Re: [openssl-dev] Certificate torture test

2016-09-08 Thread David Woodhouse
On Thu, 2016-09-08 at 13:44 +, Salz, Rich wrote: > I would suggest the LAMPS WG (https://datatracker.ietf.org/wg/lamps/c > harter/), which is the closest thing to PKIX these days, and perhaps > cross-post to the SAAG mailing list the general catch-all for > security area https://trac.tools.ietf

Re: [openssl-dev] FIPS validation

2016-09-08 Thread Steve Marquess
On 09/07/2016 12:49 AM, Leon Brits wrote: > Hi SteveM, > > Yes we are copycats - thanks for making it possible. > > I was also amazed when I received the email very close to our final > source code review and operational testing phase. > > I've used the fips_algv tests suite to have the algorith

Re: [openssl-dev] Certificate torture test

2016-09-08 Thread David Woodhouse
On Thu, 2016-09-08 at 13:44 +, Salz, Rich wrote: > I would suggest the LAMPS WG (https://datatracker.ietf.org/wg/lamps/c > harter/), which is the closest thing to PKIX these days, and perhaps > cross-post to the SAAG mailing list the general catch-all for > security area https://trac.tools.ietf

Re: [openssl-dev] Certificate torture test

2016-09-08 Thread Salz, Rich
I would suggest the LAMPS WG (https://datatracker.ietf.org/wg/lamps/charter/), which is the closest thing to PKIX these days, and perhaps cross-post to the SAAG mailing list the general catch-all for security area https://trac.tools.ietf.org/area/sec/trac/wiki. -- Senior Architect, Akamai Tec

Re: [openssl-dev] Certificate torture test

2016-09-08 Thread David Woodhouse
On Fri, 2016-09-02 at 20:20 +, Salz, Rich wrote: > > > > I've started collecting a certificate torture test suite at > > http://git.infradead.org/users/dwmw2/openconnect.git/blob/HEAD:/tests/ > > Makefile.am > > I think this is cool, and splitting it off is a good idea. I think > some IETF f