Re: [PATCH] Make openssl 1.0.1 compilable on MinGW

Hi Linda, OpenSSL compiles perfectly with/on the target mingw64 - there is however a minor issue (and fix) that isn't (yet) committed in the official repo. See RT #3454 on http://rt.openssl.org/Ticket/Display.html?id=3454 for an issue when compiling with the enable-ec_nistp_64_gcc_128 flag

SSL Library Error: error:2D06D075:FIPS routines:fips_pkey_signature_test:test failure (Type=RSA SHA1 X931)

Hello All, I have a set up which runs Apache http-2.4.10 and Openssl-1.0.1i, when I try to start the http server with FIPS mode i get the following error. [Mon Aug 11 14:39:24.407781 2014] [suexec:notice] [pid 380] AH01232: suEXEC mechanism enabled (wrapper: /apps/apache/2.4.10/bin/suexec)

[openssl.org #2517] [PATCHES] - Misc misspellings, source and docs

I fixed the last few stragglers that hadn't already been fixed. Thanks. Commit: d4a4370050f7d72239b92a60ab9d4a2dd5e9fd84 -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project

[openssl.org #3419] verify -help output is bad

Fixed in the next version AFTER 1.0.2 -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #438] SCEP

SCEP is useful, but it's been 12 years so let's be realistic: nobody's going to do it. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development

[openssl.org #536] Bug in kssl ?

Sorry for lack of response. Very old release, can't reproduce now. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #594] enhancement request

Release too old to try and reproduce. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #651] submission: GOST objects

GOST is supported. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List

[openssl.org #1003] Request: entropy gathering

Not a bug. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager

[openssl.org #1015] don't use O_NOFOLLOW on Solaris...

We don't use O_NOFOLLOW any more. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

[openssl.org #1169] Crash in OpenSSL - write_pending

Apache issue, closing down connection in signal handler. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1187] Openssl - unable to load from /usr/local/ssl/openssl.cnf on win nt

Not clear what the issue is; closing as not repeatable with current releases. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #1988] OpenSSL 1.0.0 Beta 3 minor bug report

Author: Viktor Szakats harbour...@syenar.hu Date: Fri Aug 8 23:15:59 2014 -0400 RT 1988: Add const to SSL_use_RSAPrivateKey_ASN1 The unsigned char *d should be const. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL

[openssl.org #2454] enable engine key for dsa command

This will be done in the next release after 1.0.2 Thanks for the patch! -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List

[openssl.org #3490] bug report: SRP still broken in 1.0.1 snapshot

The fix discussed in this thread appears to be incomplete: http://marc.info/?l=openssl-usersm=140752401023837w=2 This fix works for SRP cipher suites that uses RSA for DSA, which includes 6 of the 9 supported SRP cipher suites. But the three SRP cipher suites that don't rely on a server-side

Re: SSL Library Error: error:2D06D075:FIPS routines:fips_pkey_signature_test:test failure (Type=RSA SHA1 X931)

Your using a SHA-1 signed certificate, the current FIPS standard mandates a SHA-256 (SHA-2) signed certificate with a bit size = 2048. --- Kurt Cancemi https://www.x64Architecture.com On Mon, Aug 11, 2014 at 5:24 AM, Abdul Anshad ab...@visolve.com wrote: Hello All, I have a set up which runs

[openssl.org #3144] Please, I need a command isrevoked in the Latest openssl 1.0 version

Look at the ca -status flag. -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

Re: [openssl.org #3490] bug report: SRP still broken in 1.0.1 snapshot

On Mon, Aug 11, 2014 at 11:09:51PM +0200, John Foley via RT wrote: The fix discussed in this thread appears to be incomplete: http://marc.info/?l=openssl-usersm=140752401023837w=2 This fix works for SRP cipher suites that uses RSA for DSA, which includes 6 of the 9 supported SRP cipher

Re: [openssl.org #3490] bug report: SRP still broken in 1.0.1 snapshot

The commit into 1.0.1 didn't include the changes to s3_lib.c. SRP is still broken on this branch. Are there any plans to fix this? On Aug 11, 2014, at 6:41 PM, Kurt Roeckx via RT r...@openssl.org wrote: On Mon, Aug 11, 2014 at 11:09:51PM +0200, John Foley via RT wrote: The fix discussed

[openssl.org #2546] [bug report] openssl-1.0.0d, ecparam command got error when after first run.

works in current release, -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org

[openssl.org #2391] [PATCH] Clarify usage text for x509 and req commands regarding supported signing digests

Fixed in the new release after 1.0.2; the text says, consistently any supported digest -- Rich Salz, OpenSSL dev team; rs...@openssl.org __ OpenSSL Project http://www.openssl.org Development

Re: SSL Library Error: error:2D06D075:FIPS routines:fips_pkey_signature_test:test failure (Type=RSA SHA1 X931)

Could you please provide me the steps for creating a self signed certificate meeting the current FIPS standard ? Thank you for the response. Regards, Abdul On 12-Aug-14 3:02 AM, Kurt Cancemi wrote: Your using a SHA-1 signed certificate, the current FIPS standard mandates a SHA-256 (SHA-2)