Building OpenSSL 0.9.8k under Win32

Hi, All When building OpenSSL library under Win32 I've encountered and error C2220: warning treated as error - no object file generated After removing compiler flag /WX from ntdll.mak - build completed I was building using Visual C++ 9.0 (Visual Studio 2008) Here is nmake output // cl

Re: Use of generic name STRING in safestack.h

Hi Steve, Thank you for your quick reply. I tried openssl-1.0.0-stable-SNAP-20090918.tar.gz, but got into some build problems again: ... rand_win.c: In function `RAND_poll': rand_win.c:517: error: `__try' undeclared (first use in this function) ... It seems like this has something to do wits MS's

privateKeyUsagePeriod x509v3 extension

Hi list members, is there a possibility to specify the x509v3 extension privateKeyUsagePeriod in the openssl.conf file for the req and ca commands? It seems, openssl knows the oid and asn1 structure of the extension but doesn't allow you to put it into certificates. When I specify

Re: privateKeyUsagePeriod x509v3 extension

On Fri, Sep 18, 2009, Eisenacher, Patrick wrote: Hi list members, is there a possibility to specify the x509v3 extension privateKeyUsagePeriod in the openssl.conf file for the req and ca commands? It seems, openssl knows the oid and asn1 structure of the extension but doesn't allow you

Re: Building OpenSSL 0.9.8k under Win32

On Fri, Sep 18, 2009, Vadym Stetsiak wrote: Hi, All When building OpenSSL library under Win32 I've encountered and error C2220: warning treated as error - no object file generated After removing compiler flag /WX from ntdll.mak - build completed I was building using Visual C++ 9.0

Re: Use of generic name STRING in safestack.h

On Fri, Sep 18, 2009, Eystein Mly Stenberg wrote: Hi Steve, Thank you for your quick reply. I tried openssl-1.0.0-stable-SNAP-20090918.tar.gz, but got into some build problems again: ... rand_win.c: In function `RAND_poll': rand_win.c:517: error: `__try' undeclared (first use

Linking OpenSSL-FIPS application

Title: Evidian Signature Hi all, I'm trying to build an OpenSSL-FIPS application using static libeayfips32.lib library. Environment: OpenSSL 0.9.8k + OpenSSL-FIPS 1.2 + nasm 2.07 + Visual Studio 2005 (VC8). As explained in section 5.3.2 of OpenSSL FIPS 140-2 User Guide, I derived a .mak

Re: Building OpenSSL 0.9.8k under Win32

What arguments are you passing to the Configure script? The normal cause of this is the use of backslashes in pathnames. These weren't escaped properly and you needed to use slashes instead. The latest snapshots should fix this. Steve. -- Dr Stephen N. Henson. OpenSSL project core

Re: Linking OpenSSL-FIPS application

Title: Evidian Signature Jacques Lebastard wrote: perl F:\OPENSSL-FIPS\fips\fipslink.pl /nologo /subsystem:windows /machine:X86 /map /out:Debug\OpenSSLFIPSTest.exe @C:\DOCUME~1\JACQUE~1.LEB\LOCALS~1\Temp\nmA108.tmp ***HASH VALUE MISMATCH FOR FILE fips_premain.c *** at

SSL_Connect fails with error SSL_ERROR_SSL

Hi I am using Linux provided SSL Library OpenSSL 0.9.7a Feb 19 2003. The problem is that SSL_Connect fails with error SSL_ERROR_SSL I am not able to trace the possible reason for error. Any help is valuable as I need to resolve the issue urgently. Regards Anuradha Gupta Technical Leader

Re: Linking OpenSSL-FIPS application

On Fri September 18 2009, Jacques Lebastard wrote: !DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN html head meta content=text/html;charset=ISO-8859-1 http-equiv=Content-Type /head body bgcolor=#ff text=#00 Jacques Lebastard wrote: blockquote

FIPS: unavailable functions?

I just built my first (very basic) FIPS-enabled OpenSSL application on Windows using VC 8. When linking with static libraries (with fipslink.pl...), the following symbols are unresolved: _ERR_error_string _ERR_free_strings _ERR_load_FIPS_strings _ERR_load_crypto_strings _ERR_load_ERR_strings

Re: SSL_Connect fails with error SSL_ERROR_SSL

Once you receive SSL_ERROR_SSL, the next step is to use ERR_get_error(3ssl) to figure out what the specific SSL error was. Before you do this, you should call ERR_load_crypto_strings(3ssl) and SSL_load_error_strings(3ssl) so that you can get the full string; if you don't, you'll get a hexadecimal

Re: .pem certificate loading issue

not-yet-commons-ssl-0.3.11.jar can accomplish what you are trying to do. Details here: http://juliusdavies.ca/commons-ssl/utilities.html#ksb java -cp not-yet-commons-ssl-0.3.11.jar org.apache.commons.ssl.KeyStoreBuilder KeyStoreBuilder converts PKCS12 and PKCS8 to Java Keystore

Getting started at cryptography. Need directions.

Hi all! I don't know nothing about cryptography using sockets. I need to do an application written in C that is a client/server that receives and responds commands. The data must be cryptographed as it will travell in a wireless network. I plan to do this client/server to be used inside an

Re: Getting started at cryptography. Need directions.

OpenSSL provides a toolkit which implements a well-reviewed, cryptographically secure protocol called SSL (and now TLS). For an OpenWRT router, the size of the default compile may be too large to fit into RAM. You can build it without a lot of the optional ciphers, if you know your environment

AES pointers needed..

Hello everyone.. I am presently looking at implementing AES 256bit into an application which I am working on... What I need is pointers as to where I could find example source code about how to do it... Is it possible to do it with OpenSSL? regards Dennis

Re: AES pointers needed..

Hi Dennis, I am presently looking at implementing AES 256bit into an application which I am working on... Is it possible to do it with OpenSSL? It depends on what you want to accomplish, and the mode of operation in which AES-256 will be operating. Can you offer more details? Jeff On

Re: AES pointers needed..

You could use libeay alone (not linking in libssl), and that would include an implementation of AES256. -Kyle H On Fri, Sep 18, 2009 at 5:58 PM, Dennis Morgan dennis.mor...@xtra.co.nz wrote: Hello everyone.. I am presently looking at implementing AES 256bit into an application which I am

Re: AES pointers needed..

Hi, what i am trying to achieve is to encrypt a plain ascii text message Which will be transmitted via a udp or tcp. The application which its been implemented for is for a security product.. regards Dennis --- On Sat, 19/9/09, Jeffrey Walton noloa...@gmail.com wrote: From: Jeffrey