Re: Windows Installation of OpenSSL

2012-05-12 Thread John
Thomas J. Hruska shineli...@shininglightpro.com wrote in message news:4fadc0d5.1090...@shininglightpro.com... On 5/11/2012 9:00 AM, John wrote: Hello. When using the Win32 OpenSSL v1.0.1c 16Mb Installer from here http://slproweb.com/products/Win32OpenSSL.html, I am given the option ner the

FIPS build questions

2012-05-12 Thread Bill Reister
Hi all, noobie here. No experience with Linux compiling, and having some issues trying to get a validated FIPS compatible build. Using Ubuntu 12.04, fresh install. By default it already has GNU C and GPG installed, that part all worked fine. I followed the instructions verbatim from the

SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Andy GOKTAS
Hello, We have the following in our certificate: CN = *.env.domain.com SubjectAltName: DNS=*.env.domain.com DNS=*.env Reason: We want to have users use the short name w/o getting the certificate warning prompt. Of course it works just fine with the FQDN, but we still get this error when

Re: SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Hanno Böck
On Fri, 11 May 2012 12:21:10 -0700 Andy GOKTAS andy.gok...@state.or.us wrote: We have the following in our certificate: CN = *.env.domain.com SubjectAltName: DNS=*.env.domain.com DNS=*.env Reason: We want to have users use the short name w/o getting the certificate warning prompt.

RE: Looking for (easy) help.

2012-05-12 Thread Marek . Marcola
Hello, Do not pad with spaces, look at: http://en.wikipedia.org/wiki/Padding_%28cryptography%29 Best regards, -- Marek Marcola marek.marc...@malkom.pl owner-openssl-us...@openssl.org wrote on 05/11/2012 11:08:52 PM: scott...@csweber.com Sent by: owner-openssl-us...@openssl.org

Re: Programming with OpenSSL in different operation systems

2012-05-12 Thread Vladimir Belov
Do you mean an application which calls OpenSSL, or OpenSSL itself? I mean an application – “Programming with OpenSSL”. If you mean your client program, opensslconf.h is among the .h files copied to the installed include directory, so you can #include it if you want. But your program shouldn't

Re: FIPS build questions

2012-05-12 Thread Simon Convey
Hi Bill, Try the following recipe.. 1) Clean your system. By default, openssl installs to /usr/local/ssl, and you existing Ubuntu install will be in /usr, so you are safe to rm -rf /usr/local/ssl 2) get http://www.openssl.org/source/openssl-1.0.1c.tar.gz 3) get

Re: FIPS build questions

2012-05-12 Thread Dr. Stephen Henson
On Sat, May 12, 2012, Simon Convey wrote: Hi Bill, Try the following recipe.. 1) Clean your system. By default, openssl installs to /usr/local/ssl, and you existing Ubuntu install will be in /usr, so you are safe to rm -rf /usr/local/ssl 2) get

Re: FIPS build questions

2012-05-12 Thread Dr. Stephen Henson
On Fri, May 11, 2012, Bill Reister wrote: Hi all, noobie here. No experience with Linux compiling, and having some issues trying to get a validated FIPS compatible build. Using Ubuntu 12.04, fresh install. By default it already has GNU C and GPG installed, that part all worked fine.

applink.c, OPENSSL_Applink, small C snippet

2012-05-12 Thread Vladimir Belov
As I understand from FAQ, this small snippet is needed only if I mixing compilers for OpenSSL compilation and compilation of my application. But if I use the same compiler and the same compiler options for OpenSSL compilation and compilation of my application I don't need this one. Am I right

Re: SubjectAltName in a wildcard certificate - is this possible?

2012-05-12 Thread Kyle Hamilton
On Fri, May 11, 2012 at 12:21 PM, Andy GOKTAS andy.gok...@state.or.us wrote: Is this some limitation of wildcard certificates?  If so, is there a reference online somewhere that I'm able to read about this? RFC2459/3280/5280, also known as PKIX. In addition, there's RFC 2818 (HTTP over

Generating random keys/data on Windows

2012-05-12 Thread Web Developer
Hey guys, I need to generate random data (for keys, IVs etc.) but I can't seem to find the right way to do it. Here is the background - I am developing my server in c/c++ on windows using visual studio and am using the openssl1.0.1c library. I was reading the documentation for random data

no-store(OPENSSL_NO_STORE) experimental option

2012-05-12 Thread Vladimir Belov
Hello. I see a new experimental option that turn on by default in Configure: no-store What does it mean?

Multi-threaded applications, locking_function, threadid_func, dynamic locks

2012-05-12 Thread Vladimir Belov
Hello. 1) If I will use each OpenSSL object only by one thread at the moment, it can be different thread each time but never two or more threads will use one object simultaneously do I need to use locking_function and threadid_func or no? 2) Performance of dynamic locks in comparison with