Re: Reg compilation problem with openssl.fips.1.1.1

2007-12-02 Thread Brendan Simon
You can not use the "shared" option for the fips module (1.1.1) You are only supposed to use the "fips" option, which will build a single fips canister object file. This object file can then be used to link into your openssl build (eg. 0.9.7m). For openssl itself, you _should_ be able to use

Re: OpenSSL FIPS Object Module v1.2

2007-11-29 Thread Brendan Simon
he API against, even if everything's stubbed out. :P) I do have to ask, though: is this one going to compile properly on Intel-based Macs? 1.1 and 1.1.1 didn't. -Kyle H On Nov 29, 2007 5:22 PM, Brendan Simon < [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: Where

OpenSSL FIPS Object Module v1.2

2007-11-29 Thread Brendan Simon
Where can I find information about OpenSSL FIPS Object Module v1.2 ??? Where can this be downloaded from? CVS only? Or are there tarballs somewhere? Where does FIPS related development/discussion take place? Just the users mailing list? Is there a spot on the website dedicated to FIPS relate

Re: FIPS request for future OpenSSL releases

2007-11-29 Thread Brendan Simon
rary trivially behaves as the traditional openssl (with all functionalities). The former is called FIPS-validated App and latter is FIPS-capable App. On Nov 29, 2007 4:22 PM, Brendan Simon <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote: Hi, I require FIPS functional

FIPS request for future OpenSSL releases

2007-11-29 Thread Brendan Simon
Hi, I require FIPS functionality in OpenSSL but I do NOT have a requirement to run in FIPS mode. What I would like is to build OpenSSL and have ALL functions available to me so I can choose which ones I want to use. At the moment there are some functions that are only available if the -fips

RSA_X931_generate_key

2007-11-13 Thread Brendan Simon
I want to use the RSA_X931_generate_key() function as part of a dynamic library, but it seems to only be available when using fips mode and presumably the fipscanister. The codes is surrounded by "#ifdef OPENSSL_FIPS". I'm happy to use the fipscansister, but it seems that both openssl-fips-1

Re: fips build with shared libraries

2007-11-12 Thread Brendan Simon
David Schwartz wrote: I'm happy to use the fipscansister, but it seems that both openssl-fips-1.1.1 and openssl-0.9.7m both fail building if configured using "./config fips shared". Why are you trying to build the FIPS canister with anything other than "./config fips"? Without the "sh

RSA_X931_generate_key with shared libraries

2007-11-11 Thread Brendan Simon
I want to use the RSA_X931_generate_key() function as part of a dynamic library, but it seems to only be available when using fips mode and presumably the fipscanister. The codes is surrounded by "#ifdef OPENSSL_FIPS". I'm happy to use the fipscansister, but it seems that both openssl-fips-1.1.1

Re: Can't build FIPS capable OpenSSL

2007-11-07 Thread Brendan Simon
I can't even build openssl-fips.1.1.1 if the "shared" option is specified. I had to remove it as you (Bill) did for the openssl-0.9.7m. My build host is an oldish Debian (Woody) PowerPC box. $ uname -a Linux larabee 2.4.25-powerpc #1 mer avr 14 15:38:38 CEST 2004 ppc unknown Why does "shared

Mailing list daily digest

2006-02-20 Thread Brendan Simon
Does anyone know how to get a daily digest version of this mailing list. Mailman supports digests but I am not familiar with Majordomo. I tried the support page of the website but could not find any relevant info. Thanks, Brendan. _

FIPS140-2: ANSI X9.31 in openssl ???

2005-08-15 Thread Brendan Simon
that will intereoperate with other openssl crypto functionality. Hopefully someone can answer my questions or point me in the right direction. Cheers, Brendan Simon. __ OpenSSL Project http

openssl in kernel modules

2005-07-25 Thread Brendan Simon
that a correct interpretation? 3) If I am wrong and it is allowed to use openssl in kernel modules, then how does one stop system header files interfering with kernel/linux header files ??? eg. files, etc. Cheers, Brendan Simon. (Please CC me as well as the