Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

2015-07-16 Thread Misaki Miyashita
Hi Aaron, SPARC T4 engine is an engine developed and provided by Oracle Solaris, and therefore, it is available through Oracle Solaris. If you would like to take advantage of the SPARC T4 processors and you would like to build your own OpenSSL, OpenSSL 1.0.2 will have an inlined SPARC T4

[openssl-users] Disable EXPORT cipher suites during compilation

2015-07-16 Thread pratyush parimal
Hi everyone, I am trying to disable the EXPORT ciphers in my OpenSSL code, during compile-time. I'm able to do so at runtime by including '!EXP' in the string I use with SSL_CTX_set_cipher_list(). However, I'm wondering is there an option (like 'no-rc5') that I can pass to Configure?

[openssl-users] Loading pkcs11 engine opensc without using command line

2015-07-16 Thread Anirudh Raghunath
Hello, I want to write a program in which I can load a certificate from a smartcard instead of having it in a file on the client machine. In order to do so I will be using the opensc's engine_pkcs11 module. The module works fine using the shell but I want to implement it as an independent

[openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158)

2015-07-16 Thread Jayalakshmi bhat
Hi All, I am using OpenSSL library for a SSL client performing mutual authentication. RSA certificate used is signed with SHA512 digest. When I switch to FIPS mode and perform re-authentication, I am hitting an error :0409A09E:lib(4):func(154):reason(158). Cipher used is AES128-SHA. Can any one

Re: [openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158)

2015-07-16 Thread Dr. Stephen Henson
On Thu, Jul 16, 2015, Jayalakshmi bhat wrote: Hi All, I am using OpenSSL library for a SSL client performing mutual authentication. RSA certificate used is signed with SHA512 digest. When I switch to FIPS mode and perform re-authentication, I am hitting an error

Re: [openssl-users] Loading pkcs11 engine opensc without using command line

2015-07-16 Thread Dr. Stephen Henson
On Thu, Jul 16, 2015, Anirudh Raghunath wrote: Hello, I want to write a program in which I can load a certificate from a smartcard instead of having it in a file on the client machine. In order to do so I will be using the opensc's engine_pkcs11 module. The module works fine using the