Re: [openssl-dev] Creating requests and certificates with Subject Alternative Names

2017-09-22 Thread Angus Robertson - Magenta Systems Ltd
> I'm creating X509 certificate requests and certificates in code, > trying to add X509v3 Subject Alternative Name, with 1.1.0f. > > But if I add a list of four domains, ie: > The certificate seems to ignore some and repeat others: To answer my own question, I was using ASN1_STRING_set0

[openssl-dev] Openssl FIPS ecp 2.0.16: KDF test for TLS and SSH : Segmentation fault

2017-09-22 Thread murugesh pitchaiah
Hi All, I am working on doing the KDF testing. Done with the HMAC and SHA. But when it comes to do the same for TLS and SSH, evidenced that openssl does not support it. As suggested by old threads, added the patch from Cisco: https://github.com/openssl/openssl/pull/368/files Did build. Now i