Regarding interoperability between no-asm and asm enabled

Hi, I am using 'DTLS over SCTP' and the OpenSSL version is 1.1.1c. I compiled OpenSSL with target 'linux-arm64ilp32' on armv8. GCC used is aarch64_be_linux-gnuilp32-gcc. So it is ILP32 and Big-end. I compiled two sets of OpenSSL libraries: 1) OpenSSL with no-asm present 2) OpenSSL with no-asm a

Does 'no-hw' compile option disables the effect of opening the ASM assembler instruction ?

Hi, If there is no 'no-asm' compile option while building the OpenSSL, then it enables the assembler instruction support for OpenSSL. Whether having 'no-hw' compile option disables the assembler instruction support in above case ? Rgds, Navi

Re: Regarding netinet/sctp.h inclusion in bss_dgram.c

0/2019 10:32, Matt Caswell wrote: > > > > > > On 15/10/2019 07:51, Naveen Shivanna wrote: > >> Hi, > >> > >> After adding 'enable-sctp' compile option, OpenSSL (DTLS) can work with > >> SCTP as transport. > >> > >> Ope

Regarding netinet/sctp.h inclusion in bss_dgram.c

Hi, After adding 'enable-sctp' compile option, OpenSSL (DTLS) can work with SCTP as transport. OpenSSL bss_dgram.c file includes the kernel /netinet/sctp.h. We have our own custom SCTP implementation (also implements custom BIO METHODS, do not use the default methods), so we need to remove the d

[no subject]

Hi, After adding 'enable-sctp' compile option, OpenSSL (DTLS) can work with SCTP as transport. OpenSSL bss_dgram.c file includes the kernel /netinet/sctp.h. We have our own custom SCTP implementation (also implements custom BIO METHODS, do not use the default methods), so we need to remove the

Re: [openssl-users] Compiling OpenSSL 1.0.2l static library with FIPS -2.0.16 on Windows

, page #74 in the final executable.   Thanks,Naveen On Monday, October 30, 2017 3:37 PM, naveen gupta via openssl-users wrote: Hi, I have am trying to compile OpenSSL 1.0.2l static library using FIPS - 2.0.16 on Windows 2012 R2, Visual Studio 2015,  using reference from 

[openssl-users] Compiling OpenSSL 1.0.2l static library with FIPS -2.0.16 on Windows

Hi, I have am trying to compile OpenSSL 1.0.2l static library using FIPS - 2.0.16 on Windows 2012 R2, Visual Studio 2015,  using reference from  https://www.openssl.org/docs/fips/UserGuide-2.0.pdf , page #68. Step 1: - cd openssl-fips-2.0.16 - ms\do_fips Step 2: - cd openssl-1.0.2l - set FIPSDIR=C

intermediate state defined in SHA256_CTX

y are necessary. The SHA256 spec only discusses values in h[8]. Thanks, Naveen __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated

Re: Keys for des-ede encryption

Thanks for the answer. It helped ! On Sun, Oct 14, 2012 at 11:43 PM, Dave Thompson wrote: > >From: owner-openssl-us...@openssl.org On Behalf Of naveen > >Sent: Saturday, 13 October, 2012 21:59 > > >I have a question related to openssl. I need to give two keys > >k1 an

backporting features to openssl 0.9.8

Hi, What would be involved in backporting the EVP_Digest* functions in 1.0 to 0.9.8. Specifically I would like to use the MAC functions with the EVP_PKEY, while currently supporting the system provided openssl (in the case of OSX, the version shipped is still 0.9.8). Thanks, Naveen Nathan

Distinctions between EVP_* functions

different so that MAC algorithms are supported? Thanks, Naveen Nathan __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated Li

Re: A few questions about custom ASN1

On Wed, Apr 04, 2012 at 03:12:26AM +0200, Dr. Stephen Henson wrote: > On Tue, Apr 03, 2012, Naveen Nathan wrote: > > > > > > That's because the ASN1_OBJECT is a little different. Some standard > > > > > OIDs are > > > > > set to a fix

Re: A few questions about custom ASN1

> > > That's because the ASN1_OBJECT is a little different. Some standard OIDs > > > are > > > set to a fixed value to avoid the need to keep allocating them. What that > > > means in practice is you do something like: > > > > > > foo->usage = OBJ_something(somearg); > > > > > > This wont result

Re: A few questions about custom ASN1

> > 2. symmKeyInfo has the ASN1_OBJECT field 'usage'. If allocated using > >symmKeyInfo_new(), how can I set the field? > > > >For example, 'payload' which is an ASN1_OCTET_STRING has available > >ASN1_OCTET_STRING_set, which sets the field, reallocating 'payload' > >if necessary

A few questions about custom ASN1

ugh the openssl source I can't seem to find a similar function for ASN1_OBJECT type. Any answers to the above would be appreciated. Thanks, Naveen --- BEGIN CODE --- #include #include #include #include #include #include typedef struct symmKeyInfo_st { ASN1_OBJECT *us

Re: get subjectAltName

Thank you Christian, it helped to decode the kerberos principal name . The code worked. Regards Naveen Christian Hohnstaedt wrote: On Wed, Sep 22, 2010 at 05:48:07PM +0530, Naveen B.N wrote: Thank you Christian, your suggestions helped us to get the position but as you mentioned the

Re: get subjectAltName

Attaching the PEM format certificate used , We need to convert it to DER before using it with the below given code. Command to convert PEM to DER openssl x509 -inform PEM -in KDC.pem -outform DER -out KDC.cer Thanks and Regards Naveen Naveen B.N wrote: Thank you Christian, your suggestions

Re: get subjectAltName

cert1); if(find_root_cert(&in,len)==0) printf("\n This is the Root\n"); else printf("\n No match was found \n"); } /* output */ length = 1001 Len =1000 cert=0 cert=86da458 Trying to find a Kerberos Principal Name in certificateFound Kerberos Principal

get subjectAltName

f in main () at find_root.c:65 Help me to solve this issue. Please guide, if any other alternative to method to achieve the same Please find the code used below. Thanks and Regards Naveen / Start code ***/int find_root_cert(char *in,int len) { X509 *cert1=NULL;

Re: get subjectAltName

Resending with attachment .. Naveen B.N wrote: Hello, I am using Linux. I am trying to print the subjectAltName present in the certificate, but i am seeing crash in /lib/libcrypto.so.6 core was generated by `./a.out'. Program terminated with signal 11, Segmentation fault. #0 0x058b8a

Unable to fetchmail problem SSL enabling

n Name (eg, YOUR name) []:naveen Email Address []:[EMAIL PROTECTED] Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: --- $ openssl

Unable to fetchmail problem SSL enabling

first certificate verify return:1 +OK Gpop ready for requests from 122.167.6.196 y11pf6904269pod.0 read:errno=0 - what is the meaning of unable to get local issuer certificate? do i need create any other certificates? Regards, Naveen

Certificate profile issue

able profile settings which go with my need to create a simple certification authority hierarchy? Its tough going for a newbie here. I thank in advance to all who effort to make it easy for me. Warm Regards, Naveen

Fwd: Certificate profile issue

able profile settings which go with my need to create a simple certification authority hierarchy? Its tough going for a newbie here. I thank in advance to all who effort to make it easy for me. Warm Regards, Naveen

PEM_write_PKCS8PrivateKey() writing only headers

Hi All, I am using openssl.0.9.8c on RH Enterprise Linux (kernel release 2.6.9-42.ELsmp). I tried for writing an unencrypted and encrypted private key using- PEM_write_PKCS8PrivateKey(key_f1, pkey, NULL, NULL, 0, NULL, NULL); . .

Documentation source for using Engines

Hi All, Please provide the links/docs/papers/tutorials about how things can be done with OpenSSL. Though API's docs are there but I am not able to find a learning tutorial. Thanks in advance, Navin