OCSP response: print signature and checksum encryption

2010-03-09 Thread Michel Pittelkow - michael-wessel . de
Hi, we need to check which encryption method is used in the ocsp response. The output only says valid. How can we enable to print such status messages? Any help would be appreciated! Kind regards Michel Pittelkow

OCSP response: print signature and checksum encryption

2010-03-09 Thread Michel Pittelkow - michael-wessel . de
Hi, we need to check which encryption method is used in the ocsp response. The output only says valid. How can we enable to print such status messages? Any help would be appreciated! Mit freundlichen Grüßen / Kind regards Michel Pittelkow IT-Dienstleistungen: beraten | planen | umsetzen |

[openssl.org #2188] [PATCH] OpenSSL UI misses getter and setter functions for user-defined prompt constructor

2010-03-09 Thread Jaroslav Imrich via RT
Bratislava 2 jaroslav.imr...@disig.sk www.disig.sk __ Information from ESET NOD32 Antivirus, version of virus signature database 4928 (20100309) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com diff -ur openssl-0.9.8m/crypto/ui/ui.h openssl-0.9.8m-modified

Re: [openssl-dev] [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Erwann ABALEA
Hodie post. Non. Mar. MMX, Stephen Henson via RT scripsit: I've now committed code to the development branch which includes PSS signature verification support. I'll look into PSS signing at some point too. Let me know of any problems. I can't verify ecdsa-with-SHA256 certificates, the ones

Re: OpenSSL server problems

2010-03-09 Thread The Doctor
On Tue, Mar 09, 2010 at 01:24:25PM +0100, Lutz Jaenicke wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! In the past few days we had some problems with the hardware of the OpenSSL server providing the public services (web, mail, etc). We are now closely monitoring the system and

OpenSSL server problems

2010-03-09 Thread Lutz Jaenicke
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi! In the past few days we had some problems with the hardware of the OpenSSL server providing the public services (web, mail, etc). We are now closely monitoring the system and preparing to migrate to another server if necessary. Thank you very

Re: [openssl-dev] [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Dr. Stephen Henson
On Tue, Mar 09, 2010, Erwann ABALEA wrote: Hodie post. Non. Mar. MMX, Stephen Henson via RT scripsit: I've now committed code to the development branch which includes PSS signature verification support. I'll look into PSS signing at some point too. Let me know of any problems. I

[openssl.org #2189] Bug Report

2010-03-09 Thread Nick Stone via RT
Hi, Thank you very much for OpenSSL. I have successfully used the crypt library in Fedora, but am now trying to build it in Windows XP using MinGW. I issue the command ms\mingw32. bat but get the following errors gcc -o tmp\set_key.o -Ioutinc -Itmp -DL_ENDIAN -DDSO_WIN32

RE: OpenSSL server problems

2010-03-09 Thread Hasan Rezaul-CHR010
Hi All, I am somewhat of a newbie to openssl, so apologize in advance for my ignorance :-) I have openssl version 0.9.8g on my custom Linux 2.6.27 distro. I need to make sure that SHA-2 (specifically SHA-256 algorithm) is supported with this version of openssl. The sha-256 algorithm will be

Re: OpenSSL server problems

2010-03-09 Thread Rafiqul Ahsan
Yes, openssl 098g supports SHA256. I built Freeradius 1.1.7 with openssl 098g, and we have been using EAP-TLS with SHA256 signed certs for quite sometimes. Thanks On Tue, Mar 9, 2010 at 11:28 AM, Hasan Rezaul-CHR010 chr...@motorola.comwrote: Hi All, I am somewhat of a newbie to openssl, so

[openssl.org #2190] [bug] aes-armv4.s:981: Error: unaligned opcodes detected in executable segment

2010-03-09 Thread Bernhard Rosenkränzer via RT
Trying to build openssl 1.0.0-beta5 with an armv6 crosscompiler in the linux-armv4 [armv6 is supposed to be compatible with armv5 and armv4...] config results in aes-armv4.s: Assembler messages: aes-armv4.s:981: Error: unaligned opcodes detected in executable segment make[2]: *** [aes-armv4.o]

Re: [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Martin Kaiser via RT
Hello Steve, Thus wrote Stephen Henson via RT (r...@openssl.org): I've now committed code to the development branch which includes PSS signature verification support. thanks for committing this, it looks like a clean and generic approach. (of course, it's a pity that most of my code didn't

Re: [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Dr. Stephen Henson
On Tue, Mar 09, 2010, Martin Kaiser via RT wrote: Hello Steve, Thus wrote Stephen Henson via RT (r...@openssl.org): I'll look into PSS signing at some point too. Any chance I can contribute to this, based on your approach for verification? A while ago, I extended my patch to

Re: [openssl-dev] [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Martin Kaiser
Hi Erwann, Thus wrote Erwann ABALEA (erwann.aba...@keynectis.com): I can't verify ecdsa-with-SHA256 certificates, the ones transmitted a few days ago (German passports), with the same error (d2i_ECPKParameters function). this is strange. I've also tested Steven's version against your ecdsa

Re: [openssl.org #2190] [bug] aes-armv4.s:981: Error: unaligned opcodes detected in executable segment

2010-03-09 Thread Andy Polyakov via RT
Trying to build openssl 1.0.0-beta5 with an armv6 crosscompiler in the linux-armv4 [armv6 is supposed to be compatible with armv5 and armv4...] config results in aes-armv4.s: Assembler messages: aes-armv4.s:981: Error: unaligned opcodes detected in executable segment make[2]: ***

Re: [openssl.org #2162] Updated CMAC, CCM, GCM code

2010-03-09 Thread Andy Polyakov
Blk Byte MXe µs MXu µs I32 µS MXe MB/s MXu MB/s I32 MB/s ¯¯¯ ¯¯¯ ¯¯¯ ¯¯¯ 00 56 55 81 1 16 268 320 538 59.7 50.0 29.7 21 336473864398455*70.9 52.2 39.7 Could you also collect

Re: [openssl.org #1951] [patch] verification of X.509 certificates that contain an RSASSA-PSS signature

2010-03-09 Thread Dr. Stephen Henson
On Tue, Mar 09, 2010, Dr. Stephen Henson wrote: On Tue, Mar 09, 2010, Martin Kaiser via RT wrote: Hello Steve, Thus wrote Stephen Henson via RT (r...@openssl.org): I'll look into PSS signing at some point too. Any chance I can contribute to this, based on your approach for