Re: OpenSSL beginner...

2012-07-18 Thread Funshine
ohh i just had a 'duh' moment thank you ~ Dominik Oepen-2 wrote: On 17/07/12 05:28, Funshine wrote: Hi ! I want to learn OpenSSL and I'm having trouble getting any meaningful result from their example program. No matter the argument I seem to pass I get 'Unknown message digest'

Re: Make issue with openssl-1.0.0f and openssl-1.0.0j

2012-07-18 Thread Jeremy Hunt
The error message is all important. ar: ../../libcrypto.a: cannot write: Bad address Bad address is an invalid pointer, cannot write means some access or system error, which an invalid pointer can be an instance of. Seeing as you can use ar to read to this file, I assume it is there, even

FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Aunt Jomamma
Sorry if this is duplicate, but I had an issue with the mailer, and not sure if this went... I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using ndk-r8.   I am doing cross-compile on Mac OSX. However, I cannot pass FIPS_mode_set(1). I get the following error: FIPS

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, Aunt Jomamma wrote: Sorry if this is duplicate, but I had an issue with the mailer, and not sure if this went... I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using ndk-r8.   I am doing cross-compile on Mac OSX. However, I cannot pass

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
Its my application producing the error. I've been reading more... perhaps I need to get Android build to link via fipsld to get the valid fingerprint? Does this sound right? Any tips? Thanks. Dr. Stephen Henson st...@openssl.org wrote: On Wed, Jul 18, 2012, Aunt Jomamma wrote: Sorry if

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Jeffrey Walton
On Wed, Jul 18, 2012 at 11:15 AM, Aunt Jomamma aunt.joma...@yahoo.com wrote: Sorry if this is duplicate, but I had an issue with the mailer, and not sure if this went... I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using ndk-r8. I am doing cross-compile on Mac

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
I'm running on 4.0.4 and 2.3.4, with same results on both. - Original Message - From: Jeffrey Walton noloa...@gmail.com To: openssl-users@openssl.org Cc: Sent: Wednesday, July 18, 2012 2:27 PM Subject: Re: FIPS: Incore fingerprint check fails on Android? On Wed, Jul 18, 2012 at 11:15

Re: SSL renegotiation

2012-07-18 Thread Jijo
you can enable using this directive SSLInsecureRenegotiation please refer http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslinsecurerenegotiation documentation. On Mon, Jul 16, 2012 at 11:37 AM, Sebastian Raymond ray.s...@gmail.comwrote: Hello, I was investigating the SSL renegotiation

Testing renegotiation with FTP data channel

2012-07-18 Thread Gokhan Sengun
Hello, We have added SSL/TLS support into our legacy FTP server using OpenSSL. Thanks for the great code BTW :) We are able to test SSL/TLS renegotiation for FTP control channel (port 21) using openssl s_client but looking for a way to test data channel (port 20) renegotiation too. Are you

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Jeffrey Walton
On Wed, Jul 18, 2012 at 3:24 PM, AJ aunt.joma...@yahoo.com wrote: I'm running on 4.0.4 and 2.3.4, with same results on both. Android 4.0 got most of ASLR in place (Android 4.1 finished the randomization and fixed a kernel mis-configuration):

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, AJ wrote: Its my application producing the error. I've been reading more... perhaps I need to get Android build to link via fipsld to get the valid fingerprint? Does this sound right? Any tips? How are you linking your application? If it is to the OpenSSL shared

Make issue with openssl-1.0.0f and openssl-1.0.0j

2012-07-18 Thread Barone, Philip
Jeremy, Thank you very much for your response, Did I tell you it took around 3 hours to get the failure point? It also brought the CPU to it's knees, xload reported like 20 bars. Also, libcrypto.a is only about 5MB when it has been successfully compiled, mine was growing over 11GB when it

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread AJ
This explains it -- thank you -- I was using a static library -- so I would need to use fipsld, if I continue to use static.   However, knowing this, I wanted to try with shared OpenSSL library instead, but my build fails on multiple definition errors. The only difference I made, was to add

Re: FIPS: Incore fingerprint check fails on Android?

2012-07-18 Thread Dr. Stephen Henson
On Wed, Jul 18, 2012, AJ wrote: This explains it -- thank you -- I was using a static library -- so I would need to use fipsld, if I continue to use static.   However, knowing this, I wanted to try with shared OpenSSL library instead, but my build fails on multiple definition errors. The

Re: SSL renegotiation

2012-07-18 Thread Sebastian Raymond
Thanks for the reply. But I have already tried that option. It does not work. I still get the same error. On Wed, Jul 18, 2012 at 9:24 PM, Jijo realj...@gmail.com wrote: you can enable using this directive SSLInsecureRenegotiation please refer