[openssl-users] FIPS 186-4 RSA CAVS

Dear All, I am working on doing CAVS algorithm testing for RSA, FIPS 186-4. Able to make up the 186-4 patches for RSA key generation from Fedora, SuSe patches. The new API to generate RSA key based on 186-4 is "fips_rsa_builtin_keygen". But I suspect if this has CAVS support as well. In the

[openssl-users] Openssl DTLS performance

Hi all, We are building VPN using OpenSSL 1.1.0e.  VPN can work with TLS and DTLS. The test server is Linux Ubuntu 16.04 and client windows 7/10.  We tested using dummy net with different parameters like  0.1/0.2 /.5% packet drop and 20 ms delay. In this scenario, DTLS shows marginal 5 to 7%

Re: [openssl-users] Ubuntu Xenial + Postgresql v9.5 == SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:

> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Graham Leggett > Sent: Wednesday, November 08, 2017 20:11 > To: openssl-users@openssl.org > Subject: [openssl-users] Ubuntu Xenial + Postgresql v9.5 == SSL > routines:ssl23_write:ssl handshake failure:s23_lib.c:177: >

[openssl-users] Ubuntu Xenial + Postgresql v9.5 == SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:

Hi all, I am having quite a time trying to get postgresql v9.5 to talk over SSL on Ubuntu Xenial, running openssl v1.0.1f. Previously my setup was Ubuntu Trusty, and this works fine. The questions I have based on the info below: - It is the openssl s_client side that is triggering the

Re: [openssl-users] Help compiling on HPUX

I can confirm that I can compile with no-asm. That’s a good thing. I cannot however get any level of optimizations to compile correctly. This may not be a problem for my use case, but it may be for others. If I update Configurations/10-main.conf for hpux64-ia64-cc to use +O0, +O1, or +O2

Re: [openssl-users] Help compiling on HPUX

Thanks! I am compiling on Itanium (ia64). I've not had these issues compiling OpenSSL 1.0.1 version, but this is the first time I'm attempting to move to the 1.1.0 version. I'm attempting a no-asm compile right now, to see if I can get past the error. Then I'll play the optimizations to see

Re: [openssl-users] Help compiling on HPUX

> From: Michael Wojcik, Wednesday, November 08, 2017 7:03 AM > To: openssl-users@openssl.org > Subject: Re: [openssl-users] Help compiling on HPUX > > > From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Dan Freed > > Sent: Tuesday, November 07, 2017 19:14 > > To:

Re: [openssl-users] Help compiling on HPUX

> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Dan Freed > Sent: Tuesday, November 07, 2017 19:14 > To: openssl-users@openssl.org > Subject: [openssl-users] Help compiling on HPUX > I see that there are a few posts about compiling openssl on HP-UX, so I’m >

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

Thanks again, Rich. >>>There is something strange with the RSA private key or it’s BN_CONT object. >>>Are you sure that you are properly releasing all OpenSSL objecdts in your code? My application is a server. When it is initialized it calls RSA_new() to allocate a RSA object. When the

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

On 08/11/17 09:47, Wang wrote: > Hello Matt, > > Thank you for trying to help. > Is this the "bottom" of the OpenSSL stack? i.e. your application calls RSA_private_decrypt() directly? > Yes, it does. > Do you share a single RSA object across multiple threads? > Yes, my

Re: [openssl-users] Potential memory leak in RSA_private_decrypt

Hello Matt, Thank you for trying to help. >>>Is this the "bottom" of the OpenSSL stack? i.e. your application calls >>>RSA_private_decrypt() directly? Yes, it does. >>>Do you share a single RSA object across multiple threads? Yes, my application shares a single RSA object across many