TLS 1.1 is available in openssl?

2008-03-02 Thread Subramaniam
Dear all,
Does openssl supports TLS v1.1?
If yes, from which version onwards?


-- 
Thanks in advance
subbu


Reg compilation problem with openssl.fips.1.1.1

2007-12-02 Thread Subramaniam
Hi,
I am facing problem in compiling openssl-fips-1.1.1
I configured it with
 ./Configure linux-elf-arm -ldl threads shared no-idea no-mdc2 no-rc50
Make depend
and then made make

But make is failing in test folder. Here is the message from make
--
+ arm-linux-uclibc-cc -o fips_desmovs -I.. -I../include -fPIC -DOPENSSL_PIC
-DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_NO_KRB5
-DTERMIO -O3 -fomit-frame-pointer -Wall fips_desmovs.o -ldl -ldl
fips_desmovs.o(.text+0x100): In function `DESTest':
: undefined reference to `EVP_des_ede3_cfb1'
fips_desmovs.o(.text+0x1a0): In function `DESTest':
: undefined reference to `EVP_des_cfb64'
fips_desmovs.o(.text+0x1c0): In function `DESTest':
: undefined reference to `EVP_des_ede3_ofb'
fips_desmovs.o(.text+0x1d4): In function `DESTest':
: undefined reference to `EVP_des_ede3_cfb64'
fips_desmovs.o(.text+0x1f0): In function `DESTest':
: undefined reference to `EVP_CipherInit'
fips_desmovs.o(.text+0x230): In function `DESTest':
: undefined reference to `EVP_des_ede3_cfb8'
fips_desmovs.o(.text+0x238): In function `DESTest':
: undefined reference to `EVP_des_cfb1'
fips_desmovs.o(.text+0x240): In function `DESTest':
: undefined reference to `EVP_des_ecb'
fips_desmovs.o(.text+0x248): In function `DESTest':
: undefined reference to `EVP_des_ede3_cbc'
fips_desmovs.o(.text+0x250): In function `DESTest':
: undefined reference to `EVP_des_cfb8'
fips_desmovs.o(.text+0x258): In function `DESTest':
: undefined reference to `EVP_des_cbc'
fips_desmovs.o(.text+0x260): In function `DESTest':
: undefined reference to `EVP_des_ofb'
fips_desmovs.o(.text+0x268): In function `DESTest':
: undefined reference to `EVP_des_ede3_ecb'
fips_desmovs.o(.text+0x288): In function `DESTest':
: undefined reference to `ERR_print_errors_fp'
fips_desmovs.o(.text+0x988): In function `do_mct':
: undefined reference to `DES_set_odd_parity'
fips_desmovs.o(.text+0x990): In function `do_mct':
: undefined reference to `DES_set_odd_parity'
fips_desmovs.o(.text+0x998): In function `do_mct':
: undefined reference to `DES_set_odd_parity'
fips_desmovs.o(.text+0x18c4): In function `main':
: undefined reference to `ERR_load_crypto_strings'
collect2: ld returned 1 exit status


--

I searched for the function EVP_des_ede3_cfb.. no such function is defined..

Please help me in resolving this
with regards
Subramanaim


About self signed certificates

2007-10-03 Thread Subramaniam
Hi all,
I am using a self signed certificate as a CA certificate.
My entity certificate is signed by this self signed CA. in my test programs

 But another programmer who is doing client part is saying I need to
include keyUsage field in my self signed certifcate refering to RFC
3280 ( section 4.2.1.3  Key Usage)

 This extension MUST appear in certificates that contain public keys
   that are used to validate digital signatures on other public key
   certificates or CRLs.

But I heard self signed certificates should not have keyUsage field.

I want to know the limitation of self signed certicate..

Thanks in advance.

-- 
with regards
Subramanaim
Engineer Software
SCM Microsytems (INDIA) Pvt. Ltd.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


How to write engine

2007-09-19 Thread Subramaniam
Hi,
My requirement is to write to a new engine that will be loaded by an
application for its crypto functionalities. The engine shall
communicate with the smart card for encryption/ decryption, and
digital signature.

I have no clue how to start with. Is there any documentation available
regarding this?
I just want to know the following things to start with.
How to include a new engine to the existing openssl engine list? How
to load this engine from an application?

Any level of help will be appreciated.

Thanks in advance
-- 
with regards
Subramanaim
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: Create certificates and keys from C/C++

2007-05-04 Thread Subramaniam

hi
Download the openssl-0.9.8e.tar.gz(or other version) tar ball from
ww.openssl.org and uncompress it you will have apps directory in it there u
can find all necessary files.
Thanks,
subbu

On 5/4/07, muggiasca [EMAIL PROTECTED] wrote:


Thank you, but where can I find apps/ca.c, apps/req.c, and apps/x509.c
files...I don't have in my computer, but openssl it works.
I usually create keys with command: openssl req -days 3650 -nodes -new
-keyout XY.key -out XY.csr -config openssl.cnf.

Regards

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Schwartz
Sent: mercoledì, 2. maggio 2007 17:58
To: openssl-users@openssl.org
Subject: RE: Create certificates and keys from C/C++


 Hi, is there a function or something similar to create keys
 and certificates directly from code?
 Thank You

Yes. There are functions like RSA_generate_key, DSA_generate_key,
X509_sign,
and so on.

It is not a particularly simple thing to do though. Look at the example
code
in apps/ca.c, apps/req.c, and apps/x509.c, also demos/selfsign.c may be
helpful.

DS


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]





--
with regards
Subramanaim
Engineer Software
SCM Microsytems (INDIA) Pvt. Ltd.


Getting aborted in RSA_free()

2007-04-25 Thread Subramaniam

hi
My program is exiting abnormally because of

RSA_free(rsa);

I have checked rsa for NULL...

Please help me.
--
with regards
Subramanaim
Engineer Software
SCM Microsytems (INDIA) Pvt. Ltd.