AW: AES-GCM decrypt with OpenSSL 1.1.1 - when to set the tag?

2021-11-23 Thread Lynch, Andrew via openssl-users
> I've raised a PR to correct the docs here: > > https://github.com/openssl/openssl/pull/17111 > > Hopefully that is sufficient to convince your reviewers. Thanks, Matt. That should do the trick. Regards, Andrew.

AES-GCM decrypt with OpenSSL 1.1.1 - when to set the tag?

2021-11-23 Thread Lynch, Andrew via openssl-users
Hi, We have an application that uses OpenSSL 1.1.1k to receive AES256-GCM encrypted messages. The streamed data starts with a 12 byte IV, then the ciphertext and ends with the 16 byte tag. Our decryption code is based directly on the sample code in the Wiki and the distribution. https://wik

URI with commas in crlDistributionPoints

2021-01-04 Thread Andrew via openssl-users
I'm following a procedure for generating an offline CA for use with Microsoft Active Directory Certificate Services for my own internal use, with instructions available here: https://www.altaro.com/hyper-v/wsl-offline-root-certificate-authority-windows-pki/ I am, however, using a different compu