openssl in apache on windows

2009-04-21 Thread Tirtza Bernstein
Hello, I installed apache with openssl on windows. When I try to use openssl command line I get the following error Can't open config file /usr/local/ssl/openssl.cnf How do I change the location where it looks for the config file? Thanks

Re: openssl in apache on windows

2009-04-21 Thread Thomas J. Hruska
Tirtza Bernstein wrote: Hello, I installed apache with openssl on windows. When I try to use openssl command line I get the following error Can't open config file /usr/local/ssl/openssl.cnf How do I change the location where it looks for the config file? Thanks Set OPENSSL_CONF.

FIPS 140-2 compliance question

2009-04-21 Thread carlyoung
Hi all, I have an application that uses OpenSSL and AES 192-bit keys to encrypt data [files]. In it's original incarnation, it used PBKDF2 to derive the key. In its newer form, it uses a FIPS approved PRNG to generate a random key and the key is encrypted with a large RSA key for recovery. The

unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
Hi, I'm doing final testing of some code on a production server and I have one website/SSL certificate that is randomly failing when I try to verify the certificate. Some times it works, some times it doesn't, try it again a short while later and its fine. I don't know the technology on the web

hmac digest wrong?

2009-04-21 Thread Ronald Hatcher
Hi there - I'm trying to create an hmac digest which works OK from php as: $signature = hash_hmac('sha1', ronald , $apikey); However, I get a different digest using: echo ronald | openssl dgst -sha1 -hmac $apikey Is there something obvious I'm doing wrong here? BTW I'm using OpenSSL 0.9.7l

Re: hmac digest wrong?

2009-04-21 Thread Victor Duchovni
On Tue, Apr 21, 2009 at 04:36:34PM +0100, Ronald Hatcher wrote: Hi there - I'm trying to create an hmac digest which works OK from php as: $signature = hash_hmac('sha1', ronald , $apikey); However, I get a different digest using: echo ronald | openssl dgst -sha1 -hmac $apikey Is there

Re: hmac digest wrong?

2009-04-21 Thread Michael Sierchio
Ronald Hatcher wrote: Hi there - I'm trying to create an hmac digest which works OK from php as: $signature = hash_hmac('sha1', ronald , $apikey); However, I get a different digest using: echo ronald | openssl dgst -sha1 -hmac $apikey Is there something obvious I'm doing wrong

OpenSSL 1.0.0 beta 2 released

2009-04-21 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.0 Beta 2 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The second beta is now released. The beta release is available for

RE: Sha1 verify and load_verify_locations()?

2009-04-21 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of PVi1 Sent: Sunday, 19 April, 2009 13:12 i am trying to write application used for verifying digest signature of text files. I have used this command to create sign of file e.g. index.php: openssl dgst -sha1 -sign private_key.pem -out

RE: unable to get local issuer certificate

2009-04-21 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Duncan Berriman Sent: Tuesday, 21 April, 2009 10:18 I'm doing final testing of some code on a production server and I have one website/SSL certificate that is randomly failing when I try to verify the certificate. Some times it works,

Re: unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
To be clear, your program is the client (on 'production server') connecting to the 'web server'? Also to be sure, you're using software OpenSSL in your program, not one of the hardware 'engines'? yes I have reproduced this with openssl s_client SSL_get_verify_result is returning unable to