Re: [openssl-users] Query for Openssl-1.1.0.

2016-11-18 Thread Mukesh Yadav
to get size and no api is provided to achieve same. Regards, Mukesh On 18 November 2016 at 20:03, Matt Caswell <m...@openssl.org> wrote: > > > On 18/11/16 14:30, Mukesh Yadav wrote: > > HI, > > > > > > I am updating a solution from openssl-1.0.2 to

[openssl-users] Query for Openssl-1.1.0.

2016-11-18 Thread Mukesh Yadav
HI, I am updating a solution from openssl-1.0.2 to openssl-1.1.0. Here I see most of earlier definations of struct like EVP_PKEY_CTX/HMAC_CTX are made local within Openssl. To access, thier internal struct member, new API's are introduced. Ex. const EVP_CIPHER *test = EVP_des_cbc();

Re: [openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

2015-03-26 Thread Mukesh Yadav
, Mukesh Yadav wrote: HI, I have a query for SSl cipher on Openssl-1.0.1h Have an application which is using library compiled with openssl-1.0.1h. Application is failing in func SSL_CTX_set_cipher_list() when input is RC4-MD5+RC4-SHA and it gets succeed when input is RC4-SHA. Not sure

Re: [openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

2015-03-26 Thread Mukesh Yadav
That's Right.. here is O/p Openssl-0.9.8d: :~/openssl-0.9.8d_install/usr/local/bin# ./openssl ciphers RC4-MD5:RC4-SHA -v RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4-SHA

Re: [openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

2015-03-26 Thread Mukesh Yadav
, Mar 26, 2015 at 07:56:38PM +0530, Mukesh Yadav wrote: :~/openssl-0.9.8d_install/usr/local/bin# ./openssl ciphers RC4-MD5+RC4-SHA -v RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4

[openssl-users] Is RC4-MD5 disabled on Openssl-1.0.1h

2015-03-25 Thread Mukesh Yadav
HI, I have a query for SSl cipher on Openssl-1.0.1h Have an application which is using library compiled with openssl-1.0.1h. Application is failing in func SSL_CTX_set_cipher_list() when input is RC4-MD5+RC4-SHA and it gets succeed when input is RC4-SHA. Not sure whether RC4-MD5 is disabled by

Query reg obselete func get_crl() from openssl-0.9.8d

2014-11-23 Thread Mukesh Yadav
HI All, I have query for func get_crl() present in openssl-0.9.8d. My Application code earlier uses openss-0.9.8d and now has been updated to use openss-1.0.1h There was a peice of code which used to call ctx-get_crl() to confirm if matching CRL is present or not. ctx = X509_STORE_CTX_new();

Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Mukesh Yadav
Hi, I have written application code for encryption and decryption using OpenSSL library. I am testing on machine where AES-NI support is present. I am not sure how can I confirm whether execution is using AES-NI instruction set. When run command line openssl speed -evp aes128, I was seeing

Re: Query reg AES_NI usage with OpenSSL-1.0.1h

2014-09-18 Thread Mukesh Yadav
Thanks Jeff for really good amount of info.. I have integrated code from below link of HasAESNI() and HasRDRAND() in my application code. AESNI is enabled but RDRAND is not. http://stackoverflow.com/questions/25284119/how-can-i-check-if-openssl-is-suport-use-the-intel-aes-ni . I am using EVP

Support for AES-GCM on OpenSSL-0.9.8

2014-08-06 Thread Mukesh Yadav
Hi, AES_GCM is supported on OpenSSL-1.0.1 Regarding support on OpenSSL-0.9.8, have found patch on link below. http://rt.openssl.org/Ticket/Display.html?id=2092user=guestpass=guest From various opensource discussion, it seems it cleanly apply to old version. Is it ok for this patch to be used on

Query reg multiple CA-Cert in list with same subject

2014-06-10 Thread Mukesh Yadav
Hi, I have a query for Ca-Cert list. If at gateway we have configured two CA-certs A1 and A2 both having same subject and content except time-stamp of generation. If peer sends Cert matching to A2, gateway tries to validate it with A1(subject being same and configured first in list) and

Query reg multiple CA-Cert in list with same subject

2014-06-09 Thread Mukesh Yadav
Hi, I have a query for Ca-Cert list. If at gateway we have configured two CA-certs A1 and A2 both having same subject and content except time-stamp of generation. If peer sends Cert matching to A2, gateway tries to validate it with A1(subject being same and configured first in list) and