Re: winsock.h inclusion in dtls1.h

2012-10-16 Thread YUN GAO
Thank you! It works. I added the code at the beginning of my source, it can be compiled then. I just wonder if this code can be added into the openssl/ssl.h G.Y On Sat, Oct 13, 2012 at 4:42 PM, Vladimir Belov vladimbe...@gmail.com wrote: Hi. Just do: #ifdef _WIN32 #define NOCRYPT #include

RE: Firefox unhappy with my self signed Cert

2012-10-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole Sent: Friday, 12 October, 2012 11:51 As some additional info, I am suspecting this may be an issue with my config file. I am using the same config file I used to set up my certificate authority, which has under [ req ] a

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Any other comments on the actual issue here? I don't believe the inconsistency is the expected way the API should work. Thanks, -AJ - Original Message - From: AJ aunt.joma...@yahoo.com To: openssl-users@openssl.org openssl-users@openssl.org Cc: Sent: Friday, October 12, 2012 7:14 PM

Building an exportable OpenSSL application

2012-10-16 Thread Charles Mills
I have a Windows-only OpenSSL application developed in VS 2010. I have now been tasked with creating parallel regular and exportable (from the US) distributions of the application. I UNDERSTAND YOU CAN'T GIVE LEGAL ADVICE. I'M ONLY LOOKING FOR TECHNICAL INPUT HERE. The application statically

Re: Building an exportable OpenSSL application

2012-10-16 Thread Jeffrey Walton
On Tue, Oct 16, 2012 at 10:25 AM, Charles Mills charl...@mcn.org wrote: I have a Windows-only OpenSSL application developed in VS 2010. I have now been tasked with creating parallel regular and exportable (from the US) distributions of the application. There's no need for two versions. Its all

Re: Building an exportable OpenSSL application

2012-10-16 Thread Thomas J. Hruska
On 10/16/2012 7:25 AM, Charles Mills wrote: I have a Windows-only OpenSSL application developed in VS 2010. I have now been tasked with creating parallel regular and exportable (from the US) distributions of the application. I UNDERSTAND YOU CAN'T GIVE LEGAL ADVICE. I'M ONLY LOOKING FOR

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread Dr. Stephen Henson
On Tue, Oct 16, 2012, AJ wrote: Any other comments on the actual issue here? I don't believe the inconsistency is the expected way the API should work. It's a bug. The fix was applied to non-validated versions of OpenSSL but was too late to be included in the last validation. Steve. -- Dr

RE: Building an exportable OpenSSL application

2012-10-16 Thread Charles Mills
If you are linking to OpenSSL DLLs, then your application isn't statically linked against OpenSSL. .lib files can simply be references to exports in .dll files. This is an important point. Can we be absolutely clear? My picture of how this works is that the .lib files contain small stubs so

Re: Inconsistent behavior between FIPS and non-FIPS AES

2012-10-16 Thread AJ
Steve, Thank you for the confirmation. It would be useful to put known issues exceptions in the Users Guide, particularly for the FIPS validated versions, as they have such long cycles between when they will be revalidated. Thanks, -AJ - Original Message - From: Dr. Stephen Henson

Re: FIPS seed_pid issue

2012-10-16 Thread Kumar Ghanta
Can somebody please respond to my question? OpenSSH is aborting if 1.1 fips module is used.Here my question is whether we need to comment this logic(by compiling with GETPID_IS_MEANINGLESS) or we need to generate seed again for child process. I want to know under what circumstances we can build

RE: Generating rsakey using openssl as lib

2012-10-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Leonardo Laface de Almeida Sent: Monday, 15 October, 2012 15:14 I was following the main function in genpkey.c file and following the same sequence for generating key pair. I've got some executing erros that took me some hours to get it.

RES: Generating rsakey using openssl as lib

2012-10-16 Thread Leonardo Laface de Almeida
Hi, Dave. The answers are bellow. I was following the main function in genpkey.c file and following the same sequence for generating key pair. I've got some executing erros that took me some hours to get it. I still have the problem and I think it might be some errors in openssl libs.

Re: FIPS seed_pid issue

2012-10-16 Thread Dr. Stephen Henson
On Sun, Oct 14, 2012, Kumar Ghanta wrote: Thank you very much for the quick response Stephen. Is it fine if we allow parent and child processes to share the same seed? I just want to know if there are any NIST restrictions. If possible, can you please elaborate on how does openssl takes care

RE: Building an exportable OpenSSL application

2012-10-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills Sent: Tuesday, 16 October, 2012 11:41 If you are linking to OpenSSL DLLs, then your application isn't statically linked against OpenSSL. .lib files can simply be references to exports in .dll files. This is an