RE: UAC related errors on windows 7 64-bit with Application Verifier

Thanks a lot for the solution. Worked like a charm. Commented out the following lines of code in RAND_poll(): /*if (netstatget(NULL, LLanmanWorkstation, 0, 0, outbuf) == 0) { RAND_add(outbuf, sizeof(STAT_WORKSTATION_0), 45);

Re: Forcing an application to use SHA512

Hi, Just a more specific question. I am trying to locate a CipherSuite that could use SHA512. But I dont see any such suites. Currently I am using AES128-SHA but I wanted to use AES128-SHA512 going forward. Does that mean that SHA512 has not been made part of TLS CipherSuites? On 4 February

Re: Forcing an application to use SHA512

Guessing that there are no Defined ciphersuite for this Search for There is no defined cipher suite that uses SHA-512 at [1]. Again, I am also very new to SSL programming and this mail might not be perfect. Let us try to see few more doc [1]

Is CertificateVerify checked when cert_verify_callback is overriden?

Hello list, on the server-side I want to verify manually the certificate that the client sent, thus I am using SSL_CTX_set_cert_verify_callback() to a callback that always does return 1, and I run all custom checks later. Is the CertificateVerify message sent from client to server still

Engine: finish method for RSA engine is never called

Hi, I'm trying to use an engine to compute the private and public key for RSA. However the finish method of my implemented structure is never called. I use SSL_connect() function with ssl_v3 static RSA_METHOD raw_rsa ={ RAW RSA method, pub_enc, pub_dec, priv_enc,

Re: Engine: finish method for RSA engine is never called

On Tue, Feb 04, 2014, TheMoud wrote: Hi, I'm trying to use an engine to compute the private and public key for RSA. However the finish method of my implemented structure is never called. I use SSL_connect() function with ssl_v3 static RSA_METHOD raw_rsa ={ RAW RSA method,

Re: Forcing an application to use SHA512

On Tue, Feb 04, 2014, Gnanasekar R wrote: Hi, Just a more specific question. I am trying to locate a CipherSuite that could use SHA512. But I dont see any such suites. Currently I am using AES128-SHA but I wanted to use AES128-SHA512 going forward. Does that mean that SHA512 has not been

Re: Engine: finish method for RSA engine is never called

Well, I want to use the finish method to clean the context that I have allocated in priv_enc (rsa_priv_enc) method (allocated memory + opened file descriptor for ioctl (to communicate with my driver)). I expected that when calling SSL_free() method, I could access to the finish method, but it

Issue while configuring to create shared library

Hi, During the Cross-compilation of OpenSSL 1.0.0 with ECDH support, I have used the following configuration options   ./Configure dist shared threads -D_REENTRANT -mabi=64 -march=octeon2 -O3 -fomit-frame-pointer -lpthread enable-ec enable-ecdh But it says that, Configured for dist.   You gave the

Re: Engine: finish method for RSA engine is never called

On Tue, Feb 04, 2014, TheMoud wrote: Well, I want to use the finish method to clean the context that I have allocated in priv_enc (rsa_priv_enc) method (allocated memory + opened file descriptor for ioctl (to communicate with my driver)). I expected that when calling SSL_free() method, I

Re: Is CertificateVerify checked when cert_verify_callback is overriden?

On Tue, Feb 04, 2014, Dimitrios Apostolou wrote: Hello list, on the server-side I want to verify manually the certificate that the client sent, thus I am using SSL_CTX_set_cert_verify_callback() to a callback that always does return 1, and I run all custom checks later. Is the

Re: Is CertificateVerify checked when cert_verify_callback is overriden?

Thanks, this answers my question with great detail! On Tue, 4 Feb 2014, Dr. Stephen Henson wrote: On Tue, Feb 04, 2014, Dimitrios Apostolou wrote: Hello list, on the server-side I want to verify manually the certificate that the client sent, thus I am using SSL_CTX_set_cert_verify_callback()

Re: Engine: finish method for RSA engine is never called

Thank you for your response. You are right, I will free the context in the priv_enc method itself. Thank you for your clarification!! Regards TheMoud -- View this message in context: http://openssl.6102.n7.nabble.com/Engine-finish-method-for-RSA-engine-is-never-called-tp48408p48416.html Sent

The OpenSSL FIPS Object Module 2.0 and FIPS 186-4

If you don't know what FIPS 186-4 is then ignore this and count yourself lucky. I'm getting a lot of private queries about this issue and so want to put this statement in a public forum for reference. Effective Jan 1 some new FIPS 140-2 validation requirements were introduced. As is usually the