RE: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-20 Thread Erik Tkal
, 2012 8:10 PM To: openssl-dev@openssl.org Subject: Re: ENGINE reference leak using FIPS-capable OpenSSL On Fri, Apr 20, 2012, Roumen Petrov wrote: Dr. Stephen Henson wrote: On Wed, Apr 18, 2012, Erik Tkal wrote: Any takers? Should I be able to build a FIPS-capable OpenSSL and have some

Re: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-19 Thread Roumen Petrov
Dr. Stephen Henson wrote: On Wed, Apr 18, 2012, Erik Tkal wrote: Any takers? Should I be able to build a FIPS-capable OpenSSL and have some of the implementation be provided via an ENGINE (e.g. let's say I have a hardware module to perform AES) but some by the OpenSSL FIPS canister? Or is

Re: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-19 Thread Dr. Stephen Henson
On Fri, Apr 20, 2012, Roumen Petrov wrote: Dr. Stephen Henson wrote: On Wed, Apr 18, 2012, Erik Tkal wrote: Any takers? Should I be able to build a FIPS-capable OpenSSL and have some of the implementation be provided via an ENGINE (e.g. let's say I have a hardware module to perform AES)

RE: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-18 Thread Erik Tkal
Any takers? Should I be able to build a FIPS-capable OpenSSL and have some of the implementation be provided via an ENGINE (e.g. let's say I have a hardware module to perform AES) but some by the OpenSSL FIPS canister? Or is it truly all or nothing? Thanks.

Re: ENGINE reference leak using FIPS-capable OpenSSL

2012-04-18 Thread Dr. Stephen Henson
On Wed, Apr 18, 2012, Erik Tkal wrote: Any takers? Should I be able to build a FIPS-capable OpenSSL and have some of the implementation be provided via an ENGINE (e.g. let's say I have a hardware module to perform AES) but some by the OpenSSL FIPS canister? Or is it truly all or nothing?