Re: FIPS fail

2008-10-12 Thread joshi chandran
Is there any patch which can i apply for openssh to make it compatible with fips enabled openssl Thanks Joshi On Thu, Oct 9, 2008 at 5:13 PM, Steve Marquess [EMAIL PROTECTED]wrote: Kyle Hamilton wrote: Okay. Let's see if I can piece together everything I've learned about the FIPS

Re: FIPS fail

2008-10-10 Thread Dr. Stephen Henson
On Fri, Oct 10, 2008, joshi chandran wrote: Hi All, Can any body give me small program which set in fips mode and uses non fips algorithm ,hence fails while running . Well the standard OpenSSL utility will do that e.g. OPENSSL_FIPS=1 openssl md5 somefile Steve. -- Dr Stephen N. Henson.

Re: FIPS fail

2008-10-10 Thread joshi chandran
Hi All, Can any body give me small program which set in fips mode and uses non fips algorithm ,hence fails while running . Thanks Joshi On Thu, Oct 9, 2008 at 5:13 PM, Steve Marquess [EMAIL PROTECTED]wrote: Kyle Hamilton wrote: Okay. Let's see if I can piece together everything I've

Re: FIPS fail

2008-10-09 Thread Kyle Hamilton
Okay. Let's see if I can piece together everything I've learned about the FIPS experience so far... FIPS-1.1.2 only generates a static fipscanister, which can only be used to generate a static library. (except on Windows, where it can be built into a shared library.) This version will only

Re: FIPS fail

2008-10-09 Thread joshi chandran
Is this means windows can generate shared library of openssl 9.7m with openssl fips 1.1.2 but i was not able to make the shared library of openssl 9.7m when i am compiled with openssl fips 1.1.2 object module in Unix(AIX) system .Does it means the coming fips version 1.2 will allow shared library

Re: FIPS fail

2008-10-09 Thread Steve Marquess
Kyle Hamilton wrote: Okay. Let's see if I can piece together everything I've learned about the FIPS experience so far... FIPS-1.1.2 only generates a static fipscanister, which can only be used to generate a static library. (except on Windows, where it can be built into a shared library.)

Re: FIPS fail

2008-10-03 Thread Dr. Stephen Henson
On Thu, Oct 02, 2008, Thomas J. Hruska wrote: Thomas J. Hruska wrote: Needless to say, given the lack of response and further web searching reveals issues with older VC++ linkers core dumping(?) against the latest MinGW and I've already put forth 30+ hours (not counting the preparation

Re: FIPS fail

2008-10-03 Thread Dr. Stephen Henson
On Thu, Oct 02, 2008, Michael S. Zick wrote: 1.1.0 does not build shared. Build static or wait for 1.2.0 Windows is an exception, it can be build shared in the 1.1.2 module. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance

Re: FIPS fail

2008-10-03 Thread Thomas J. Hruska
Dr. Stephen Henson wrote: On Thu, Oct 02, 2008, Thomas J. Hruska wrote: Thomas J. Hruska wrote: Needless to say, given the lack of response and further web searching reveals issues with older VC++ linkers core dumping(?) against the latest MinGW and I've already put forth 30+ hours (not

Re: FIPS fail

2008-10-02 Thread Thomas J. Hruska
Thomas J. Hruska wrote: Feel free to follow along with this e-mail: http://www.slproweb.com/download/bad_openssl.zip I just zipped up the contents of the 'out32dll' directory. What you see is what I've got in my out32dll directory. And now onto the main part of the e-mail. This is my

Re: FIPS fail

2008-10-02 Thread Michael S. Zick
On Thu October 2 2008, Thomas J. Hruska wrote: Thomas J. Hruska wrote: Feel free to follow along with this e-mail: http://www.slproweb.com/download/bad_openssl.zip I just zipped up the contents of the 'out32dll' directory. What you see is what I've got in my out32dll directory.

FIPS fail

2008-10-01 Thread Thomas J. Hruska
Feel free to follow along with this e-mail: http://www.slproweb.com/download/bad_openssl.zip I just zipped up the contents of the 'out32dll' directory. What you see is what I've got in my out32dll directory. And now onto the main part of the e-mail. This is my first time building FIPS