Re: [openssl-users] Integrating New Cipher Suite

2017-04-11 Thread Schmicker, Robert
Thank you for the quick replies! @Matt Caswell I have attempted to integrate the cipher suite into the source code and here is what I have done so far… Please keep in mind this was a previous attempt that mimicked a different cipher suite. Added defines in include/openssl/tls1.h: # define

Re: [openssl-users] ssl_method_st not defined

2017-04-11 Thread Viktor Dukhovni
> On Apr 11, 2017, at 11:58 AM, Salz, Rich via openssl-users > wrote: > >>> in my case, i need to initialize the SSL , and set parameters as same as >>> client and server (depending on direction ) and call OpenSSL to decrypt >>> the data. >>> before openSSL 1.1.0

Re: [openssl-users] ssl_method_st not defined

2017-04-11 Thread Salz, Rich via openssl-users
>>in my case, i need to initialize the SSL , and set parameters as same as client and server (depending on direction ) and call OpenSSL to decrypt the data. >>before openSSL 1.1.0 as all member variables could be set, it was easy task, >> now i do face issues with ssl_session

Re: [openssl-users] RSA PKCS1 v2.1 - Multi-primes and RSASSA-PSS

2017-04-11 Thread Davy Souza
> In what context do you want to use it? For example CMS, certificates, TLS, general application code or via the command line? It's a C++ embedded application for a POS. One requirement is to use PKCS#1 v2.1 for RSA functions. Davy Alves de Souza Computer Scientist Federal University of

[openssl-users] Escaped Issuer/Subject

2017-04-11 Thread c.hol...@ades.at
Hi! Is it possible to get the distinguished name of issuer or subject in a escaped form out of the box? e.g. C=US, O=test, Inc., OU=department=1, CN=tester " C=US, O=test\, Inc., OU=department\=1, CN=tester \" cheers, chris -- openssl-users mailing list To unsubscribe:

Re: [openssl-users] ssl_method_st not defined

2017-04-11 Thread Stiju Easo
Hi, What are you trying to do? Why are you modifying the session, outside of the TLS protocol? >> what i am trying to do is to write a code which intercepts the SSL traffic, and decrypt it. >>i do have valid key for SSL traffic, >>in my case, i need to initialize the SSL ,

Re: [openssl-users] Escaped Issuer/Subject

2017-04-11 Thread Wouter Verhelst
On 11-04-17 10:56, c.hol...@ades.at wrote: > Hi! > > Is it possible to get the distinguished name of issuer or subject in a > escaped form out of the box? Escaped for what? XML? SQL? HTML? Shell scripts? Maybe something else? "Escaped form" isn't something that exists as a generic term. If you

[openssl-users] Help With CipherSpecs

2017-04-11 Thread Lesley Kimmel
Hi All! I'm not an expert, by any means, with cipher suites, etc. I am working with an HTTPD server where I am not able to set the server/kernel to FIPS mode nor am I able to set the HTTPD server (openssl) to FIPS mode. However, I am able to modify the SSLCipherSuite directive. Doing some