OpenSSL 3 support for status_request_v2

2024-06-13 Thread James
/functions I should be using? Are there hooks for being able to influence the messages between server hello and server hello done? or is there a patch... that already adds this? Many thanks James

Re: EVP_PKEY_get_raw_public_key fails with OpenSSL 3.0

2022-11-10 Thread James Muir
t sent you? Do you want just the bytes of the public EC point? -James M

webpages not available

2022-10-30 Thread James Muir
w.openssl.org, seems to work as normal. -James M

Re: Strange problem: openssl verify not working on Proxmox VM, works on a bare metal system

2022-09-04 Thread Roger James via openssl-users
As I mentioned in an earlier post you need version 1.1 or later of openssl to successfully validate post September 30, 2021 Lets Encrypt certificates. The version on your Centos system is 1.0.

Re: Strange problem: openssl verify not working on Proxmox VM, works on a bare metal system

2022-09-03 Thread Roger James
On 3 September 2022 19:26:50 Shawn Heisey via openssl-users wrote: On 9/2/22 21:42, Shawn Heisey via openssl-users wrote: Other bare metal systems and their results with the same PEM file: Verifies on Proxmox (the one running the VM) with openssl 1.1.1n Verifies on Ubuntu 22.04 with

Re: Strange problem: openssl verify not working on Proxmox VM, works on a bare metal system

2022-09-03 Thread Roger James
On 3 September 2022 19:26:50 Shawn Heisey via openssl-users wrote: On 9/2/22 21:42, Shawn Heisey via openssl-users wrote: Other bare metal systems and their results with the same PEM file: Verifies on Proxmox (the one running the VM) with openssl 1.1.1n Verifies on Ubuntu 22.04 with

Re: Serializing SSL state

2022-06-20 Thread Rouzier, James via openssl-users
Hi Matt, What would it take to expose this? Also would you accept a patch if we implement what’s missing? Thank You James On 6/20/22, 10:13 AM, "Matt Caswell" wrote: On 20/06/2022 15:11, Rouzier, James via openssl-users wrote: > Hey Guys, > > Is it po

Serializing SSL state

2022-06-20 Thread Rouzier, James via openssl-users
state of the TLS handshake so that any server can pickup where the previous server left off. Is this possible with the current API of openssl? James

QUIC support in OpenSSL 3.0

2020-02-06 Thread James M Snell
missing something important, but I at least wanted to voice my support for getting #8797 landed. Thank you, James M Snell, jasn...@gmail.com

OpenSSL 1.1.1b installation

2019-05-20 Thread DeCaro, James John (Jim) CIV DISA SD (US) via openssl-users
Hello, I am working on a Solaris 11.4 x86 64bit virtual server. There are no specific applications loaded on it yet. I am preparing it to be a BIND server eventually. To that end, I downloaded and installed OpenSSL 1.1.1b so I have the latest and greatest to work with. The installation

[openssl-users] OpenSSL version 1.1.0i make test fails - 80-test_cms.t

2018-09-03 Thread James Brown via openssl-users
) Result: FAIL make[1]: *** [_tests] Error 1 make: *** [tests] Error 2 I first ran: ./Configure --prefix=/usr/local shared darwin64-x86_64-cc enable-ec_nistp_64_gcc_128 no-ssl2 no-ssl3 then make depend then: make test macOS X 10.7.5 Any suggestions? Thanks, James.-- openssl-users mailing

[openssl-users] What is the output format of `openssl pkcs12`? How can I make it output a PKCS#1 private key?

2017-12-01 Thread James Fisher
Hi, I have a `Certificates.p12` file that I wish to convert to a `certificates.pem` containing an unencrypted private key in PKCS#1 format. I have previously been able to do this by running: openssl pkcs12 -in Certificates.p12 -out certificates.pem -nodes -clcerts The resulting

Re: [openssl-users] NMAKE error

2017-05-01 Thread James Condren
...@bn6pr17mb1233.namprd17.prod.outlook.com> on Mon, 1 May 2017 15:02:41 +, James Condren <jcond...@hcpci.com> said: jcondren> Getting the following error when attempting to make: jcondren> jcondren> NMAKE : fatal error U1073: don't know how to make jcondren> '"crypt

Re: [openssl-users] NMAKE error

2017-05-01 Thread James Condren
openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of Benjamin Kaduk via openssl-users Sent: Monday, May 1, 2017 11:38 AM To: openssl-users@openssl.org Subject: Re: [openssl-users] NMAKE error On 05/01/2017 10:02 AM, James Condren wrote: Getting the following error when attemptin

[openssl-users] NMAKE error

2017-05-01 Thread James Condren
Getting the following error when attempting to make: NMAKE : fatal error U1073: don't know how to make '"crypto\include\internal\bn_conf.h.in"' Stop. Here's the lines from the makefile that are creating the error: crypto\include\internal\bn_conf.h: "crypto\include\internal\bn_conf.h.in"

[openssl-users] FW: problem with missing STDINT.H file

2017-01-30 Thread Carter, James M. (MSFC-ES34)
, /usr/include /opt/SUNWSpro/prod/include/CC/std /opt/SUNWSpro/prod/include/CC/stlport4 I found this file on GITHUB. Can it be downloaded and put in /usr/include or /opt/SUNWspro/prod/CC/std. Thank you for your assistance James James Carter PhD ES34 Bldg 4487 Rm B117 Optics & Imaging Br

[openssl-users] rpmbuild openssl-1.0.1u

2016-10-25 Thread James Marcus
Hi, I'm trying to build a rpm for openssl-1.0.1u on CentOS 7 x86_64. To get the rpmbuild to run, I had to remove several comments in changelog, because they weren't formatted correctly. The second problem I ran into is one during the rpm staging: The tail end of the output from rpmbuild -ba

Re: [openssl-users] ssl connect failed

2016-04-20 Thread james sqawz
Hi all, I want to add two extension field in CLIENT HELLO request. Extension: next protocol negotiation Extension:application layer protocol negotiation For that purpose which API/function of openssl I will call? Thanks Pranab On Mon, Apr 18, 2016 at 6:16 PM, james sqawz <james

Re: [openssl-users] openssl-users Digest, Vol 17, Issue 24

2016-04-18 Thread james sqawz
. 1.1.0-pre4: openssl speed chacha (c^) > 3. Unable to load/add a dynamic engine (danigrosu) >4. Regarding TLS 1.3 (James) >5. Re: Regarding TLS 1.3 (Matt Caswell) >6. ssl connect failed (james sqawz) >7. Re: ssl connect failed (danigrosu) > > >

[openssl-users] ssl connect failed

2016-04-18 Thread james sqawz
are abscent in my ssl packet. Extension: server name present Extension:application layer protocol negotiation Apart from that I did not set path of Server Certificate. Shall these impact my connect request. Can somebody help. Thanks James -- openssl-users mailing list To unsubscribe: https

[openssl-users] Regarding TLS 1.3

2016-04-17 Thread James
Hi there, In the below link I could see TLS 1.3 support will be added in future releases https://www.openssl.org/policies/roadmap.html I think the support is not yet added. From when it will be added regards, James Arivazhagan Ponnusamy -- openssl-users mailing list To unsubscribe: https

Re: [openssl-users] Is SHA hashing algorithm reversable?

2016-04-05 Thread James
Hi, I always use like this Hash ( salt + password ) You can use like this also Hash ( hash(salt) + password ) regards, James On Tue, Apr 5, 2016 at 1:52 PM, Sugumar <sugu.ec...@gmail.com> wrote: > Hello, > > Ya you are correct James. > But my doubt is what is the best method to

Re: [openssl-users] Is SHA hashing algorithm reversable?

2016-04-05 Thread James
some commonly used strings and kept in their DB, using this only they give the original string. That is why we need to use a salt string along with your original string. regards, James On Tue, Apr 5, 2016 at 11:44 AM, Sugumar <sugu.ec...@gmail.com> wrote: > Thanks for all the in

[openssl-users] FIPS Performance Question

2016-03-07 Thread James M Takahashi
https://www.openssl.org/docs/fipsnotes.html mentions the following: As a result of the POST performance issue we revisited the KAT (Known Answer Test) requirements in the POST process that were burning up most of those cycle. In consultation with a CMVP test lab we determined that it

[openssl-users] OpenSSL 1.0.2g compile fails on OS X 10.11.3 - make depend: Command not found

2016-03-01 Thread James Brown
the recommendation at: http://comments.gmane.org/gmane.comp.encryption.openssl.user/47242 and change the MAKEDEPPROG=makedepend to MAKEDEPPROG=$(CC) -M ? Thanks, James. smime.p7s Description: S/MIME cryptographic signature -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman

[openssl-users] Errors building 1.0.2e on Mac OS X 10.7.5

2015-12-15 Thread James Brown
:973:2: error: invalid instruction mnemonic 'adoxq' adoxq %rbp,%r15 ^ make[2]: *** [x86_64-mont.o] Error 1 make[1]: *** [subdirs] Error 1 make: *** [build_crypto] Error 1 This worked with 1.0.1 versions. Any suggestions? Thanks, James. smime.p7s Description: S/MIME cryptographic signature

[openssl-users] Regarding the security of the keys

2015-07-21 Thread James
in the LD_LIBRARY_PATH, may result in compromising the security of the keys. Does any of you faced this problem and if you could share the solution it would be helpful. regards, James Arivazhagan Ponnusamy ___ openssl-users mailing list To unsubscribe

[openssl-users] Vulnerability Disclosures

2015-07-10 Thread James Billingham
, or less serious/widespread. Currently a wide variety of vulnerabilities are just indicated as “high” severity, which could mean anything from a relatively minor DoS affecting 5 implementations to MITM affecting all servers/browsers. Thanks, James

[openssl-users] Regarding the Support for TLS 1.3

2015-05-04 Thread James
Hi there, I would like to know whether OpenSSL supports TLS 1.3, if supported from which version of OpenSSL the implementation started. regards, James Arivazhagan Ponnusamy ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman

Re: [openssl-users] Disable SSL3 and enable TLS1? / Ambiguous DES-CBC3-SHA

2015-04-06 Thread James
Hi, Can you try this option SSL_CTX_set_options(m_SslCtx, SSL_OP_NO_SSLv2|SSL_OP_NO_SSLv3); instead of disabling using the cipher list regards, James Arivazhagan On Tue, Apr 7, 2015 at 5:41 AM, David Rueter drue...@assyst.com wrote: I would like to disable SSL3 (to prevent POODLE

Re: [openssl-users] Disable SSL3 and enable TLS1? / Ambiguous DES-CBC3-SHA

2015-04-06 Thread James
not be in a position to use this API. May be you can try with the latest version of openssl with the POODLE fix. regards, James On Tue, Apr 7, 2015 at 8:14 AM, Viktor Dukhovni openssl-us...@dukhovni.org wrote: On Mon, Apr 06, 2015 at 05:11:22PM -0700, David Rueter wrote: I would like to disable SSL3

Re: [openssl-users] HTTP / HTTPS on same port

2015-04-03 Thread James
) || (szData[9] == szData[1]))) { // SSLv3 nRet = 1; } } } return nRet; } On Sat, Apr 4, 2015 at 5:10 AM, James Cloos cl...@jhcloos.com wrote: JR == Joris Van Remoortere jo...@mesosphere.io writes: JR I would like to ask your opinion and advice

Re: [openssl-users] HTTP / HTTPS on same port

2015-04-03 Thread James Cloos
-- James Cloos cl...@jhcloos.com OpenPGP: 0x997A9F17ED7DAEA6 ___ openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: which cipher was chosen?

2014-11-23 Thread James
Hi, Alternatively you can use the wireshark or tcpudmp to capture the packet and decode the SSL - Client Hello and Sever Hello That also may help to identify which protocol and cipher we use regards, James Arivazhagan Ponnusamy On Sat, Nov 22, 2014 at 7:12 AM, Chris Bare chris.b...@gmail.com

Re: Donation from AirVPN

2014-07-02 Thread James McMurry
Thank you to AirVPN and Paolo for stepping up ! jim == Jim McMurry Milton Security Group 261 Imperial Highway Suite 550 Fullerton CA 92835 http://www.miltonsecurity.com On Jul 2, 2014, at 6:00 AM, Steve Marquess marqu...@opensslfoundation.com wrote: We have

Re: OpenSSL Vulnerability CVE-2014-0195

2014-06-23 Thread James
Hi, Do you use DTLS ? it is secure mode of UDP transfer. If you are not using DTLS then you are not vulnerable regards, James On Mon, Jun 9, 2014 at 6:43 PM, Jaya Nageswar jaya.nages...@gmail.com wrote: Hi All, We are currently using openssl 0.9.8 h version in one of our components. I

Getting error for libcrypto.a file in openssl-1.0.1g when making php

2014-04-17 Thread James Butler
I am getting this error from an openssl-1.0.1g file when trying to make php-5.4.23 /usr/bin/ld: /opt/openssl-1.0.1g/lib/libcrypto.a(cversion.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /opt/openssl-1.0.1g/lib/libcrypto.a:

Re: Getting error for libcrypto.a file in openssl-1.0.1g when making php

2014-04-17 Thread James Butler
Street Mason, MI 48854-1553 Direct:+1 517 639 0892 Mobile : +1 517 862 9464 From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of James Butler Sent: Thursday, 17 April, 2014 09:51 To: openssl-users@openssl.org Subject: Getting error

Debugging cause of unable to get local issuer certificate - one cert works, one doesn't

2013-09-23 Thread James Crowley
Hi everyone, I'm hitting a unable to get local issuer certificate error on a specific SSL certificate, and I was wondering how I can best debug this? It's via NXLog which uses OpenSSL so a bit disconnected from the underlying library at the moment, and I'm not too familar with OpenSSL. I've

Re: Debugging cause of unable to get local issuer certificate - one cert works, one doesn't

2013-09-23 Thread James Crowley
specifying other names including collectors.sumologic.com. EV certs aren’t allowed to use wildcard names. ** ** ** ** *From:* owner-openssl-us...@openssl.org [mailto: owner-openssl-us...@openssl.org] *On Behalf Of *James Crowley *Sent:* Monday, September 23, 2013 14:28 *To:* openssl-users

Re: Interleaving SSL_write() and SSL_read()

2013-09-19 Thread James Marshall
, then do the appropriate next operation (which for SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE is just a repeat of its previous operation). Good luck, James On Thu, Sep 19, 2013 at 2:02 AM, Krzysztof Kwiatkowski krzys...@leeds.plwrote: Hi, I'm a bit confused about usage of SSL_write

Re: simple https client application

2013-09-18 Thread James Marshall
, James On Wed, Sep 18, 2013 at 4:44 AM, Indtiny s indt...@gmail.com wrote: Hi, I want to use a openssl api and use that as http client . currently I am using the c-curl lib with opebssl to do this . and I am running a Nginx server with openssl to support server funs. I want to remove

Re: simple https server using openssl

2013-05-18 Thread James Marshall
Not clear if you need to learn HTTP, but a quick tutorial is at http://www.jmarshall.com/easy/http/ . It covers the requirements of writing compliant clients and servers. James On Fri, May 17, 2013 at 11:34 PM, Indtiny s indt...@gmail.com wrote: Hi Dave, I do not need to handle all of HTTP

Re: Re: Issue with 1.0.1d with Apache 2.2.23

2013-02-07 Thread James
Original Message From: James ja...@nixsecurity.org To: openssl-users@openssl.org Cc: openssl-users@openssl.org Sent: Wed, Feb 6, 2013, 3:51 PM Subject: Re: Issue with 1.0.1d with Apache 2.2.23 Original Message From: James ja...@nixsecurity.org To: openssl-users@openssl.org

Re: Re: Issue with 1.0.1d with Apache 2.2.23

2013-02-07 Thread James
Original Message From: Bruce Cran br...@cran.org.uk To: openssl-users@openssl.org Cc: James ja...@nixsecurity.org Sent: Thu, Feb 7, 2013, 9:48 AM Subject: Re: Issue with 1.0.1d with Apache 2.2.23 On 07/02/2013 14:36, James wrote: Just an update, using a SSLCipherSuite in the SSL

Issue with 1.0.1d with Apache 2.2.23

2013-02-06 Thread James
I recently upgraded our application to OpenSSL 1.0.1d with FIPS compiled in but disabled, which has always been the case in the past. Our application runs in a browser using Apache 2.2.23 and mod_ssl which is compiled against OpenSSL. Testing has revealed that HTTP requests work fine, however,

Re: Issue with 1.0.1d with Apache 2.2.23

2013-02-06 Thread James
Original Message From: James ja...@nixsecurity.org To: openssl-users@openssl.org Sent: Wed, Feb 6, 2013, 2:50 PM Subject: Issue with 1.0.1d with Apache 2.2.23 I recently upgraded our application to OpenSSL 1.0.1d with FIPS compiled in but disabled, which has always been the case

Re: OpenSSL wikibook

2013-02-02 Thread James Marshall
blocks. All comments welcome. I'd feel more comfortable if someone who knows better could verify it. Anything missing? If it's accurate, I'm happy to transfer it to Patrick's wiki. Cheers, James On Fri, Feb 1, 2013 at 9:29 PM, Patrick Pelletier c...@funwithsoftware.org wrote: Since the quality

Re: I can't believe how much this sucks

2012-11-13 Thread james
For things that the peer support forum and the existing documentation don't cover, you have the source code, which is definitive. The source code can tell you what it DOES do - but the cost of understanding that can be very high in some cases, and the problem domain of OpenSSL almost

Re: I can't believe how much this sucks

2012-11-13 Thread james
the 'many eyes make all bugs shallow' views You don't believe that, do you? The number of counter-examples of long-standing bugs in widely available and active open-source systems should be large enough to call it now. Especially in subtle, complex systems where there is no documentation of

Add 509v3 certificatePolicies in C

2012-10-04 Thread James Burton
I am trying add certificatePolicies in C code and I got this Error on certificatePolicies = 2.2.2.2 ** sign1.c:163 Error creating X509 extension object 5432:error:22097088:X509 V3 routines:DO_EXT_NCONF:no config database:.\crypto\x5 09v3\v3_conf.c:156: 5432:error:22098080:X509 V3

Re: Cert issue with 64 bit build on Windows

2012-10-01 Thread James Swift
experience these? Build machine: Windows 7 Enterprise 64 bit, SP 1, Core i7 3930 Visual Studio 2010 Professional SP 1 perl Configure no-idea no-mdc2 no-rc5 VC-WIN64A call ms\do_win64a nmake -f ms\ntdll.mak nmake -f ms\ntdll.mak test James On 28 September 2012 19:00, Dr. Stephen Henson st...@openssl.org

Re: Cert issue with 64 bit build on Windows

2012-10-01 Thread James Swift
again, James On 1 October 2012 13:55, Dr. Stephen Henson st...@openssl.org wrote: On Mon, Oct 01, 2012, James Swift wrote: Try running the OpenSSL tests using: nmake -f ms\ntdll.mak test rsa_test PKCS #1 v1.5 encryption/decryption ok OAEP decryption (test vector data) failed! PKCS #1 v1.5

Cert issue with 64 bit build on Windows

2012-09-28 Thread James Swift
but found none of them in code called up to this point. Any help here would be greatly appreciated. James * Compiled curl 7.27.0 as instructed in the docs with the following options mode=static VC=10 WITH_SSL=dll WITH_ZLIB=static USE_IDN=no ENABLE_WINSSL=no MACHINE=x64 openssl 1.0.1c

RE: Openssl ca application

2012-09-20 Thread James Burton
referen ced in function main sign.exe : fatal error LNK1120: 11 unresolved externals Thank you From James Burton

Tables for handling various non-blocking I/O errors

2012-08-22 Thread James Marshall
welcome. Thanks! James

Meanings of various return codes with non-blocking I/O?

2012-08-09 Thread James Marshall
(), SSL_write(), and SSL_shutdown() are each handled with a similar block. That's one of several questions I have. A more general question is: Where can I find descriptions of all return codes when using non-blocking I/O? Thanks for any help! Cheers, James

A few questions about non-blocking I/O in a secure HTTP server

2012-07-06 Thread James Marshall
, in case anyone wants to look at it. It's 500 lines including comments, but you can see e.g. just the error-handling in try_SSL_read() by searching for sub try_SSL_read. The full program is available upon request. Thanks a lot for any clues! I appreciate all help. Cheers, James embedded-server.pl

OpenSSL 1.0.1 handshake timeout

2012-03-28 Thread James Earl
I recently had a timeout issue with a service provider we connect to over HTTPS. I found downgrading to OpenSSL 1.0.0 solved the problem. I'm not sure how to determine if it's a bug, an Arch Linux package issue, or a problem with the service providers server? I tested using Python and Ruby

Re: OpenSSL 1.0.1 handshake timeout

2012-03-28 Thread James Earl
On Wed, Mar 28, 2012 at 10:16 AM, Dr. Stephen Henson st...@openssl.org wrote: On Wed, Mar 28, 2012, James Earl wrote: I recently had a timeout issue with a service provider we connect to over HTTPS.  I found downgrading to OpenSSL 1.0.0 solved the problem. I'm not sure how to determine

Cannot decrypt file - maybe wrong key?

2011-10-23 Thread James Coldwell
? Regards, James __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

September 6th Security Advisory

2011-09-07 Thread james
ental "ECCdraft" ciphersuites) and to OpenSSL 1.0.0 through 1.0.0d."Unfortunately, we cannot upgrade to the 1.0.0 series until the new FIPS module is released, since 1.0.0 doesn't compile with the current FIPS module.Thanks!James __

RE: CMS signing with engine

2011-07-08 Thread James Berry
Steve, I'm sorry but I don't understand can you be a bit more explicit? Best wishes James -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 06 July 2011 20:26 To: openssl-users@openssl.org Subject: Re

CMS signing with engine

2011-07-06 Thread James Berry
the right magic cms -engine pkcs11 -sign -in sign.txt -signer 8320eb4fa0f91a25b9febcbe47845ba168055622 -keyform engine -out signout.txt -outform DER Can anyone help please? Best wishes James Advanced Health and Care Limited part of Advanced Computer Software Group. Registered in England

Getting started to create PKCS7 message with PKCS11 provider

2011-06-30 Thread James Berry
wishes James James Berry Chief Technical Officer Advanced Health Care Unit 4 Eurogate Business Park, Ashford, Kent TN24 8SB m: +44 (0) 7768 021031 t: +44 (0) 1233 722700 f: +44 (0) 1233 722701 www.advancedcomputersoftware.com/ahchttp://www.advancedcomputersoftware.com/ahc

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
:03 James Chase wrote: I simplified the issue a bit in order to try and understand what is going on here and found that the SSL certificate that Network Solutions is providing, along with the intermediate chain file cannot be verified by newer installs of Firefox. Hi James. That seems

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
DSpoJSSy8ieH7U4/kuZE79tAWQw5EvgfyL6fpMLHvNT63G6bW7ekRuSEjA0njqpC y/Bbi7gDW2FzQ8Y0gMyYKtHVTBFz7vyr2hwB37bUWq009kMRVUhhHYpF6fAnByZC phBXxfqQaC1XmE7tnyt8QLI2NBXDpDTTMtaEcU0VKnsb6X0p+u1r6S+/I2pjan9m G0pID0nsP9iH2xyG+8F+Fxcxt7ve0T2YGYfgMg== -END CERTIFICATE- On Tue, Apr 26, 2011 at 8:19 AM, James Chase

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
telling them their was something wrong with their files and they just kept saying it was my fault and they will bill me $120/hour to fix it. On Tue, Apr 26, 2011 at 8:19 AM, James Chase chase1...@gmail.com wrote: Well my results are quite different, and I guess point to my p12 not being

Re: issue with p12 creation and network solutions EV SSL

2011-04-26 Thread James Chase
I got the the correct certificate chain from my Windows 7 box. Microsoft tends to update its trusted CA certificates store more quickly and regularly than Mozilla or Linux distros: the latest update was last month on March 23rd 2011. It is sad that even Network Solutions guys are not aware

Re: issue with p12 creation and network solutions EV SSL

2011-04-25 Thread James Chase
-in www.example.com.csr -key www.example.com.key verify OK -BEGIN CERTIFICATE REQUEST- CERTIFICATE DATA HERE -END CERTIFICATE REQUEST- On Sat, Apr 23, 2011 at 4:41 PM, James Chase chase1...@gmail.com wrote: I am using the same system -- I have tried with last years chain file as well. The only thing

Re: issue with p12 creation and network solutions EV SSL

2011-04-25 Thread James Chase
-- I have never had so much trouble with an SSL certificate and am not an expert by any means. Anyone have any thoughts? I called NS earlier in this process and they said not our problem but perhaps I will try again. On Mon, Apr 25, 2011 at 11:01 AM, James Chase chase1...@gmail.com wrote: I did

Re: issue with p12 creation and network solutions EV SSL

2011-04-25 Thread James Chase
openssl verify -CAfile chain.crt my.cert.crt IF you have installed some 'common' or 'standard' CAs in your system's default truststore -- or if you're using a packaged build that does so for you -- turn that off to make sure it doesn't silently 'fill in' certs for you, something like:

Re: issue with p12 creation and network solutions EV SSL

2011-04-23 Thread James Chase
I have done this multiple years in a row with the exact same process but now I get the following error when I try to create my SSL: openssl pkcs12 -export -chain -CAfile cachain.crt -out my.domain.com.p12 -inkey my.domain.com.key -in MY.DOMAIN.COM.crt Error unable to get local issuer

Re: issue with p12 creation and network solutions EV SSL

2011-04-23 Thread James Chase
have always used the -chain and -CAfile options together when creating p12's. On Sat, Apr 23, 2011 at 12:32 PM, Crypto Sal crypto@gmail.com wrote: On 04/21/2011 06:51 PM, James Chase wrote: I have done this multiple years in a row with the exact same process but now I get the following

issue with p12 creation and network solutions EV SSL

2011-04-21 Thread James Chase
I have done this multiple years in a row with the exact same process but now I get the following error when I try to create my SSL: openssl pkcs12 -export -chain -CAfile cachain.crt -out my.domain.com.p12 -inkey my.domain.com.key -in MY.DOMAIN.COM.crt Error unable to get local issuer certificate

Re: opensll-0.9.8q.tar.gz corrupted.

2010-12-03 Thread james
The tarball doesn't appear to be corrupted for me, what errors are you getting?Under Redhat EL4 and EL5 VMs,tar zxf openssl-0.9.8q.tar.gz, works perfectly fine for me. Original Message From: Brent Evans brent.ev...@gmail.comTo: openssl-users@openssl.orgSent: Fri, Dec 3, 2010, 8:48

OpenSSL 1.0.0 FIPS module

2010-07-29 Thread james
with FIPS, I'm assuming they've either modified the FIPS module to be compatible with OpenSSL 1.0.0, they've obtained their own module by other means or some other method.Any information on this would be helpful.Thanks in advanced,James

Re: Re: OpenSSL 1.0.0 FIPS module

2010-07-29 Thread james
I completely understand and appreciate your quick response :) For the time being, we'll stick with using the latest version of the 0.9.X series of OpenSSL. Thanks again, James Original Message From: Steve Marquess marqu...@opensslfoundation.com To: openssl-users@openssl.org Sent: Thu

RE: Missing Headers

2010-06-17 Thread James, Voyle E Mr CTR US USA HQDA ITA BSS
Harshvir, Include/openssl is populated with links during the make phase. It always starts empty. Ed Ed James, Contractor ed.jam...@us.army.mil 703-588-8736-voice 703-693-7507-fax ITA BSS/TCS 1777 North Kent Street, Suite 4100, Arlington, VA 22209 From: owner-openssl-us

Re: building OpenSSL 0.9.8/1.0.0 on Solarisx86

2010-06-16 Thread James, Voyle E Mr CTR US USA HQDA ITA BSS
/lib \ -L/usr/local/lib \ -R/usr/sfw/lib:/usr/local/lib \ solaris64-x86_64-gcc The difference is: 32:386 -m32 solaris-x86-gcc 64:solaris64-x86_64-gcc Ed James, Contractor ed.jam...@us.army.mil 703-588-8736-voice 703-693-7507-fax ITA BSS/TCS 1777 North Kent Street, Suite 4100

Re: Using OpenSsl in a .Net server (ongoing opensource project)

2010-04-24 Thread James Mansion
across it. James __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord

Re: Using OpenSsl in a .Net server (ongoing opensource project)

2010-04-23 Thread James Mansion
that has been wrapped as a free-threaded COM service, you might find things easier if you don't know how to write such glue. You could try looking in Mono's runtime, too, which I suspect delegates to OpenSsl (tho I haven't checked). James

apps/Makefile - E_SRC

2010-04-15 Thread James Mansion
Why does E_EXE contain dhparam and E_OBJ contain dhparam.o, but E_SRC does not contain dhparam.c? (OpenSSL 1.0.0 fwiw) __ OpenSSL Project http://www.openssl.org User Support Mailing List

Old unused code in 1.0.0 release?

2010-04-07 Thread James Mansion
that for a very long time. Note sure the LPdir stuff is used any more either is it? (I'm trying to build openssl with a custom build system, BTW. Yes I know its not supported) James __ OpenSSL Project

How to compile for 64-bit operation on Mac OS Intel?

2010-03-28 Thread James Brown
status make: *** [smtpd] Error 1 make: *** [update] Error 1 I've installed OpenSSL 0.9.8n using: ./config --prefix=/usr threads shared The machine is a Mac Mini running OS X 10.5.8 (Leopard). Any suggestions? Thanks, James

Re: Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-13 Thread James Baker
Ger Hobbelt g...@hobbelt.com wrote: Odd question maybe, but does the API call slowdown too when traversing other heaps (which carry fewer items)? Yes. This surprised me, but Heap32Next takes the same amount of time to execute when traversing the 2nd heaplist (which has 15 items) as it does

Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-12 Thread James Baker
that I could pass on to any OpenSSL developer/contributor. Thanks, James my debugging output: stoptime: 851485984 Got heaplist_first. heap1st tickcount: 851624250 Exiting RAND_poll On Wed, Nov 11, 2009 at 4:50 PM

Re: Heap32Next performance awful on 64-bit Win7 (Was: CryptoAPI calls failing in rand_win on Windows 7)

2009-11-12 Thread James Baker
I've confirmed my linear performance conjecture w/r/t heap objects. Click here to see pretty pictures graphing my results: http://thenewjamesbaker.blogspot.com/2009/11/performance-of-heap32next-on-64-bit.html On Thu, Nov 12, 2009 at 11:50 AM, James Baker j...@j-baker.org wrote: Punchline

Re: CryptoAPI calls failing in rand_win on Windows 7

2009-11-11 Thread James Baker
, this will be my next step. Thanks, James On Sun, Nov 8, 2009 at 6:36 AM, sandeep kiran p sandeepkir...@gmail.com wrote: RAND_poll runs very quickly with a near-empty heap. Do you mean that the calls to Heap32First, Heap32Next, Heap32ListFirst, Heap32ListNext are failing? Can you check

RSA Decryption Error

2009-02-10 Thread James Richardson
Hi, I'm trying to use the openssl toolkit to decrypt a message that was encryted using an RSA public key. I have the RSA private key and thus has generated to the public key. so I have both. The string with the encrytped message is held in a file called q2.enc:

What is the proper syntax to generate a certificate request.

2009-01-27 Thread Chavez, James R.
is appreciated. Thank you James CONFIDENTIALITY This e-mail message and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail message, you are hereby

Problems with csr and importing certs.

2009-01-27 Thread Chavez, James R.
is appreciated. Thank you James CONFIDENTIALITY This e-mail message and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail message, you are hereby

[no subject]

2009-01-21 Thread James J. O'Shea
Can anyone tell me what version of OpenSSL works with my environment? OS: OpenVMS v7.2-1 IP Stack: Multinet v5.0 Thanks, Jim Chicago, IL __ OpenSSL Project http://www.openssl.org User

OWASP Hartford: February 2009 (Open Web Application Security Project)

2008-12-12 Thread James McGovern
@openssl.org ORGANIZER;CN=James McGovern:MAILTO:ja...@architectbook.com LOCATION:The Hartford\, Tower Building: Atrium Conference Room DTEND;TZID=(GMT-05.00) Eastern Time (US Canada):20090210T19 DESCRIPTION:\NThe Open Web Application Security Project (OWASP) is a worldw ide free and open community

Mutual Authentication

2008-12-11 Thread McGovern, James F (HTSC, IT)
We are running into an issue with an application that is written in PERL using SOAP:Lite and OpenSSL on Suse where a SOAP request is sent to a server that requires mutual authentication. On the server side, the server is throwing a message indicating that it is having a problem with base64

Re: build error vsc++express 2008 win32 openssl

2008-09-11 Thread James Owen
Duh. I see now you were showing your path... Thanks again. James --Original Message-- From: James Owen To: openssl-users@openssl.org ReplyTo: [EMAIL PROTECTED] Subject: Re: build error vsc++express 2008 win32 openssl Sent: Sep 11, 2008 09:56 That did it... Though the file was in source

Re: build error vsc++express 2008 win32 openssl

2008-09-11 Thread James Owen
That did it... Though the file was in source dir/crypto/perlasm Thanks a lot! James James Owen -Original Message- From: Thomas Jansen [EMAIL PROTECTED] Date: Thu, 11 Sep 2008 13:21:02 To: openssl-users@openssl.org Subject: Re: build error vsc++express 2008 win32 openssl James Owen

build error vsc++express 2008 win32 openssl

2008-09-10 Thread James Owen
I tried building the sources (openssl-0.9.7m, openssl-0.9.8g, openssl-0.9.8h) with 2008 express and failed every time with the same error. cl /Fotmp32dll\cversion.obj -Iinc32 -Itmp32dll /MD /W3 /WX / Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DOPENSSL_SYSNAME_WIN32 -DWIN32_LEAN_AND_MEAN -

MAC

2008-03-14 Thread Main, James J Civ USAF AMC DET 3 AMCAOS/DOHJ
Is there a driver available for MAC using ActivClient CAC 6.1? If so where is it available. Thanks Jim Main C-130JMATS Simcert/QA Detachment 3, AMCAOS 626 Sixth St. Little Rock AFB AR, 72099 DSN 731-6606Comm. 501-987-6606 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]

configuring a slave and client failover

2008-01-17 Thread James Hartley
dies. how do I setup the certificates and configure the clients appropriately. thanks for any help or examples. james __ OpenSSL Project http://www.openssl.org User Support Mailing List

  1   2   >