RE: errors while installing openssl-SNAP-20080915

2008-09-18 Thread DHARNA, AJAY [AG/1000]
Thanks for your help Ger, I looked up nmake options (http://msdn.microsoft.com/en-us/library/afyyse50(VS.80).aspx) and there was the -c option: /C Suppresses default output, including nonfatal NMAKE errors or warnings, timestamps, and NMAKE copyright message. Suppresses warnings issued

Re: errors while installing openssl-SNAP-20080915

2008-09-18 Thread Kyle Hamilton
you're not looking for a flag to nmake, you're looking for a flag to cl.exe. You also need to build in a directory where the Integrity Level is set to Medium, not High, if you're building on Vista. (this is part of the access control list on the directory.) -Kyle H On Wed, Sep 17, 2008 at 9:32

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
Sorry if this sounds ultra noobish but you guys lost me, even though you probably did answer my question ;) The purpose of my application is to send a credit card number in encrypted format. So the parent companies webservice issues me a X509 certificate which contains their public RSA key. I

Re: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Michael Sierchio
Peter Walker wrote: The purpose of my application is to send a credit card number in encrypted format. Then use OAEP. - M __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
But the peer uses RSA_PKCS1_PADDING. Is this interchangeable with OAEP? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Sierchio Sent: 18 September 2008 10:02 To: openssl-users@openssl.org Subject: Re: Do you have to pre-pend 16 bytes to a raw

Who can help me with this error? ECDH

2008-09-18 Thread Pietro Albano
Hi all i develped this program, but when i run it i receive Segmentation Fault, pls help me this this software is my project for exame :( I attach source this is error from gdb: EC_write_point (point=0x804c998, group=0x804c4b8, ctx=0x804c318, str=0x804971d Punto condiviso P (x,y): ,

Openssl Fips Shared Library

2008-09-18 Thread joshi chandra
Hi I was trying to build shared library of fips and i am facing some problem with that .This is the step i have done 1. I have created the fips object module (used openssl fips 1.1.2) 2. Used openssl 0.9.7m to create fips capable module and when i use shared option in ./configure ,all the

Re: Openssl Fips Shared Library

2008-09-18 Thread Patrick Patterson
Hi Joshi: On September 18, 2008 11:01:28 am joshi chandra wrote: Hi I was trying to build shared library of fips and i am facing some problem with that .This is the step i have done 1. I have created the fips object module (used openssl fips 1.1.2) 2. Used openssl 0.9.7m to create fips

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandra
I have followed the step mention in OpenSSL FIPS Security Policy for openssl fips 1.1.2 and that all work fine. But when i started working on fips capable openssl using openssl 0.9.7m and used the shared option in the ./Configure,it is giving the error but work fine when not using shared option

Re: Openssl Fips Shared Library

2008-09-18 Thread Dr. Stephen Henson
On Thu, Sep 18, 2008, joshi chandra wrote: I have followed the step mention in OpenSSL FIPS Security Policy for openssl fips 1.1.2 and that all work fine. But when i started working on fips capable openssl using openssl 0.9.7m and used the shared option in the ./Configure,it is giving the

Re: How to protect the private key !

2008-09-18 Thread Jim Segrave
On Wed 17 Sep 2008 (09:38 -0700), David Schwartz wrote: Dan Ribe: I am using the private key just to authenticate the client. Once server has authenticated the client (by using the public key of client), it will give access to that client. If the application is a single process that

Re: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Walker wrote: | But the peer uses RSA_PKCS1_PADDING. Is this interchangeable with OAEP? No, it is not. Without further information it is impossible to tell what these 16 bytes are. It could be some kind of ASN1 coding indicating that the

RE: Openssl Fips Shared Library

2008-09-18 Thread Carlo Milono
How curious that this topic would come up today as I had a discussion on it just two days earlier. The OpenSSL FIPS 140-2 Security Policy Version 1.1.2 states: The FIPS Object Module is not a static library. It may be incorporated into shared library files or runtime executable application

Re: Openssl Fips Shared Library

2008-09-18 Thread Steve Marquess
Carlo Milono wrote: How curious that this topic would come up today as I had a discussion on it just two days earlier. The OpenSSL FIPS 140-2 Security Policy Version 1.1.2 states: The FIPS Object Module is not a static library. It may be incorporated into shared library files or runtime

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandra
when i have used shared option in the ./Configure , i was able to compile the openssl 0.9.7m successfully but when i tested the fips function in the test folder ,that time it was producing the error message and when i removed shared option by no-shared option in the ./Configure command in the

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandran
Is this openssl fips 1.1.2 module generate position independent code ? If so then i can inappropriate it in shared library generated by openssl 0.9.7m Thanks Joshi IOn Thu, Sep 18, 2008 at 11:18 PM, joshi chandra [EMAIL PROTECTED] wrote: when i have used shared option in the ./Configure

Re: Openssl Fips Shared Library

2008-09-18 Thread joshi chandran
How to find out whether openssl fips1.1.2 generate position independent code or not Please help me out Thanks Joshi IOn Thu, Sep 18, 2008 at 11:18 PM, joshi chandra [EMAIL PROTECTED] wrote: when i have used shared option in the ./Configure , i was able to compile the openssl 0.9.7m

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread David Schwartz
Peter Walker wrote: Sorry if this sounds ultra noobish but you guys lost me, even though you probably did answer my question ;) The purpose of my application is to send a credit card number in encrypted format. So the parent companies webservice issues me a X509 certificate which

problem compiling 0.9.8i (vs 0.9.8d) missing component

2008-09-18 Thread fredk2
Hi, I am using openssl speed to benchmark and observed a difference in the md5 on Solaris 10 (sparc). There appears to be a change in the compilation between 0.9.8i and prior version (d and e): 0.9.8i shows that it was compiled with: options:bn(64,64) md2(int) rc4(ptr,char)

RE: Do you have to pre-pend 16 bytes to a raw value before RSA encryption

2008-09-18 Thread Peter Walker
Thanks for the reply. I have no problem in following what they specified, just wanting to understand why for my own knowledge and now I do thanks to your explanation. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz Sent: 18 September 2008

How to extract the public ket from an RSA structure?

2008-09-18 Thread William Estrada
Hi group, I am still getting uses to SSL and I need a little help with RSA. I have a small test program that I wrote to help me. My latest problem is how do I extract the public key from the RSA structure to send to a SSL client? Here is my test program: #define _GNU_SOURCE #include

SSL operations without FDs

2008-09-18 Thread Albert ???
Hello All I'm trying to integrate OpenSSL into my project. I don't have direct access to the sockets. I've found examples on how to integrate OpenSSL without direct access to sockets. Things mostly work except for when I'm dealing with large messages i.e. when the client is trying to send

ssl teses forbidden in FIPS mode

2008-09-18 Thread The Doctor
gmake[1]: Leaving directory `/usr/source/openssl-0.9.8-stable-SNAP-20080918-fips/test' gmake: *** [tests] Error 2 -- Member - Liberal International This is [EMAIL PROTECTED] Ici [EMAIL PROTECTED] God, Queen and country! Beware Anti-Christ rising! Canada vote anything but Conservative

RE: ssl teses forbidden in FIPS mode

2008-09-18 Thread David Schwartz
] Error 1 gmake[1]: Leaving directory `/usr/source/openssl-0.9.8-stable-SNAP-20080918-fips/test' gmake: *** [tests] Error 2 If your question is whether SSLv3 should be prohibited in FIPS mode, the answer is yes. SSLv3's use of MD5 is not acceptable under FIPS rules. DS

Re: ssl teses forbidden in FIPS mode

2008-09-18 Thread Tim Hudson
]: *** [test_ssl] Error 1 gmake[1]: Leaving directory `/usr/source/openssl-0.9.8-stable-SNAP-20080918-fips/test' gmake: *** [tests] Error 2 If your question is whether SSLv3 should be prohibited in FIPS mode, the answer is yes. SSLv3's use of MD5 is not acceptable under FIPS rules. And for more