Re: openssl errors on aix 4.3 .config and make failing

2009-04-29 Thread Anil Tambe
hi, it seems that the configuration file is missing , please read the below and create one. http://www-01.ibm.com/support/docview.wss?uid=swg21270914 Thanks Anil On Sat, Apr 25, 2009 at 9:35 AM, Richard Francis wrote: > Hi, here's the output from .config and make failing; any help is gr

RE: error while executing make command

2009-04-29 Thread Neerav Singh
Hi guys I was able to solve the error with "ar r" by including "ar" location in the path variable for the user Now I am confronted with the below error make[2]: Entering directory `/bidev/bihome/webserver/ssl/openssl-0.9.6c/crypto/des' cc -I.. -I../../include -KPIC -DTHREADS -D_REENTRANT -DD

Re: add a new cipher to OpenSSL

2009-04-29 Thread Victor Duchovni
On Wed, Apr 29, 2009 at 09:25:55PM -0700, siavash fallahdoost wrote: > Victor,? Are you kidding ?! No, the vast majority of requests along these lines are from CS students who want the list to do their homework. > > I want to add new cipher algorithms to openssl library and rebuild > > openssl o

Re: add a new cipher to OpenSSL

2009-04-29 Thread siavash fallahdoost
Victor,  Are you kidding ?! --- On Wed, 4/29/09, Victor Duchovni wrote: From: Victor Duchovni Subject: Re: add a new cipher to OpenSSL To: openssl-users@openssl.org Date: Wednesday, April 29, 2009, 5:27 PM -Inline Attachment Follows- On Wed, Apr 29, 2009 at 05:03:00AM -0700, siavash

Re: Openssl 0.9.8j Client Hello

2009-04-29 Thread Amit Singh
Hi Dave, > Either (re-configure and) build with no-tlsext; > or it appears to me that SSL_[CTX_]set_option > of (or including) SSL_OP_NO_TICKET will stop this one. > > (I bet this is going to become a FAQ.) > I tried SSL_CTX_set_options(ctx, SSL_OP_NO_TICKET), and it worked. Thanks for your h

Decoding PKCS12 files

2009-04-29 Thread Bob Barnes
Is there an OpenSSL command that can decrypt/decode pkcs12 files into their ASN.1 form or even their ASN.1 form DER encoded? Bob

Re: nextUpdate filed in the CRL

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, mjaisw...@comcast.net wrote: > > > Does anyone know w hat happens if the local CRL cache is not updated at the > nextUpdate time in the CRL? Will certificate validation fail because of > this? > > If CRL checking is enabled then this will produce an error which will nor

Re: Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, Randy Turner wrote: > > Just for my own edification, from this thread, it sounds like OpenSSL > doesn't support password-protected > PKCS#7 bundlesis this interpreation correct? > No. It supports password encrypted data for PKCS#7. That uses the encrypted data type. Han

Re: New User - AES Wrap Key

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, jrshedden wrote: > > Hi, > > Is there a way to access AES key wrap and unwrap features of version 0.9.8k > from the command line? I can't seem to find it. > No, they currently can only be "accessed" as part of encrypt or decrypt of a CMS enveloped data structure on the c

nextUpdate filed in the CRL

2009-04-29 Thread mjaiswal1
Hi, Does anyone know w hat happens if the local CRL cache is not updated at the nextUpdate time in the CRL? Will certificate validation fail because of this? thanks munish

New User - AES Wrap Key

2009-04-29 Thread jrshedden
Hi, Is there a way to access AES key wrap and unwrap features of version 0.9.8k from the command line? I can't seem to find it. Thanks in Advance! Jim S. -- View this message in context: http://www.nabble.com/New-User---AES-Wrap-Key-tp23295884p23295884.html Sent from the OpenSSL - User maili

Re: Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Randy Turner
Just for my own edification, from this thread, it sounds like OpenSSL doesn't support password-protected PKCS#7 bundlesis this interpreation correct? Randy On Apr 29, 2009, at 6:16 AM, Dr. Stephen Henson wrote: On Wed, Apr 29, 2009, Mathieu Malaterre wrote: On Wed, Apr 29, 2009 at 12

Re: openssl-0.9.8d-tls-extensions.patch is not in the latest openssl-0.9.8k.tar.gz

2009-04-29 Thread Jouni Malinen
On Tue, Apr 28, 2009 at 05:40:04PM -0700, Debbie (Yue) Xu wrote: > I need the openssl-0.9.8d-tls-extensions.patch in order to get the support > for all the functionality needed for EAP-FAST in wpa-supplicant. But I found > that even the latest openssl-0.9.8k.tar.gz doesn't include the patch. Can

Re: Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, Mathieu Malaterre wrote: > On Wed, Apr 29, 2009 at 12:14 PM, Dr. Stephen Henson > wrote: > > On Wed, Apr 29, 2009, Mathieu Malaterre wrote: > > > > That involves the use of a password based recipient info structure which > > OpenSSL doesn't currently support. > > Ah ! Than

Re: Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Mathieu Malaterre
On Wed, Apr 29, 2009 at 12:14 PM, Dr. Stephen Henson wrote: > On Wed, Apr 29, 2009, Mathieu Malaterre wrote: > >> Hi there, >> >> I am trying to decrypt a file like this: >> >> $ openssl asn1parse -in sec -inform DER >> 0:d=0 hl=2 l=inf cons: SEQUENCE >> 2:d=1 hl=2 l= 9 prim: OBJECT

Re: API to convert PFX to PEM format.

2009-04-29 Thread Victor Duchovni
On Wed, Apr 29, 2009 at 02:39:27PM +0200, Dr. Stephen Henson wrote: > On Wed, Apr 29, 2009, Victor Duchovni wrote: > > > On Tue, Apr 28, 2009 at 01:48:20PM -0700, Govinda Rajulu wrote: > > > > > I am writing an application that uses openssl, I will be getting > > > certificate > > > in PFX form

Re: API to convert PFX to PEM format.

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, Victor Duchovni wrote: > On Tue, Apr 28, 2009 at 01:48:20PM -0700, Govinda Rajulu wrote: > > > I am writing an application that uses openssl, I will be getting certificate > > in PFX format, I need to convert it from PFX to PEM format before using. > > > > Is there any API

Re: Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, Mathieu Malaterre wrote: > Hi there, > > I am trying to decrypt a file like this: > > $ openssl asn1parse -in sec -inform DER > 0:d=0 hl=2 l=inf cons: SEQUENCE > 2:d=1 hl=2 l= 9 prim: OBJECT:pkcs7-envelopedData >13:d=1 hl=2 l=inf cons: cont

Re: add a new cipher to OpenSSL

2009-04-29 Thread Victor Duchovni
On Wed, Apr 29, 2009 at 05:03:00AM -0700, siavash fallahdoost wrote: > I want to add new cipher algorithms to openssl library and rebuild > openssl on Windows(VC++). > i'd like to know the exact procedure for adding new cipher and testing it. If this is homework for an academic project, you shoul

Re: API to convert PFX to PEM format.

2009-04-29 Thread Victor Duchovni
On Tue, Apr 28, 2009 at 01:48:20PM -0700, Govinda Rajulu wrote: > I am writing an application that uses openssl, I will be getting certificate > in PFX format, I need to convert it from PFX to PEM format before using. > > Is there any API available to convert certificate from PFX to PEM format.

Re: errcode = 20 : unable get the local issuer certificate

2009-04-29 Thread loubot
I want to not "make install" the openssl 0.9.8k to MAC OS, but I want to link the dynamic library(libssl.0.9.8.dylib and libcrypto.0.9.8.dylib). I has copy the two dylib to other MAC OS's "/usr/lib". I has modified that wpa supplicant makefile's "-lcrypto" to "-lcrypto.0.9.8" and "-lssl" to "-lss

add a new cipher to OpenSSL

2009-04-29 Thread siavash fallahdoost
Hi all, I want to add new cipher algorithms to openssl library and rebuild openssl on Windows(VC++). i'd like to know the exact procedure for adding new cipher and testing it. Thanks in advance, Siavash

Re: Issue with openssl-1.0.0-stable-SNAP-20090429

2009-04-29 Thread Dr. Stephen Henson
On Wed, Apr 29, 2009, The Doctor wrote: > > > Errors are as follow on BSD/OS 4.3 > > test SSL protocol > ../util/shlib_wrap.sh ./ssltest -test_cipherlist > testing SSLv2 cipher list order: ok > testing SSLv3 cipher list order: ok > testing TLSv1 cipher list order: ok > test sslv2 > Available co

Issue with openssl-1.0.0-stable-SNAP-20090429

2009-04-29 Thread The Doctor
Errors are as follow on BSD/OS 4.3 test SSL protocol ../util/shlib_wrap.sh ./ssltest -test_cipherlist testing SSLv2 cipher list order: ok testing SSLv3 cipher list order: ok testing TLSv1 cipher list order: ok test sslv2 Available compression methods: 1: zlib compression 134547716:error:140A90

Decrypting a password encrypted pkcs7-envelopedData

2009-04-29 Thread Mathieu Malaterre
Hi there, I am trying to decrypt a file like this: $ openssl asn1parse -in sec -inform DER 0:d=0 hl=2 l=inf cons: SEQUENCE 2:d=1 hl=2 l= 9 prim: OBJECT:pkcs7-envelopedData 13:d=1 hl=2 l=inf cons: cont [ 0 ] 15:d=2 hl=2 l=inf cons: SEQUENCE 17:d=3 hl=2 l=

openssl-0.9.8d-tls-extensions.patch is not in the latest openssl-0.9.8k.tar.gz

2009-04-29 Thread Debbie (Yue) Xu
Hi, I need the openssl-0.9.8d-tls-extensions.patch in order to get the support for all the functionality needed for EAP-FAST in wpa-supplicant. But I found that even the latest openssl-0.9.8k.tar.gz doesn't include the patch. Can anybody tell me where to download the patch? it's not in the htt

Re: Openssl FIPS 1.1.2 to 1.2 conversion

2009-04-29 Thread Steve Marquess
Mark Schank wrote: > Hi > > I am in the process of upgrading an application which was using the > FIPS 1.1.2 module to using the FIPS 1.2 module and I am looking for a > sanity check. My system is an x86 (AMD Geode LX 800) system running > Linux 2.6.26. > > I noticed the time it takes to execute F

API to convert PFX to PEM format.

2009-04-29 Thread Govinda Rajulu
Hi, I am writing an application that uses openssl, I will be getting certificate in PFX format, I need to convert it from PFX to PEM format before using. Is there any API available to convert certificate from PFX to PEM format. Thanks, Govind.