Re: FIPS in 1.0.1 windows 7 64 bit compile / link problems

2012-07-06 Thread Dirk Menstermann
Hello Steve, do you see another way to force the error state? Thanks Dirk On 03.07.2012 10:49, Dirk Menstermann wrote: Hello Steve, On 02.07.2012 19:37, Dr. Stephen Henson wrote: As I indicated HEAD wont work as it isn't currently FIPS capable. OK - I will concentrate on 1.0.1c!

Re: rand in Windows

2012-07-06 Thread Thomas J. Hruska
On 7/5/2012 8:56 PM, John wrote: Thomas J. Hruska shineli...@shininglightpro.com wrote in message news:4ff658d9.2010...@shininglightpro.com... On 7/5/2012 8:07 PM, John wrote: Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I am trying to use it to create a random

Re: rand in Windows

2012-07-06 Thread Dr. Stephen Henson
On Thu, Jul 05, 2012, John wrote: Thomas J. Hruska shineli...@shininglightpro.com wrote in message news:4ff658d9.2010...@shininglightpro.com... On 7/5/2012 8:07 PM, John wrote: Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I am trying to use it to create a

EVP_Digest Example Compile Errors

2012-07-06 Thread mmdonley
MacBook 2,1 Mac OS X 10.7.4 Xcode 4.3.3 MacPortsopenssl @1.0.1c_0 (active) When I attempt to compile the example at http://www.openssl.org/docs/crypto/EVP_DigestInit.html using gcc -Wall -I /opt/local/include -o mdtest mdtest.c I get the following errors from gcc: Undefined symbols

-key vs. -passin pass:

2012-07-06 Thread Klaus Klein
Hi Folks, what is the difference between the ca options -key mypassword and -passin pass:mypassword ? Is there any difference or any guideline when to use what? Thanks in advance ... __ OpenSSL Project

Re: EVP_Digest Example Compile Errors

2012-07-06 Thread Thomas Davie
You forgot to specify -L/opt/local/lib, so while it's reading the 1.0.1c headers, it's finding lion's built in 0.9.8 library. Bob On 4 Jul 2012, at 18:29, mmdon...@aol.com wrote: MacBook 2,1 Mac OS X 10.7.4 Xcode 4.3.3 MacPortsopenssl @1.0.1c_0 (active) When I attempt to compile

Re: rand in Windows

2012-07-06 Thread Jakob Bohm
On 7/6/2012 5:17 AM, Thomas J. Hruska wrote: On 7/5/2012 8:07 PM, John wrote: Hello. I have OpenSSL-Win64 version 1.0.1c installed on 64-bit Win7. I am trying to use it to create a random generated file for use in stunnel, using this command openssl rand -out filexyz.rnd -hex 2048 from the

openssl ca - -key vs. -passin pass:

2012-07-06 Thread Klaus Klein
Hi Folks, what is the difference between the ca options -key mypassword and -passin pass:mypassword ? Is there any difference at all (or any guideline which to use when)? Thanks in advance ... __ OpenSSL Project

RE: rand in Windows

2012-07-06 Thread Jeremy Farrell
The simplest thing is simply to ignore the error. It's trying to write a file in a location which is not writeable by ordinary users. The file it's trying to write helps work around a deficiency in some ancient versions of Windows, helping ensure the randomness of future calls to the command.

A few questions about non-blocking I/O in a secure HTTP server

2012-07-06 Thread James Marshall
I'm trying to write a secure HTTP server with pipelining, using OpenSSL. It uses non-blocking I/O, and I have a few questions. The behavior I'm seeing is: I start the server on localhost, then I open a browser and try to access the server. The browser hangs with Waiting for localhost...; the

Re: OpenSSL FIPS Object Module 1.2.4 support for Apple iOS and OS X

2012-07-06 Thread Steve Marquess
On 07/05/2012 12:43 PM, Alex Chen wrote: Thanks for the information, Steve. I do have some questions about the FIPS module. 1. What does 'support' mean? Does it involve source code change or is it simple changes in the configure script to make the code compile correctly in a specific OS

Re: OpenSSL FIPS Object Module 1.2.4 support for Apple iOS and OS X

2012-07-06 Thread Alex Chen
Thanks, Steve. Alex On 7/6/12 4:36 PM, Steve Marquess marqu...@opensslfoundation.com wrote: On 07/05/2012 12:43 PM, Alex Chen wrote: Thanks for the information, Steve. I do have some questions about the FIPS module. 1. What does 'support' mean? Does it involve source code change or is