OpenSSL 1.0.1 released

2012-03-14 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.1 released === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.0.1 of our open source

OpenSSL FIPS Object Module status update

2012-03-14 Thread Steve Marquess
I've received a number of queries about the reference in the recently released OpenSSL 1.0.1 to Preliminary FIPS capability for unvalidated 2.0 FIPS module. OpenSSL 1.0.1 is designed to support use of that FIPS 140-2 cryptographic module to provide a FIPS compatible API. However, the formal

Re: OpenSSL - CryptoAPI - nCipher

2012-03-14 Thread Sunjeet Singh
8. Now, I want to load the certificate into the same SSL Context. At first I tried using the simple- ENGINE_load_ssl_client_cert() on the certificate file generated earlier, but that failed. I can understand why- the certificate is encrypted (self-signed).

Re: OpenSSL - CryptoAPI - nCipher

2012-03-14 Thread Dr. Stephen Henson
On Wed, Mar 14, 2012, Sunjeet Singh wrote: 8. Now, I want to load the certificate into the same SSL Context. At first I tried using the simple- ENGINE_load_ssl_client_cert() on the certificate file generated earlier, but that failed. I can understand why- the

Re: OpenSSL 1.0.1 released

2012-03-14 Thread Mike Frysinger
On Wednesday 14 March 2012 11:09:22 OpenSSL wrote: OpenSSL version 1.0.1 released === http://www.openssl.org/source/exp/CHANGES. The most significant changes are: o TLS/DTLS heartbeat support. o SCTP support. o RFC 5705 TLS

x509_load_crl_file using unicode paths

2012-03-14 Thread JonathonS
Hi, I am currently using openssl on multilingual platforms and I've come across an interesting issue. I am using the function x509_load_crl_file which takes in a path and I've noticed that this call essentially becomes a call to fopen. For unicode paths (utf8 or utf16), the function call fails.

Re: OpenSSL - CryptoAPI - nCipher

2012-03-14 Thread Sunjeet Singh
The it is probably DER format. Use d2i_X509_fp instead and make sure you open the fp in binary mode. Steve. Yes, indeed. It worked! Thanks again for your quick reply. Sunjeet __ OpenSSL Project