Need inputs/suggestions on SSL/TLS protocol version fallback mechanism.

2012-10-29 Thread Bhat, Jayalakshmi Manjunath
Hi All, I have a client application that uses SSL23_client_method(). When the client is getting connected to server that supports TLS 1.0 there are no issues. When the client is getting connected to server that supports only SSLv3.0, connection is getting aborted with protocol number error. I

Recall: Help needed on to compile OpenSSL with FIPS

2012-10-22 Thread Bhat, Jayalakshmi Manjunath
Bhat, Jayalakshmi Manjunath would like to recall the message, Help needed on to compile OpenSSL with FIPS.__ OpenSSL Project http://www.openssl.org Development Mailing List

How to uses FIPS 2.0.1 with OpenSSL 1.0.1

2012-10-22 Thread Bhat, Jayalakshmi Manjunath
Hi All, I wanted to know the procedure and steps for cross compiling OpenSSL on Linux along with FIPS? Regards Jaya

Help needed on to compile OpenSSL with FIPS

2012-10-22 Thread Bhat, Jayalakshmi Manjunath
Hi All, I wanted to know how to cross compile OpenSSL with FIPS enabled? Regards Jaya

RE: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Andy, Thanks for the reply. I am trying to understand whether FIPS 180-2 or FIPS 180-3 is supported in OpenSSL 1.0.1. CHANGES document in OpenSSL claims the support for FIPS 180-2. However CH is defined in SHA-256 is #define Ch(x,y,z) (((x) (y)) ^ ((~(x)) (z))) in SHA-256.c . This

RE: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Andy, Thanks a lot for the quick reply. Sorry to interrupt you with one more question. Is http://csrc.nist.gov/publications/fips/fips180-2/fips180-2.pdf this not the right document? Regards Jaya -Original Message- From: owner-openssl-...@openssl.org

RE: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Andy, Once again thank you. I tested 2 sample test explained in the FIPS 180-2 and 180-3 documents with OpenSSL 1.0.1 document and test output matched in both the cases. But the CH was different in FIPS 180-2 than FIPS 180-3. So I was wondering how output can be same irrespective of CH

RE: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Andy, I will check if I can get a right copy. Do you have any link that directs me to correct copy? Regards Jaya -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Andy Polyakov Sent: Tuesday, June 26, 2012 9:19 PM To:

RE: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Andy, One more question CHANGES document in OpenSSL 1.0.1 stats SHA-224 supported as per FIPS 180-2, but SHA-224 appears to be available only in FIPS 180-3. So shouldn’t it be as per FIPS 180-3 standard? Regards Jaya -Original Message- From: owner-openssl-...@openssl.org

RE: [openssl-dev] Re: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi Erwann ABALEA Thanks a lot. Regards Jaya -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Erwann Abalea Sent: Tuesday, June 26, 2012 9:40 PM To: openssl-dev@openssl.org Cc: Andy Polyakov Subject: Re: [openssl-dev] Re: SHA-256

RE: [openssl-dev] Re: SHA-256 and SHA-512 doubts in OpenSSL

2012-06-26 Thread Bhat, Jayalakshmi Manjunath
Hi All, Thanks everyone, now I have the right documents. Regards Jaya -Original Message- From: owner-openssl-...@openssl.org [mailto:owner-openssl-...@openssl.org] On Behalf Of Erwann Abalea Sent: Tuesday, June 26, 2012 9:40 PM To: openssl-dev@openssl.org Cc: Andy Polyakov Subject:

FIPS 180-2 bugs in SHA-256 and SHA-512

2012-06-22 Thread Bhat, Jayalakshmi Manjunath
Hi All, I have couple of questions like 1. What is FIPS standard OpenSSL 1.0.1 library following. CHANGES claims the support for FIPS180-2? 2. In Sha256.c, these are not as per the FIPS 180-2 standard or FTP 180-3. #define Sigma0(x) (ROTATE((x),30) ^ ROTATE((x),19) ^

Recall: FIPS 180-2 bugs in SHA-256 and SHA-512

2012-06-22 Thread Bhat, Jayalakshmi Manjunath
Bhat, Jayalakshmi Manjunath would like to recall the message, FIPS 180-2 bugs in SHA-256 and SHA-512.__ OpenSSL Project http://www.openssl.org Development Mailing List

Recall: FIPS 180-2 bugs in SHA-256 and SHA-512

2012-06-22 Thread Bhat, Jayalakshmi Manjunath
Bhat, Jayalakshmi Manjunath would like to recall the message, FIPS 180-2 bugs in SHA-256 and SHA-512.__ OpenSSL Project http://www.openssl.org Development Mailing List

Recall: FIPS 180-2 bugs in SHA-256 and SHA-512

2012-06-22 Thread Bhat, Jayalakshmi Manjunath
Bhat, Jayalakshmi Manjunath would like to recall the message, FIPS 180-2 bugs in SHA-256 and SHA-512.__ OpenSSL Project http://www.openssl.org Development Mailing List

SHA-256 and SHA-512 doubts in OpenSSL

2012-06-22 Thread Bhat, Jayalakshmi Manjunath
Hi All, I have couple of questions like, 1. What is FIPS standard OpenSSL 1.0.1 library following. CHANGES claims the support for FIPS180-2? 2. In Sha256.c, these are not as per the FIPS 180-2 standard or FTP 180-3. #define Sigma0(x) (ROTATE((x),30) ^ ROTATE((x),19) ^

IS this issue in d2i_ASN1_SET

2012-05-17 Thread Bhat, Jayalakshmi Manjunath
Hi All, In d2i_ASN1_SET function, function asn1_add_error is being invoked. if (M_ASN1_D2I_end_sequence()) break; /* XXX: This was called with 4 arguments, incorrectly, it seems if ((s=func(NULL,c.p,c.slen,c.max-c.p)) == NULL) */ if ((s=d2i(NULL,c.p,c.slen)) == NULL) {

Does any one has idea on how to map Microsoft crypto errors with X509 erros in OpenSSL?

2011-09-08 Thread Bhat, Jayalakshmi Manjunath
Hi All, Can anyone help me to map the following crypto errors from MS crypto to X509 errors in OpenSSL. CERT_TRUST_INVALID_POLICY_CONSTRAINTShttp://source.winehq.org/ident?i=CERT_TRUST_INVALID_POLICY_CONSTRAINTS

RE: Information wanted on OpenSSL cipher alias HIGH, MEDIUM and LOW.

2010-04-15 Thread Bhat, Jayalakshmi Manjunath
:!MEDIUM:!DH' AES256-SHA:AES128-SHA:DES-CBC3-SHA -Sandeep On Thu, Apr 15, 2010 at 10:45 AM, Bhat, Jayalakshmi Manjunath jayalakshmi.b...@hp.com wrote: Hi All, I wanted to know when we use ALL:!SSLv2:!EXPORT:!LOW:!MEDIUM:!DH to select the ciphers how do OpenSSL understands what are ciphers

Information wanted on OpenSSL cipher alias HIGH, MEDIUM and LOW.

2010-04-14 Thread Bhat, Jayalakshmi Manjunath
Hi All, I wanted to know when we use ALL:!SSLv2:!EXPORT:!LOW:!MEDIUM:!DH to select the ciphers how do OpenSSL understands what are ciphers are available under LOW and MEDIUM. Ssleay.txt documents names LOW,MEDIUM and HIGH as aliases. Please can someone provide me more information on this? Thanks

Client authentication using Certificate chain.

2008-03-13 Thread Bhat, Jayalakshmi Manjunath
Hi All, If client authentication requested by the server, is it MUST to send the certificate chain along with client certificate? Does RFC mandates sending certificate chain? Regards Jaya __ OpenSSL Project

X509_STORE_CTX_set_time usage

2008-01-04 Thread Bhat, Jayalakshmi Manjunath
Hi All, I am facing a problem with check_cert_time function in OpenSSL library. I am trying to handle X509_V_ERR_CERT_NOT_YET_VALID and X509_V_ERR_CERT_NOT_YET_VALID errors.I am trying to simulate this errors with the expired certificate and certificate not yet valid. Problem here is I am always

do_cipher

2007-05-01 Thread Bhat, Jayalakshmi Manjunath
Hi All, I am using EVP functions for AES encryption/Decryption. Please can any one tell me how to find the exact AES encryption/decryption routines called when do_cipher is invoked? Regards, Jaya __ OpenSSL Project

Openssl 0.9.9 release

2007-03-02 Thread Bhat, Jayalakshmi Manjunath
Hi All, I was looking for EAP-FAST support in openssl library. In the mail list I found a patch. Patch was distributed for openssl-0.9.8. And I also found some mails stating EAP-FAST support will be added in openssl-0.9.9.I have few queries now. I. Will EAP-FAST support will be added in

TLS extension support

2007-03-02 Thread Bhat, Jayalakshmi Manjunath
Hi All, Can any one tell me when SessionTicket TLS Extension support will be included in openssl library? Thanks in advance. Regards, Jaya. __ OpenSSL Project http://www.openssl.org Development