Re: where is the memory being held

2010-09-27 Thread zhu qun-ying
Does it mean that it is hard to change the behavior? -- qun-ying --- On Fri, 9/24/10, David Schwartz dav...@webmaster.com wrote: Sounds like OpenSSL wasn't what you wanted. OpenSSL is intended for use on general-purpose computers with virtual memory. It is not designed to return virtual

SHA1 Message Digest Getting Generated less than 160 Bits i.e. 152 bits.

2010-09-27 Thread Kedar Sabnis
HI, I am an openSSL User. We implemented SHA1 algorithm. Here in some specific case SHA1 digest is coming as 152 bits long instead of 160 bits long. Please suggest if any bug fix is there for this issue. Thanking you in anticipation. Thanks Regards, Kedar Anilrao Sabnis Tata Consultancy

Re: SHA1 Message Digest Getting Generated less than 160 Bits i.e. 152 bits.

2010-09-27 Thread Dongsheng Song
On Sat, Sep 25, 2010 at 21:09, Kedar Sabnis kedar.sab...@tcs.com wrote: HI, I am an openSSL User. We implemented SHA1 algorithm. Here in some specific case SHA1 digest is coming as 152 bits long instead of 160 bits long. Please suggest if any bug fix is there for this issue. Thanking

Re: [openssl-users] RE: Creating Extended Validation SSL Certificates

2010-09-27 Thread Erwann ABALEA
Bonjour, Hodie V Kal. Oct. MMX, Gumbie scripsit: I apologize to all for not looking into this more, before asking. It isn't just a matter of adding the proper extensions. The various browser software actually has the corporate policy OID hard coded into the browser code. At first

Re: SHA1 Message Digest Getting Generated less than 160 Bits i.e. 152 bits.

2010-09-27 Thread Jean-Marc Desperrier
Kedar Sabnis wrote: in some specific case SHA1 digest is coming as 152 bits long instead of 160 bits long. All possible 160 bits values have the same chance of being the output of a SHA1 digest, *including* those that comprise long strings of all zeros or all ones. This mean that,

Re: FIPS PowerOn self test

2010-09-27 Thread Dr. Stephen Henson
On Sat, Sep 25, 2010, Vivek Madani wrote: Hi, What are the conditions when power-on self tests may fail. We have an application using OpenSSL in FIPS mode and the power on self test has always succeeded. However, today on one of the virtual machines the test failed. What could have

Re: FIPS PowerOn self test

2010-09-27 Thread Vivek Madani
On Mon, Sep 27, 2010 at 6:10 PM, Dr. Stephen Henson st...@openssl.org wrote: On Sat, Sep 25, 2010, Vivek Madani wrote: Hi, What are the conditions when power-on self tests may fail. We have an application using OpenSSL in FIPS mode and the power on self test has always succeeded. However,

Re: Signed Certificates and Revoking the Certs with CRLs

2010-09-27 Thread Tomas Gustavsson
Why no try the open source PKI book as a starter... http://ospkibook.sourceforge.net/docs/OSPKI-2.4.7/OSPKI-html/ospki-book.htm Cheers, Tomas On 09/24/2010 10:13 PM, Hasan Rezaul-CHR010 wrote: Hi All, Would anyone kindly point me to literature that CLEARLY explains exactly how:

Legal use OpenSSL / cryptography

2010-09-27 Thread TS
Hi, I'm from and live in Denmark. I make and sell a program (shareware, not someone making me rich mind you) which has a website crawler. I use Indy HTTP library for HTTP communication. ... However, I would like to use OpenSSL with Indy for https: If I allow my users to download OpenSSL

Re: how to use ecdsa-with-sha2 algorithm with ecdsa signature algorithm

2010-09-27 Thread adkelkar
Hi Rajan, Bad stuck at the ecdsa with sha256 and sha384 cert and key generation. Have really short deadlines. Tried hunting lots Finally found this but didnt see any reply to your query. Hope you got your answer.. Can you please help me in generating this cert and key? Regards, -Amol

Re: LNK4078 and LNK4210 linking with x64 static libs

2010-09-27 Thread per frykenvall
Hi, again, Could anybody with insight in the OPENSSL_cpuid_setup have a look at this issue? What is the impact when it doesn't get called on win x64? Does the section need some flag? I haven't found any resolution to the problem. Best regards, Per Frykenvall Jakob Bohm wrote: Actually,

Error signing certificates with my own CA... Configuration file?

2010-09-27 Thread Chris Rider
I've found the alternative to self-signing (namely signing with your own CA) to be a potentially great path for the web application that we develop; however I can't quite figure out how exactly to tweak the configuration file to get what I want. It is hard (impossible?) to find any detailed

Re: Does OpenSSL have any plans of supporting SSL_read / SSL_write on the same SSL_S from multiple threads?

2010-09-27 Thread David Schwartz
On 9/25/2010 9:31 AM, Jayaraghavendran k wrote: (a) Does OpenSSL plan to support this feature in any of it's future releases? (Or does any of the releases already support it? I went through the Change Logs, but couldn't find anything), If no, why not? I can't answer whether there are any

Re: where is the memory being held

2010-09-27 Thread David Schwartz
On 9/26/2010 11:14 PM, zhu qun-ying wrote: Does it mean that it is hard to change the behavior? Yes, because it's not implemented in any one particular place. It's a fundamental design assumption throughout OpenSSL that it's aimed at general-purpose computers with virtual memory subsystems.

RE: where is the memory being held

2010-09-27 Thread Scott Neugroschl
As David said, yes. On the other hand, you could re-implement malloc() and free() for your platform. From: owner-openssl-us...@openssl.org on behalf of zhu qun-ying Sent: Sun 9/26/2010 11:14 PM To: openssl-users@openssl.org Subject: Re: where is the memory

Re: FIPS PowerOn self test

2010-09-27 Thread Dr. Stephen Henson
On Mon, Sep 27, 2010, Vivek Madani wrote: On Mon, Sep 27, 2010 at 6:10 PM, Dr. Stephen Henson st...@openssl.org wrote: On Sat, Sep 25, 2010, Vivek Madani wrote: Hi, What are the conditions when power-on self tests may fail. We have an application using OpenSSL in FIPS mode and the

Re: FIPS PowerOn self test

2010-09-27 Thread Vivek Madani
Hi, What are the conditions when power-on self tests may fail. We have an application using OpenSSL in FIPS mode and the power on self test has always succeeded. However, today on one of the virtual machines the test failed. What could have possibly lead to this failure? Any ideas?

Re: FIPS PowerOn self test

2010-09-27 Thread Vivek Madani
Clipped earlier communication What OS is this running on? That error can be caused by a DLL being loaded to an address that is already in use under Windows and relocation would invalidate the signature. You can work around that by specifying an alternative load address when the DLL is

Re: FIPS PowerOn self test

2010-09-27 Thread Vivek Madani
Clipped earlier communication What OS is this running on? That error can be caused by a DLL being loaded to an address that is already in use under Windows and relocation would invalidate the signature. You can work around that by specifying an alternative load address when the DLL is

[PATCH] to fix compilation issues of openssl v100a for WCE 420/WM5/WM6 target platform

2010-09-27 Thread Pierre DELAAGE
Dear All, I am a contributor to the WCE port of stunnel, using intensively openssl. I have recently completed the port of stunnel v434 to WCE platform, and needed a refreshed version of openssl for that target. I have recompiled openssl v100a with MS EVC4 sp4 free compiler, MS WCE420 SDK and