Cross-Compile openssl-0.9.8j with zlib-dynamic Option give Error

2012-10-05 Thread ashish yadav
Hi , I am cross-compiling openssl-0.9.8j with zlib-dynamic Option. The Options are : ./Configure zlib-dynamic shared threads no-dso no-krb5 Now , I am getting following Error Message : c_zlib.c: In function 'COMP_zlib': c_zlib.c:402: error: too few arguments to function

Re: seed/$RANDFILE confusion

2012-10-05 Thread int0x80
On computers that don't have a good /dev/*random, the randomness used by OpenSSL comes only from things happening on the computer during the few moments when the openssl tool is running. To gather up more randomness, the openssl tool tries to accumulate randomness over multiple runs as

Re: Non-Blocking and ENGINE

2012-10-05 Thread Dirk Menstermann
Thank you Stephen. On 04.10.2012 17:34, Dr. Stephen Henson wrote: On Tue, Oct 02, 2012, Dirk Menstermann wrote: Hello list, is there a way to use ENGINEs in a non-blocking way - meaning for a network operation (remote HSM) the thread can do something else instead of waiting for the IO

Re: seed/$RANDFILE confusion

2012-10-05 Thread Jakob Bohm
On 10/5/2012 9:54 AM, int0...@safe-mail.net wrote: On computers that don't have a good /dev/*random, the randomness used by OpenSSL comes only from things happening on the computer during the few moments when the openssl tool is running. To gather up more randomness, the openssl tool tries

RE: Documentation for TXT_DB errors?

2012-10-05 Thread Charles Mills
I hear you (whoever you are!). It's a playpen CA. I'm a software developer. These certificates will never be allowed out into the wild. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of lists Sent: Thursday, October

openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO Hi, We used to have the openssl 0.9.8k at Windows 2003 server, at \bin\openssl.exe to run the command line. As the new release openssl 1.0.1c, can we apply the new openssl at Windows 2003 server? I cannot find the openssl.exe but instead openssl.c

OpenSSL running on Windows XP/2003/7

2012-10-05 Thread engineermike
Hello, I've been asked to create a certificate following a video that was made with step by step instructions. The video is using OpenSSL on a windows machine. I can't seem to locate the program for a windows machine. Can someone send me a link to the version of the program that will run on

RE: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread Charles Mills
http://www.openssl.org/related/binaries.html Charles From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of engineermike Sent: Friday, October 05, 2012 9:37 AM To: openssl-users@openssl.org Subject: OpenSSL running on Windows XP/2003/7 Hello, I've

Re: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread carlyoung
http://slproweb.com/products/Win32OpenSSL.html [1] On Fri 05/10/12 2:37 PM , engineermike engineerm...@mindspring.com sent: HELLO, Links: -- [1] http://slproweb.com/products/Win32OpenSSL.html

Re: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Mauricio Tavares
On Fri, Oct 5, 2012 at 9:16 AM, Hu, Yingwoei CIV USARMY ARDEC (US) yingwoei.hu@mail.mil wrote: Classification: UNCLASSIFIED Caveats: FOUO Hi, We used to have the openssl 0.9.8k at Windows 2003 server, at \bin\openssl.exe to run the command line. As the new release openssl 1.0.1c, can

RE: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO I don't have a chance to run Win32OpenSSL-1_0_1c.exe now. Can someone provide what's the steps I need to do after run Win32OpenSSL-1_0_1c.exe? (Basically I would run openssl command line at 1.0.1c version.) Thanks..Simon -Original Message-

Re: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Jakob Bohm
Running that file will install openssl.exe and all the related files at a location of your choosing, with openssl.exe in a bin subdirectory of whatever you choose when running Win32OpenSSL-1_0_1c.exe (or later). For example, if you choose C:\Program Files (x86)\OpenSSL, the next step is

RE: openssl 1.0.1c at Windows 2003 server (UNCLASSIFIED)

2012-10-05 Thread Hu, Yingwoei CIV USARMY ARDEC (US)
Classification: UNCLASSIFIED Caveats: FOUO Great, thanks all for Win32OpenSSL-1_0_1c.exe installation. Simon -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jakob Bohm Sent: Friday, October 05, 2012 10:44 AM To:

re: how to extract O= and OU= from a subject cert

2012-10-05 Thread mclellan, dave
Got it. thanks very much. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of lists Sent: Thursday, October 04, 2012 12:01 PM To: openssl-users@openssl.org Subject: We know how to extract the subject and issuer from a cert

RE: how to extract O= and OU= from a subject cert

2012-10-05 Thread mclellan, dave
Thank you Dr. Henson. Got it. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Thursday, October 04, 2012 12:22 PM To: openssl-users@openssl.org Subject: Re: how to extract O= and OU= from a subject

How to store multiple signatures in a file

2012-10-05 Thread Henrik Grindal Bakken
Hi. I have a list of (RSA) signatures made on the same digest, and I'd like to store them in a single file. A simple solution is obviously to e.g. store the length of sig0 (32 bits, network byte order) first, then sig0, then l(sig1), then sig1, etc., but I was wondering if there was a standard

FIPS-compliant OpenSSL on Android

2012-10-05 Thread Jason D. Knight (FTL-ENG)
Hello. Here's my question in a nutshell: I would like to use OpenSSL in FIPS mode from an Android app. I know that I can use the NDK to build a native shared library (.so), and use JNI to load and call into that library from the Java app. Is it possible to enter FIPS mode with that

RE: OpenSSL running on Windows XP/2003/7

2012-10-05 Thread Jeremy Farrell
What methods did you try? Googling for openssl windows brings up a variety of information and download pages as the first six hits, all of them directly relevant to what you want. Regards, jjf From: engineermike

RE: FIPS-compliant OpenSSL on Android

2012-10-05 Thread Jason D. Knight (FTL-ENG)
P.S. We are targeting Android 3.0 on ARMv7, and Android 4.0 on ARMv7. Thank you. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jason D. Knight (FTL-ENG) Sent: Friday, October 05, 2012 2:21 PM To:

RE: How to store multiple signatures in a file

2012-10-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Henrik Grindal Bakken Sent: Friday, 05 October, 2012 03:47 Hi. I have a list of (RSA) signatures made on the same digest, and I'd like to store them in a single file. A simple solution is obviously to e.g. store the length of sig0 (32

RE: Where is the string SSL23_GET_SERVER_HELLO generated?

2012-10-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Dongcai Shen / Xiaoli Shen Sent: Thursday, 04 October, 2012 04:57 I am a newbie of using openssl and would like to seek help from you. Thank you very much. A common error message printed out by openssl is: 140770FC:SSL

Re: seed/$RANDFILE confusion

2012-10-05 Thread Jeffrey Walton
On Fri, Oct 5, 2012 at 6:42 AM, Jakob Bohm jb-open...@wisemo.com wrote: On 10/5/2012 9:54 AM, int0...@safe-mail.net wrote: On computers that don't have a good /dev/*random, the randomness used by OpenSSL comes only from things happening on the computer during the few moments when the