworth wrote: ... John. What are you doing that is so weird? jupiter # jupiter # uname -a SunOS jupiter 5.10 Generic_150400-65 sun4u sparc SUNW,SPARC-Enterprise jupiter # psrinfo -pv The physical processor has 8 virtual processors (0-7) SPARC64-VII+ (portid 1024

RE: OpenSSL 1.1.1b tests fail on Solaris

2019-05-09 Thread John Unsworth
Resend without cryptolist.txt and openssl_nm.txt attachments because they made the email too big. Attached is ar -t libcrypto.a. sol-mds-build-01 $ ar -t libcrypto.a > cryptolist.txt It contains stack.o which I see has the code for OPENSSL_sk_new_null. Attached is sol-mds-build-01 $ nm openssl

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread Salz, Rich via openssl-users
> Could you please look into the program and let me know if anything I am > doing wrong ? > Or else What could be the issue ? Sorry, no not me. Maybe someone else on the list has ideas.

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread ramakrushna mishra
Hi , I can observe slowness with standalone c programs. Attached are the sample c programs. If I run them with openssl 1.1.1 and 1.1.0e version on Linux system (Linux 2.6.32-504.el6.x86_64 x86_64 ). then I can see the difference. If I increase the number of loop in the program, then the slowness

Re: Issue in linking Openssl1.1.1b to application

2019-05-09 Thread vin
Hi Ken Thanks for the reply.If I am not wrong ,You are asking me to set the path of the dll in set path environment variable in testing machine (windows 7 32 bit) right?? But the issue is if same dll built with openssl0.9.8k is registering properly in same test machine. After replacing openssl l

Re: Issue in linking Openssl1.1.1b to application

2019-05-09 Thread Ken Goldman
On 5/9/2019 10:03 AM, vin wrote: Hi I was using an application with openssl0.9.8k .The procedure i used to link openssl to my application using visual studio -2008 was after building openssl i was linking libeay32.lib and ssleay32.lib to my application and including header files from include fol

Re: X509v3 SAN names length question

2019-05-09 Thread Viktor Dukhovni
On Thu, May 09, 2019 at 02:43:36PM +0300, Andrei Susnea wrote: > Using openssl 1.0.2h I'm getting SSL_ERROR_SYSCALL while trying to > authenticate a certificate with the following SAN names configuration: The details of the certificate content are irrelevant. Something else changed. You should

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread Salz, Rich via openssl-users
So now you know where to start looking, I guess. You might also change your test program so that it calls the functions multiple times, to “smooth out” the overhead.

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread ramakrushna mishra
Hi, Thank you for the response. If we compare in quantify attached is the results. Thanks and Regards, Ram Krushna On Thu, May 9, 2019 at 8:28 PM Salz, Rich wrote: > I would start with doing profiling on old and new versions to see where > the slowdown is. > Differences between: program rx (pi

Re: Reg slowness seen in openssl 1.1.1

2019-05-09 Thread Salz, Rich via openssl-users
I would start with doing profiling on old and new versions to see where the slowdown is.

Reg slowness seen in openssl 1.1.1

2019-05-09 Thread ramakrushna mishra
Hi, When we use following set of SSL methods ( openssl 1.1.1) for SHA1-digest, we are witnessing slowness compared to openssl 1.1.0e. EVP_get_digestbyname EVP_MD_CTX_new EVP_DigestInit_ex EVP_DigestUpdate EVP_DigestFinal_ex Could anyone please guide me about how to debug this issue. Thanks an

Issue in linking Openssl1.1.1b to application

2019-05-09 Thread vin
Hi I was using an application with openssl0.9.8k .The procedure i used to link openssl to my application using visual studio -2008 was after building openssl i was linking libeay32.lib and ssleay32.lib to my application and including header files from include folder. Now with openssl1.1.1b ,after

Re: X509v3 SAN names length question

2019-05-09 Thread Hubert Kario
On Thursday, 9 May 2019 13:43:36 CEST Andrei Susnea wrote: > Hi, > > Using openssl 1.0.2h I'm getting SSL_ERROR_SYSCALL while trying to > authenticate a certificate with the following SAN names configuration: > > X509v3 Subject Alternative Name: > > DNS:.xx.xxx.xxx.xx

X509v3 SAN names length question

2019-05-09 Thread Andrei Susnea
Hi, Using openssl 1.0.2h I'm getting SSL_ERROR_SYSCALL while trying to authenticate a certificate with the following SAN names configuration: X509v3 Subject Alternative Name: DNS:.xx.xxx.xxx.xxx.com, DNS:.xx..xxx.xxx.com, DNS:xxx-x.

RE: OpenSSL 1.1.1b tests fail on Solaris

2019-05-09 Thread John Unsworth
This is the build line for sanity test: rm -f test/sanitytest ${LDCMD:-cc} -xarch=v9 -xstrconst -Xa -xO5 -xdepend -m64 -xcode=pic32 -xldscope=hidden -L. -mt \ -o test/sanitytest test/sanitytest.o \ test/libtestutil.a -lcrypto -lsocket -lnsl -ldl -lpthread -lrt cc: Warning: -xarc

RE: OpenSSL 1.1.1b tests fail on Solaris

2019-05-09 Thread John Unsworth
This looks like the problem: ld.so.1: sanitytest: fatal: relocation error: file ../../test/sanitytest: symbol OPENSSL_sk_new_null: referenced symbol not found ../../util/shlib_wrap.sh ../../test/sanitytest => 137 not ok 1 - running sanitytest # Failed test 'running sanitytest' # at /home/me

Re: OpenSSL 1.1.1b tests fail on Solaris

2019-05-09 Thread Matt Caswell
What is the output from: $ make V=1 TESTS=test_sanity test Matt On 08/05/2019 19:22, John Unsworth wrote: > I have build OpenSSL 1.1.1b 64 bit on Solaris SunOS 5.10 Generic_Virtual sun4v > sparc SUNW,T5140. > >   > > ./Configure -lrt solaris64-sparcv9-cc no-shared -m64 -xcode=pic32 > -xldscop