Re: [openssl-dev] confusion with rsa_meth_st in a custom RSA engine

2017-08-23 Thread Douglas E Engert
! Any words of wisdom would be greatly appreciated. Best, Brett -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Access to ECDSA_METHOD do_verify function from engine

2017-07-21 Thread Douglas E Engert
On 7/21/2017 7:19 AM, Johannes Bauer wrote: On 21.07.2017 14:00, Douglas E Engert wrote: It uses either: ops = ECDSA_METHOD_new((ECDSA_METHOD *)ECDSA_OpenSSL()); or ops = EC_KEY_METHOD_new((EC_KEY_METHOD *)EC_KEY_OpenSSL()); which copy the default structure to the new opaque

Re: [openssl-dev] Access to ECDSA_METHOD do_verify function from engine

2017-07-21 Thread Douglas E Engert
Best regards, Johannes -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] Backporting opaque struct getter/setter functions

2016-11-03 Thread Douglas E Engert
d contribute a (separately maintained) compatibility layer to provide the relevant macros? Matt ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. En

Re: [openssl-dev] [openssl.org #4510] SSL certificate problem: unable to get local issuer certificate. Bug?

2016-05-07 Thread Douglas E Engert
en N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-28 Thread Douglas E Engert
OK, Thanks. On 4/27/2016 11:31 PM, Richard Levitte wrote: In message <5720fd7d.3050...@gmail.com> on Wed, 27 Apr 2016 12:57:17 -0500, Douglas E Engert <deeng...@gmail.com> said: deengert> You can call it a documentation problem. The problem only showed up deengert> with

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-27 Thread Douglas E Engert
proverb (You'll never know whether the road is wrong though.) -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-26 Thread Douglas E Engert
. In RSA_set0_key: After any type of NULL test: if (e != rsa->e) { BN_free(rsa->e); rsa->e = e; } -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-26 Thread Douglas E Engert
code is incorrect. Would you mind giving more explanation please? -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-26 Thread Douglas E Engert
M, Tomas Mraz wrote: On Út, 2016-04-26 at 10:16 -0500, Douglas E Engert wrote: Let me update my response. If I am reading GH#995 correctly it still has an issue if a user does: RSA_get0_key(rsa, n, e, NULL); /* note this is a GET0 */ /* other stuff done, such as calculating d */ RSA_set0_key

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-26 Thread Douglas E Engert
/26/2016 10:02 AM, Douglas E Engert wrote: I can live with it. The only solution without some type of change was : RSA_set0_key(rsa, n, e, NULL); /* other stuff done, such as calculating d */ n_new = BN_dup(n); e_new = BN_dup(e); RSA_set0_key(rsa, n_new, e_new, d

Re: [openssl-dev] [openssl.org #4518] OpenSSL-1.1.0-pre5 RSA_set0_key and related RSA_get0_*, RSA_set0_*, DSA_set0_* and DSA_get0_* problems

2016-04-25 Thread Douglas E Engert
function transfers the memory management of the values to the DSA object, and therefore the values that have been passed in should not be freed directly after this function has been called. ... Cheers, Richard -- Douglas E. Engert <deeng...@gmail.com> diff -

Re: [openssl-dev] [openssl.org #4266] OpenSSL-1.1-pre2 cms can not use engine with parameters to sign cms msg

2016-02-11 Thread Douglas E Engert
iling list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert <deeng...@gmail.com> -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4280] OpenSSL 1.1.0 pre 2: feature request: ECDSA_SIG_set0(const ECDSA_SIG*, BIGNUM *, BIGNUM *) is needed

2016-01-29 Thread Douglas E Engert
uld be great to add a simple function: void ECDSA_SIG_set0(const ECDSA_SIG*, BIGNUM *, BIGNUM *) to set these values similar to other XXX_set0() functions. Thanks, -- Douglas E. Engert <deeng...@gmail.com> ___ openssl-dev mailing list To

Re: [openssl-dev] ECDH engine

2016-01-28 Thread Douglas E Engert
Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Douglas

Re: [openssl-dev] ECDH engine

2016-01-25 Thread Douglas E Engert
izon Wireless 4G LTE network. From: Douglas E Engert Sent: Wednesday, January 20, 2016 14:59 To: openssl-dev@openssl.org‎ Reply To: openssl-dev@openssl.org Subject: Re

Re: [openssl-dev] ECDH engine

2016-01-20 Thread Douglas E Engert
?! Sent from my BlackBerry 10 smartphone on the Verizon Wireless 4G LTE network. From: Douglas E Engert Sent: Wednesday, January 20, 2016 14:07 To: openssl-dev@openssl.org

Re: [openssl-dev] ECDH engine

2016-01-20 Thread Douglas E Engert
etwork. From: Douglas E Engert Sent: Wednesday, January 20, 2016 14:07 To: openssl-dev@openssl.org Reply To: openssl-dev@opens

Re: [openssl-dev] ECDH engine

2016-01-20 Thread Douglas E Engert
//mta.openssl.org/mailman/listinfo/openssl-dev ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] [openssl.org #4246] OpenSSL-1.1-pre2 openssl req fails to use engine

2016-01-16 Thread Douglas E Engert
56 -new -key slot_1-id_2 -out /tmp/selfsigned.pem -x509 -text P.S. The EC_KEY_* functions appear to be working too (#4225) Have not tried the ECDH yet. -- Douglas E. Engert<deeng...@gmail.com> -- Douglas E. Engert<deeng...@gmail.com> _

Re: [openssl-dev] [openssl.org #4225] OpenSSL 1.1-pre2 EC_KEY_ex_data regression of functionality from 1.0.2 to 1.1

2016-01-09 Thread Douglas E Engert
phase. It's based on patches Roumen sent. -- Douglas E. Engert <deeng...@gmail.com> ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

[openssl-dev] i2c_ASN1_INTEGER not exposed in github master

2016-01-02 Thread Douglas E Engert
In OpenSSL-1.0.2 opensssl/asn1.h defines both i2c_ASN1_INTEGER and i2c_ASN1_BIT_STRING These are not in development version in github. Was this intentional? -- Douglas E. Engert <deeng...@gmail.com> ___ openssl-dev mailing list To unsub

Re: [openssl-dev] extra data for ec keys

2015-12-23 Thread Douglas E Engert
o unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert <deeng...@gmail.com> ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-17 Thread Douglas E Engert
_______________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert <deeng...@gmail.com> ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-11 Thread Douglas E Engert
. Would you like to review this code? We are planing to publish it on github in a week or so. Regards. Alex Sent from my iPhone On Dec 10, 2015, at 2:47 PM, Douglas E Engert <deeng...@gmail.com>

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-10 Thread Douglas E Engert
l, “decrypt” to be precise :) and “derive” (for ECDH key)… Thanks! ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. E

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-10 Thread Douglas E Engert
arg pass phrase source $ I observed exactly the same happening with the decryption key. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.

Re: [openssl-dev] openssl pkeyutl unable to use keys on a PKCS11 token?

2015-12-10 Thread Douglas E Engert
ri> uri> -passin arg pass phrase source uri> uri> $ uri> uri> I would appreciate guidance regarding how to accomplish what I’m uri> trying to do, and whether it is possible to do so staying within the uri> OpenSSL CLI. uri> uri> Thanks! uri> uri> P.S. I followed the README from uri> https://github.com/OpenSC/engine_pkcs11 as an

Re: [openssl-dev] [openssl.org #3887] PATCH: rsautl and intelligent retry for Public Key parse after Traditional/Subject Public Key Info parse fails

2015-06-01 Thread Douglas E Engert
?) ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert deeng...@gmail.com ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org

Re: [openssl-dev] Kerberos

2015-05-09 Thread Douglas E Engert
that could happen. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev . -- Douglas E. Engert deeng...@gmail.com ___ openssl-dev mailing list To unsubscribe: https

Re: [openssl-dev] [openssl.org #3822] BUG: Configure does not set RPATH correctly

2015-04-26 Thread Douglas E Engert
Makefile.shared:symlink.tru64-shared-rpath: symlink.tru64-rpath ... ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert deeng...@gmail.com

Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-25 Thread Douglas E Engert
is less than 256^(xLen-1)). On 3/25/2015 4:34 PM, Annie wrote: Am 24.03.2015 um 19:42 schrieb Douglas E Engert: On 3/24/2015 6:10 AM, Annie Yousar wrote: Dear all, this should not have happened: The private key may have leading zero bytes, and the size of the BIGNUM is used for the length

Re: [openssl-dev] Reminder: OpenSSL's EC private key encoding is broken

2015-03-24 Thread Douglas E Engert
- ... Conforming to the standards the EC private key has always a fixed length, defined by the group order. Regards, Ann. ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert deeng

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread Douglas E Engert
___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev -- Douglas E. Engert deeng...@gmail.com ___ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman

Re: [openssl-dev] EC key generation in broken in all versions

2015-01-03 Thread Douglas E Engert
@openssl.org https://mta.opensslfoundation.net/mailman/listinfo/openssl-dev -- Douglas E. Engert deeng...@gmail.com ___ openssl-dev mailing list openssl-dev@openssl.org https://mta.opensslfoundation.net/mailman/listinfo/openssl-dev

Re: [openssl-dev] Maximum length of passwords

2014-04-11 Thread Douglas E Engert
probability of bugs in it. -- Douglas E. Engert deeng...@gmail.com __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-18 Thread Douglas E. Engert
-- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org Development

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-18 Thread Douglas E. Engert via RT
...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-16 Thread Douglas E. Engert
On 9/12/2013 10:46 AM, Dr. Stephen Henson wrote: On Thu, Sep 12, 2013, Douglas E. Engert wrote: On 9/11/2013 2:01 PM, Stephen Henson via RT wrote: [snip] Yes similar to that but with a few minor changes. The analogous functions for EVP_PKEY_METHOD are called set and not put

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-12 Thread Douglas E. Engert
http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-12 Thread Douglas E. Engert via RT
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-11 Thread Douglas E. Engert via RT
majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

[openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-11 Thread Douglas E. Engert via RT
8a99cb29d1f0013243a532bccc1dc70ed678eebe modifed the ecdsa_method structure, but commit 190c615d4398cc6c8b61eb7881d7409314529a75 reverted the changes. 190c615d... says: It also reverts the changes to (EC)DSA_METHOD structure. -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2013-09-11 Thread Douglas E. Engert
...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org Development

Re: Smart card support with Openssl

2013-05-21 Thread Douglas E. Engert
for smart card where private key is not known. Thanks in advance. Have a look at https://www.opensc-project.org/opensc/wiki/engine_pkcs11 This is an engine that can call pkcs11, either the OpenSC or some other PKCS#11 implementation. Rajeswari. -- Douglas E. Engert deeng...@anl.gov

Re: EVP and Elliptic curve

2013-03-20 Thread Douglas E. Engert
-- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org Development Mailing

Re: Request for Elliptic Curve Documentation

2013-02-05 Thread Douglas E. Engert
defaultServer-pkey.pem -out defaultServer-cert.pem I will try to setup a CA, so the clients can verify the 3 servers. Documentation would be appreciated too. Regards Stefan -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252

Re: loading public point

2012-12-13 Thread Douglas E. Engert
} __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass

Re: Performing ECDSA signing outside of OpenSSL

2012-10-23 Thread Douglas E. Engert
/UAC/Pulse Development -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: ECDSA pub/priv data storage Best Practices

2012-09-26 Thread Douglas E. Engert
. pubkey= o2i_ECPublicKey(pubkey, (const unsigned char **)pubdata, publen); But what is the best packaging for this Public key as in handing it out? I can simply provide this file but is there some packaging format generally used as Best Practices? -- Douglas E. Engert deeng...@anl.gov Argonne

Re: ECDSA pub/priv data storage Best Practices

2012-09-25 Thread Douglas E. Engert
packaging for this Public key as in handing it out? I can simply provide this file but is there some packaging format generally used as Best Practices? How about: http://www.ietf.org/rfc/rfc5480.txt -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue

Re: ECDSA pub/priv data storage Best Practices

2012-09-25 Thread Douglas E. Engert
more, see below On 9/25/2012 1:59 PM, Douglas E. Engert wrote: On 9/25/2012 9:51 AM, redpath wrote: I have saved the private and public key of the ECDSA; Just sample code below. int len= i2o_ECPublicKey(eckey,NULL); unsigned char *buf=(unsigned char *)0; ret

Re: EC_KEY and PEM_read_RSAPrivateKey

2012-09-04 Thread Douglas E. Engert
for the ECDSA. How? -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: How to: read a certificate from PIV smart card, encode some text with its public key?

2011-12-13 Thread Douglas E. Engert
is suitable for AES encryption. Therefore, I use openssl in order to create this public key and to operate with AES encryption. And you should only need to save the (ephemeral) public key, and destroy the private key, and the AES key. Best regards, Max Ushakov -- Douglas E. Engert deeng

Re: How to: read a certificate from PIV smart card, encode some text with its public key?

2011-12-09 Thread Douglas E. Engert
thanks, Max Ushakov -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
if a curve is one of the NIST approved (SuiteB) ones ? See Peter's note on the list of NIST OIDs. Cheers, Max -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
, /* B-233 */ 1.3.132.0.17, /* B-283 */ 1.3.132.0.37, /* B-409 */ 1.3.132.0.39, /* B-571 */ NULL }; OBJ_txt2nid() will handle these as well as the names you are more familliar with. Peter -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
: http://www.openssl.org __ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National

Re: [openssl.org #2459] ecdsa_method declaration prevents use in implementing a dynamic engine

2011-02-23 Thread Douglas E. Engert
List Manager majord...@openssl.org -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

Re: Can I create cryptoprovider based on openssl ?

2008-12-19 Thread Douglas E. Engert
/How_to_use_digital_Signatures Rustam !!! -- Douglas E. Engert deeng...@anl.gov Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: OpenSSL API which build the chain from a peer certificate

2008-11-07 Thread Douglas E. Engert
PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org

Re: OpenSSL API which build the chain from a peer certificate

2008-11-05 Thread Douglas E. Engert
to create a new proxy by delegation. */ if (pvd-cert_chain == NULL) { pvd-cert_chain = sk_X509_new_null(); } sk_X509_push(pvd-cert_chain, X509_dup(ctx-current_cert)); Thanks in advance, Aravind. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700

Re: Getting the peer certificate in a memory buffer

2008-10-20 Thread Douglas E. Engert
. On Fri, Oct 17, 2008 at 8:26 PM, Douglas E. Engert [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Aravinda babu wrote: Hi all, I am new to OpenSSL.I want to get the peer certificate in a memory buffer. If i use SSL_get_peer_certificate i can get in X509

Re: Getting the peer certificate in a memory buffer

2008-10-17 Thread Douglas E. Engert
*/ or PEM_write_bio_X509(bp,peer); /* as pem */ Is there any API for this ?? Thanks in advance, Aravind. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: openssl 0.9.8h on Solaris 10.3 amd64 blues

2008-09-10 Thread Douglas E. Engert
saved the day. Try Andy's solution too. Thanks, Nikos Let me correct the previous note. I had added no-asm when building the debug version. With a non-debug version and no-asm the tests work. So the problem apears to be with the asm modules. Douglas E. Engert wrote: [EMAIL PROTECTED

Re: openssl 0.9.8h on Solaris 10.3 amd64 blues

2008-09-09 Thread Douglas E. Engert
[EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org

Re: openssl 0.9.8h on Solaris 10.3 amd64 blues

2008-09-09 Thread Douglas E. Engert
Let me correct the previous note. I had added no-asm when building the debug version. With a non-debug version and no-asm the tests work. So the problem apears to be with the asm modules. Douglas E. Engert wrote: [EMAIL PROTECTED] wrote: Hi, I've waisted most of my day today with openssl

Re: Save private/public key into string

2008-08-29 Thread Douglas E. Engert
); -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org Development Mailing

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-12 Thread Douglas E. Engert
openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-12 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-10 Thread Douglas E. Engert
Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-10 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-10 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-10 Thread Douglas E. Engert
openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: Visual Studio 2005 and openssl question

2007-06-04 Thread Douglas E. Engert
[EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: Format of X509 Certificate Validity

2007-05-23 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL

Re: How to extract message digest from PKCS #7 signature

2006-12-13 Thread Douglas E. Engert
and thoughts on pitfalls to watch for will be appreciated. Thanks in advance. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL

OpenSSL and Mac OS X 10.4 and the use of dynamic engine

2005-12-02 Thread Douglas E. Engert
rather use the vendor's provided versions of these if at all possible. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

Using OpenSSL ENGINE to get Certificate from Smartcard

2005-04-01 Thread Douglas E. Engert
-C ENGINE:CERT=$TMPCERTFILE,KEY=... I am willing to look at the three steps, if it looks like (1) would be accepted. If not I will look the ENGINE_ctrl option. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: Using OpenSSL ENGINE to get Certificate from Smartcard

2005-04-01 Thread Douglas E. Engert
Richard Levitte - VMS Whacker wrote: In message [EMAIL PROTECTED] on Fri, 01 Apr 2005 10:14:25 -0600, Douglas E. Engert [EMAIL PROTECTED] said: deengert The OpenSSL ENGINE facilities had ENGINE_load_private_key, deengert and ENGINE_load_public_key, but do not have ENGINE_load_certificate

Re: Minimum compiler support on different unix flavours?

2005-03-11 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass

Re: [openssl.org #960] OpenSSL 0.9.7e fails on Linux

2004-10-27 Thread Douglas E. Engert
__ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL

Re: [openssl.org #813] hpux 11 64 bit install problem

2004-01-16 Thread Douglas E. Engert via RT
[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [openssl.org #813] hpux 11 64 bit install problem

2004-01-15 Thread Douglas E. Engert
[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [openssl.org #772] 32/64-bit detection on HPUX 11.11

2003-11-19 Thread Douglas E. Engert
. A. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue

Re: [openssl.org #772] 32/64-bit detection on HPUX 11.11

2003-11-19 Thread Douglas E. Engert
[EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: shared Solaris build with gcc 3.2.1 wants libgcc_s.so.1

2003-08-20 Thread Douglas E. Engert
[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: building 0.9.7b

2003-08-10 Thread Douglas E. Engert
[EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http

Re: AW: PKCS#11 support ?

2001-11-02 Thread Douglas E. Engert
Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: making use of an SSL handshake in a new way

2001-10-10 Thread Douglas E. Engert
[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Rejecting Certiifcates with Unknown Critical Extensions

2001-09-28 Thread Douglas E. Engert
E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project http://www.openssl.org Development Mailing List

Re: OPenSSL fails to accept certificate chains over 16K

2001-08-25 Thread Douglas E. Engert
Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

OPenSSL fails to accept certificate chains over 16K

2001-08-23 Thread Douglas E. Engert
practical limit, but it should be setable by the application at run time. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

Re: AW: PKCS#11 support ?

2001-07-09 Thread Douglas E. Engert
want __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E

Re: smartcard / openssl integration?

2000-12-02 Thread Douglas E. Engert
SL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illin

Re: GSS-API interface?

2000-10-26 Thread Douglas E. Engert
st Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

Re: Nonblocking again. Don't want OpenSSL to do any networking.

2000-08-22 Thread Douglas E. Engert
to use the different types of BIOs. So here is an example. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __ OpenSSL Project

ex_pathlen uninitialized

2000-08-21 Thread Douglas E. Engert
) (i (x-ex_pathlen + 1))) { ctx-error = X509_V_ERR_PATH_LENGTH_EXCEEDED; ctx-error_depth = i; Thanks. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252

Re: SSL_ALLOW_ENULL

1999-03-08 Thread Douglas E. Engert
. __ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National

Re: Win32 proposal: dump the DEFs!

1999-03-01 Thread Douglas E. Engert
[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

  1   2   >