Re: [openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-04 Thread Marcus Meissner
On Fri, Nov 04, 2016 at 10:03:21AM +0530, Akshar Kanak wrote: > Dear team > as per the documnet http://csrc.nist.gov/groups/ > STM/cmvp/documents/fips140-2/FIPS1402IG.pdf > page 150 , Its mentioned > The implementation of the nonce_explicit management logic inside the > module shall

[openssl-users] Does the OpenSSL site has translation for error codes: Error code is: 12

2016-11-04 Thread Rangari, Sahil (Sahil)
Hi, I have been looking for a description of what certain error codes mean on the OpenSSL site, but could not found any. Earlier there used to be page for the error codes. I would like to know what exactly this error means: @20160901 11:09:17.372 #9768[.\emspopclient.cpp@960]

Re: [openssl-users] Does the OpenSSL site has translation for error codes: Error code is: 12

2016-11-04 Thread Jakob Bohm
On 04/11/2016 07:53, Rangari, Sahil (Sahil) wrote: Hi, I have been looking for a description of what certain error codes mean on the OpenSSL site, but could not found any. Earlier there used to be page for the error codes. I would like to know what exactly this error means: @20160901

Re: [openssl-users] [FIPS compliance] ssl reneg when counter overflows(AES_GCM)

2016-11-04 Thread Jakob Bohm
On 04/11/2016 09:26, Marcus Meissner wrote: On Fri, Nov 04, 2016 at 10:03:21AM +0530, Akshar Kanak wrote: Dear team as per the documnet http://csrc.nist.gov/groups/ STM/cmvp/documents/fips140-2/FIPS1402IG.pdf page 150 , Its mentioned The implementation of the nonce_explicit

Re: [openssl-users] [openssl-dev] After building 1.0.2h , ldd output shows current version as 1.0.0. How to CHange this , Why is this so ?

2016-11-04 Thread Kurt Roeckx
On Thu, Nov 03, 2016 at 01:53:56PM +0100, Richard Levitte wrote: > Hi, > > I'm curious. Why exactly do you want to change the shared library > version? I had to change the soname in Debian (because I dropped all SSLv2 and SSLv3 symbols) and changed it to 1.0.2. Kurt -- openssl-users

[openssl-users] X25519 not listed in ecparam -list_curves

2016-11-04 Thread Viktor Jägersküpper
Hi, OpenSSL 1.1.0 implemented X25519. "openssl s_client -cipher kEECDH -curves X25519 -connect google.com:443" works as expected, and I get "Server Temp Key: X25519, 253 bits". But X25519 is not listed in the output of "openssl ecparam -list_curves" in version 1.1.0b (I use 1.1.0b-2 from Debian).