Re: (solved) valgrind complaints about my network data receive

2008-03-14 Thread Darryl Miles
Bobby Krupczak wrote: 1) In bn_rand.c add at line 141: memset(buf, 0, bytes); =20 buf = (unsigned char *)OPENSSL_malloc(bytes); if (buf == NULL) { BNerr(BN_F_BNRAND,ERR_R_MALLOC_FAILURE); goto err; } memset(buf, 0, bytes); 2) bn_mont.c: Initialize

RE: crypto library in openssl

2008-03-14 Thread Xu, Qiang (FXSGSC)
-Original Message- From: Richard Levitte [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 PM To: openssl-users@openssl.org; Xu, Qiang (FXSGSC) Subject: Re: crypto library in openssl You're doing three mistakes: 1. you're assuming the EVP routines treat your data as

Re: openssl-0.9.8g on Solaris core dumps?

2008-03-14 Thread amy.rich
I'm curious is anyone has solved the problem that Jorgen Lundman posted about last year. I too have run into the issue where openssl builds when forced to 32 bit mode, but then just core dumps. The thread I'm referencing is here:

OpenSSL OCSP error

2008-03-14 Thread Henk van der Weerdt
Dear Openssl developer, At the moment i have some problems with the OCSP function. I'm getting a Error querying OCSP responsder Error message: C:\OpenSSL\binOpenSSL ocsp -url http://ocsp.openvalidation.org -issuer RootCAce rt.pem -VAfile OCSPServer.pem -cert User.pem Error querying OCSP

RE: crypto library in openssl

2008-03-14 Thread Xu, Qiang (FXSGSC)
-Original Message- From: Richard Levitte [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 PM To: openssl-users@openssl.org; Xu, Qiang (FXSGSC) Subject: Re: crypto library in openssl Note: openssl-dev is inappropriate, as it is meant for the _development_ _of_ OpenSSL.

What are the proper flags for Endianness and 32Bit

2008-03-14 Thread Embedded
I'm compiling for a 32Bit embedded environment and am working modifying the Makefile to successfully compile. I've run into a couple of errors regarding endianness and 64bit types. 1. I'm using -DL_ENDIAN as a CFLAG but run into an error when including ieeefp.h. Can someone explain the proper

X0509_free undefined when linking static library to shared object

2008-03-14 Thread Gene Kligerman
Hi folks, I googled the web, but couldn't find anything relevant, so hoping that e-mailing the gurus on this list can help: Running on x64 Linux box. I am trying to link the static OpenSSL library with my application .so shared library. Here are the gcc link options that I am using: --- gcc

MAC

2008-03-14 Thread Main, James J Civ USAF AMC DET 3 AMCAOS/DOHJ
Is there a driver available for MAC using ActivClient CAC 6.1? If so where is it available. Thanks Jim Main C-130JMATS Simcert/QA Detachment 3, AMCAOS 626 Sixth St. Little Rock AFB AR, 72099 DSN 731-6606Comm. 501-987-6606 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED]

Re: OpenSSL FIPS 1.1.2 on Windows

2008-03-14 Thread Dr. Stephen Henson
On Fri, Mar 14, 2008, Sisyphus wrote: Rather than digging, I opted for simply linking to my openssl-0.9.8g (static) libcrypto.a by entering the 'test' directory and running: You can't modify the build process in any way or it violates the security policy and the resulting library is not

Re: OpenSSL FIPS 1.1.2 on Windows

2008-03-14 Thread Dr. Stephen Henson
On Thu, Mar 13, 2008, Scholl, Ben M. wrote: Steve, I followed your procedure, and this time it actually looks like it worked. I am confused at what I need to do now to use this build. I ran this command: ~\apps\openssl version It returned: OpenSSL 0.9.7j-fips-dev XX xxx Is this

Re: openssl-0.9.8g on Solaris core dumps?

2008-03-14 Thread Bobby Krupczak
Hi! I'm curious is anyone has solved the problem that Jorgen Lundman posted about last year. I too have run into the issue where openssl builds when forced to 32 bit mode, but then just core dumps. The thread I'm referencing is here:

Re: (solved) valgrind complaints about my network data receive

2008-03-14 Thread Bobby Krupczak
Hi! Bobby Krupczak wrote: 1) In bn_rand.c add at line 141: memset(buf, 0, bytes); =20 buf = (unsigned char *)OPENSSL_malloc(bytes); if (buf == NULL) { BNerr(BN_F_BNRAND,ERR_R_MALLOC_FAILURE); goto err; } memset(buf, 0, bytes); 2) bn_mont.c:

RE: crypto library in openssl

2008-03-14 Thread Xu, Qiang (FXSGSC)
-Original Message- From: Richard Levitte [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 7:21 PM To: openssl-users@openssl.org; Xu, Qiang (FXSGSC) Subject: Re: crypto library in openssl You're doing three mistakes: 1. you're assuming the EVP routines treat your data as

Re: OpenSSL FIPS 1.1.2 on Windows

2008-03-14 Thread Sisyphus
- Original Message - From: Dr. Stephen Henson [EMAIL PROTECTED] To: openssl-users@openssl.org Sent: Friday, March 14, 2008 10:09 PM Subject: Re: OpenSSL FIPS 1.1.2 on Windows On Fri, Mar 14, 2008, Sisyphus wrote: Rather than digging, I opted for simply linking to my

RE: OpenSSL FIPS 1.1.2 on Windows

2008-03-14 Thread Scholl, Ben M.
Steve, Just to be clear, I can use this file, ~\app\openssl, to generate a key and certificate request that will be FIPS compliant? How can I tell Tomcat to use this built version of OpenSSL as the SSLEngine? Thank you, Ben M. Scholl Ennovex Solutions, Inc. Software Engineer DoD PKE

Re: OpenSSL FIPS 1.1.2 on Windows

2008-03-14 Thread Dr. Stephen Henson
On Fri, Mar 14, 2008, Sisyphus wrote: On Fri, Mar 14, 2008, Sisyphus wrote: Rather than digging, I opted for simply linking to my openssl-0.9.8g (static) libcrypto.a by entering the 'test' directory and running: You can't modify the build process in any way or it violates the security

Accessing encrypted messages after cert expires

2008-03-14 Thread Mick
Hi All, I am not sure what happens under the following scenario. I use an SSL certificate (e.g. from CaCert.org) to encrypt and sign a file and or an email message. Later on the certificate expires. I renew the certificate, load it up on my browser/mail client. Can I then use my mail

Re: Accessing encrypted messages after cert expires

2008-03-14 Thread Patrick Patterson
Hi Mick: On Friday 14 March 2008 16:43:28 Mick wrote: Hi All, I am not sure what happens under the following scenario. I use an SSL certificate (e.g. from CaCert.org) to encrypt and sign a file and or an email message. Later on the certificate expires. I renew the certificate, load it up

Re: Accessing encrypted messages after cert expires

2008-03-14 Thread Mick
On Friday 14 March 2008, Patrick Patterson wrote: Hi Mick: On Friday 14 March 2008 16:43:28 Mick wrote: Hi All, I am not sure what happens under the following scenario. I use an SSL certificate (e.g. from CaCert.org) to encrypt and sign a file and or an email message. Later on the