Engine with SignInit SignUpdate SignFinal Functions

2013-09-18 Thread tera tellence
Dear All, Can somebody tell me how one can implement signInit signUpdate and signFinal via the engine? To be more precise, I have just begun writing my own engine. I see that all one needs is to define function pointers to the various calls. For RSA engine, implementing Signing, one must use

Building OpenSSL FIPS module on 64-bit AIX

2013-09-18 Thread Perrow, Graeme
I am trying to build the FIPS module on a 64-bit AIX machine (running AIX 5.3). When I run ./config (or ./config no-asm) in the openssl-fips-2.0.5 directory, I get this: Operating system: 0003D0AAD300-ibm-aix WARNING! If you wish to build 64-bit kit, then you have to invoke

[openssl.org #3130] Bug report: Compilation of 1.0.2 fails on Solaris 10

2013-09-18 Thread Lührs, Carsten via RT
I am trying to build 1.0.2 on Solaris 10 with T4 support, the compilation of both openssl-1.0.2-stable-SNAP-20130918 and openssl-SNAP-20130918 fail with the following error: cc: Warning: -xarch=v8plus is deprecated, use -m32 -xarch=sparc instead /usr/bin/perl asm/dest4-sparcv9.pl -I.. -I

[openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-18 Thread Alon Bar-Lev via RT
Hi, Just wanted to note that finish is also required to allow cleaning up resources. Any ETA on this? very important if we want to use ec based hardware cryptography. Thanks, Alon Bar-Lev __ OpenSSL Project

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-18 Thread Douglas E. Engert
On 9/18/2013 8:48 AM, Alon Bar-Lev via RT wrote: Hi, Just wanted to note that finish is also required to allow cleaning up resources. In the ecs_locl.h in the current ecdsa_method structure the init and finish are #if 0 out. So far this it has not been needed. The mods I sent in were

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-18 Thread Douglas E. Engert via RT
On 9/18/2013 8:48 AM, Alon Bar-Lev via RT wrote: Hi, Just wanted to note that finish is also required to allow cleaning up resources. In the ecs_locl.h in the current ecdsa_method structure the init and finish are #if 0 out. So far this it has not been needed. The mods I sent in were

Re: [openssl.org #3129] AutoReply: Openssl not clearing session ticket upon handshake failure

2013-09-18 Thread John Gardiner Myers via RT
My proposed fix does not work. It isn't legitimate to just remove the session. An updated proposed fix is attached. diff -ru ../openssl-1.0.1e-orig/apps/s_client.c ./apps/s_client.c --- ../openssl-1.0.1e-orig/apps/s_client.c 2013-02-11 07:26:04.0 -0800 +++ ./apps/s_client.c