Re: Openssl-1.0.1/FIPS-2.0 FIPS_selftest() fails after successful FIPS_mode_set(1)

2012-02-25 Thread Dr. Stephen Henson
On Fri, Feb 24, 2012, gatewood_gr...@mcafee.com wrote: What is your test environment and method? We've tried this in both our embedded OS (minimized LFS style build) and OpenSUSE. Both ways the result is the same. Specificically tested on Ubuntu 64 bit VM but it should be OK on any

Re: Resources for certificates using OpenSSL (newbie)

2012-02-25 Thread Michael S. Zick
On Fri February 24 2012, Edward Ned Harvey wrote: From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Michael S. Zick You must be new to mailing lists also. Start your own thread, they are cheap here, don't hijack another topic. Mike, How do

Re: Deadlock in RAND_poll's Heap32First call

2012-02-25 Thread sandeep kiran p
MSDN says To enumerate the heap or module states for all processes, specify TH32CS_SNAPALL and set *th32ProcessID* to zero. So it presumably does the heap and module walk for all processes and not only for the current process. Do you think *CreateToolhelp32Snapshot's* lock on the read-only

Windows 7/IE8 CAC enabled sites

2012-02-25 Thread Tammany, Curtis
Hello- We have a Apache 2.2.22/ OpenSSL 1.0.0g/ PHP 5.3.10 CAC-enabled website on a government location. We have a few users with Windows 7/IE8 who used to be able to access the site but were unable to after a Microsoft patch (KB2585542 http://support.microsoft.com/kb/2643584 )was pushed. The

compiling openssl fips mode for iphone

2012-02-25 Thread Fred Chou
Hi, Has anyone had any tips/background knowledge regarding compiling openssl fips mode for iphone (both simulator and device)? I am pretty much trying to do the same thing as posted here

Re: Windows 7/IE8 CAC enabled sites

2012-02-25 Thread Dr. Stephen Henson
On Fri, Feb 24, 2012, Tammany, Curtis wrote: Hello- We have a Apache 2.2.22/ OpenSSL 1.0.0g/ PHP 5.3.10 CAC-enabled website on a government location. We have a few users with Windows 7/IE8 who used to be able to access the site but were unable to after a Microsoft patch (KB2585542

AW: Windows 7/IE8 CAC enabled sites

2012-02-25 Thread Klein, Gerfried
Hi, we had to reduce the ciphers on our servers to the really limited set of KRB5-RC4-MD5 KRB5-RC4-SHA ADH-RC4-MD5 RC4-SHA to work around this really annoying windows update. Gerfried On Fri, Feb 24, 2012, Tammany, Curtis wrote: Hello- We have a Apache 2.2.22/ OpenSSL 1.0.0g/ PHP 5.3.10

Re: Windows 7/IE8 CAC enabled sites

2012-02-25 Thread Dr. Stephen Henson
On Sat, Feb 25, 2012, Klein, Gerfried wrote: Hi, we had to reduce the ciphers on our servers to the really limited set of KRB5-RC4-MD5 KRB5-RC4-SHA ADH-RC4-MD5 RC4-SHA to work around this really annoying windows update. I'd like to try and trace the cause of this and see if a

Decrypt PKCS7 enveloped message with CL interface

2012-02-25 Thread Dirk Eisenberg
Hi, I received a PKCS7 message with enveloped data (:pkcs7-envelopedData) and looking for a way to decrypt the content (PKCS10 CSR) only with the CLI. Is this possible with openssl? I tried several things with the help of the asn1parse command but did not find the solution :-( My message looks

Re: Decrypt PKCS7 enveloped message with CL interface

2012-02-25 Thread Dr. Stephen Henson
On Sun, Feb 26, 2012, Dirk Eisenberg wrote: Hi, I received a PKCS7 message with enveloped data (:pkcs7-envelopedData) and looking for a way to decrypt the content (PKCS10 CSR) only with the CLI. Is this possible with openssl? I tried several things with the help of the asn1parse command