Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
Thanks Steve. Appreciate it. I will build 2.0 Module for iOS 5.1. On Fri, Sep 7, 2012 at 1:57 PM, Steve Marquess < marqu...@opensslfoundation.com> wrote: > On 09/07/2012 01:32 PM, Taraniteja Vishwanatha wrote: > > I did not see any build instructions in > > http://openssl.org/docs/fips/UserGuide-

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Steve Marquess
On 09/07/2012 01:32 PM, Taraniteja Vishwanatha wrote: > I did not see any build instructions in > http://openssl.org/docs/fips/UserGuide-2.0.pdf These queries would more appropriately directed to the openssl-users list. Check the latest draft of the User Guide that hasn't been posted to openssl.o

Re: FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
I did not see any build instructions in http://openssl.org/docs/fips/UserGuide-2.0.pdf to build the FIPS module for iOS. The instructions are given only in 1.2 User guide. http://openssl.org/docs/fips/UserGuide-1.2.pdf This is what I am confused about. How did you build the FIPS2.0 module for iOS?

RE: FIPS_mode_set(1) always returns false

2012-09-07 Thread Ken Montagna
Shouldn't you be using FIPS 2.0 object module with openssl 1.01c ? That is what I am using From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Taraniteja Vishwanatha Sent: Friday, September 07, 2012 7:21 AM To: openssl-dev@openssl.org Subject: FIPS_mode_set(1

Re: MIPS linux support patch

2012-09-07 Thread Brad House
On 09/07/2012 11:55 AM, Brad House wrote: This patchset is against OpenSSL 1.0.1c. It does 2 things very minor things. First, it adds a linux-mipsel target to Configure. Second, it fixes the MIPS perlasm, it appears as though at some point AES_set_encrypt_key and AES_set_decrypt_key in the ASM

[patch] fix Configure to allow --sysroot to be passed through to compiler

2012-09-07 Thread Brad House
It appears if you pass something like: ./Configure linux-mips --sysroot=/opt/uclibc because the Configure script doesn't expect compiler options to begin with 2 hyphens, it errors out. The attached patch against OpenSSL 1.0.1c fixes that. Thanks. -Brad diff -ruN openssl-1.0.1c.old/Configure op

MIPS linux support patch

2012-09-07 Thread Brad House
This patchset is against OpenSSL 1.0.1c. It does 2 things very minor things. First, it adds a linux-mipsel target to Configure. Second, it fixes the MIPS perlasm, it appears as though at some point AES_set_encrypt_key and AES_set_decrypt_key in the ASM needed to be renamed to private_AES_set_en

FIPS_mode_set(1) always returns false

2012-09-07 Thread Taraniteja Vishwanatha
Hey guys, I have built openssl-FIPS module (1.2.4) for iOS as per the instructions in the user guide 1.2. I have included the headers and libraries in my test app. I call FIPS_mode_set(1) in the app and it always returns false. Is it because 1.2.4 module supports iOS 5.0 and I am using iOS 5.1? Al

Re: FIPS validation process

2012-09-07 Thread Steve Marquess
On 09/07/2012 03:14 AM, V.Ravikumar wrote: > Hello All, > I would be so thankful if somebody explains the application fips validation > process in details. > Also need purpose of below files and how they will be used in validation > process. > > fipscanister.o > > fipscanister.o.sha1 > > fips_pr

Re: [openssl.org #2836] [PATCH] Staple the correct OCSP Response when multiple certs are configured

2012-09-07 Thread Rob Stradling via RT
Attached is an updated patch for CVS HEAD, plus a patch for the 1.0.2 branch. Are you still accepting patches for 1.0.1? Any chance of reviewing these patches soon? Thanks. On 19/06/12 21:15, Rob Stradling via RT wrote: > The OCSP Stapling Callback function (s->ctx->tlsext_status_cb) is called

[openssl.org #2873] [Bug] -noemailDN only affects Subject DN

2012-09-07 Thread Stefan H. Holek via RT
When the -noemailDN flag is used with the openssl ca command, the email address is only removed from the Subject DN, but not the Issuer DN. This leaves self-signed CA certs created with this flag unverifiable, because the DNs do not match. -- Stefan H. Holek ste...@epy.co.at _

[openssl.org #2872] Bug Report

2012-09-07 Thread Santhosh Krishnamurthy via RT
Hello there Good Morning I need to report a bug and also need a clarification on the same. My name is Santhosh working in Bangalore. I have downloaded your library for testing purpose and found two issue.Please confirm me whether its an issue Or the feature of the open ssl library itself. 1

[openssl.org #2871] bug report

2012-09-07 Thread Vitalijs Anisimovs via RT
Hello OpenSSL team! There is a bug in the session resume (server side, when SSL_OP_NO_TICKET option specified) code. This is hash function for session id: static unsigned long ssl_session_hash(const SSL_SESSION *a) { unsigned long l; l=(unsigned long) ((unsigned int) a->session_id[0] )| ((u

[openssl.org #2870] OpenSSL 0.9.8o 01 Jun 2010 configuration file dir bug

2012-09-07 Thread . via RT
OpenSSL 0.9.8o 01 Jun 2010 In configuration file, [ CA_default ] dir = ~/demoCA This will cause problem loading the private key for CA(fopen cannot find file or directory but I can actually use more to view that file). Changing this to absolute path fixes this problem. Yang __