Test script is missing from openssl-1.0.2e.tar.gz onward.

2022-03-28 Thread rahul chauhan
Hi team, I using the openssl-1.0.2u.tar.gz and downloading from below link https://www.openssl.org/source/old/1.0.2/openssl-1.0.2u.tar.gz And I am observing that the *test script* is missing in* "openssl-1.0.2u/crypto/des/t/" *location from openssl-1.0.2e.tar.gz onward. Is there any specific rea

Re: Openssl v1.1.1d: pubkey_cb() returning SUCCESS for x509_pubkey_decode() Failure

2022-03-28 Thread Brahmaji K
Got it, thank you Matt. On Mon, Mar 28, 2022 at 6:29 PM Matt Caswell wrote: > > > On 28/03/2022 13:11, Brahmaji K wrote: > > Hi Team, > > > > I'm trying to store the invalid EC certificate as a negative test for my > > application. My application calls the X509_STORE_load_locations() to > > load

Re: Openssl v1.1.1d: pubkey_cb() returning SUCCESS for x509_pubkey_decode() Failure

2022-03-28 Thread Matt Caswell
On 28/03/2022 13:11, Brahmaji K wrote: Hi Team, I'm trying to store the invalid EC certificate as a negative test for my application. My application calls the X509_STORE_load_locations() to load the certificate from a specific path. For invalid EC certificate it is expected to FAIL but it

Openssl v1.1.1d: pubkey_cb() returning SUCCESS for x509_pubkey_decode() Failure

2022-03-28 Thread Brahmaji K
Hi Team, I'm trying to store the invalid EC certificate as a negative test for my application. My application calls the X509_STORE_load_locations() to load the certificate from a specific path. For invalid EC certificate it is expected to FAIL but it is returning the SUCCESS. I have done some deb

Re: Certificate, "ecdsa_with_SHA3-512" signature algorithm

2022-03-28 Thread Mib
Thank you for the clarification. On Mon, Mar 28, 2022 at 12:41 PM Tomas Mraz wrote: > On Mon, 2022-03-28 at 09:24 +0300, Mib wrote: > > Hi, I am trying to create a ECC certificate with ecdsa_with_SHA3-512 > > signature algorithm. > > > > But I am having the below issue When I try to verify it wi

Re: Autoconf and detecting if bio_st is defined or not

2022-03-28 Thread Tomas Mraz
The bio_st structure is private since 1.1.0 release. So one option is to check if the OPENSSL_VERSION >= 0x1010 Tomas On Fri, 2022-03-25 at 18:33 -0600, Philip Prindeville wrote: > Hi, > > I was wondering if there was some sort of sentinel variable that > tells us if is exporting access to

RE: Openssl 0.9.8 to 1.0.2u - HP-UX- After installation and softlink created -console does not connect

2022-03-28 Thread Gaurav Mittal11
This will be very interesting and risky for server, will try it. Thank you for information. Regards, Gaurav Mittal -Original Message- From: Tomas Mraz Sent: 25 March 2022 03:30 PM To: Gaurav Mittal11 ; openssl-users@openssl.org Subject: [EXTERNAL] Re: Openssl 0.9.8 to 1.0.2u - HP-UX- A

Re: Certificate, "ecdsa_with_SHA3-512" signature algorithm

2022-03-28 Thread Tomas Mraz
On Mon, 2022-03-28 at 09:24 +0300, Mib wrote: > Hi, I am trying to create a ECC certificate with ecdsa_with_SHA3-512 > signature algorithm.  > > But I am having the below issue When I try to verify it with the > X509_Verify api. > "error:068000C7:asn1 encoding routines::unknown signature algorithm

Re: Static OpenSSL 3 library with FIPS

2022-03-28 Thread Matt Caswell
On 25/03/2022 20:59, Paul Spencer wrote: Thanks for the info. You mean both libssl.a and libcrypto.a static, and then dynamically loaded fips.so, correct? Yes. Unfortunately that gets away from the single-binary-executable model and so is a somewhat major change. Yes. As noted this wa