Re: openssl 1.0.1i

On 18.09.14 00:04, Tulasi wrote: Hi I installed openssl 1.0.1i fips enabled (fips 2.0.7) When i run the command openssl version, i get this OpenSSL 1.0.0-fips 29 Mar 2010 Why doesn't it show 1.0.1i in the version information. Please help. Did you run 'which openssl' and double-check the

Re: openssl 1.0.1i

Yes this worked .thanks. On Thu, Sep 18, 2014 at 12:31 PM, Øystein Larsen oystein.lar...@usit.uio.no wrote: On 18.09.14 00:04, Tulasi wrote: Hi I installed openssl 1.0.1i fips enabled (fips 2.0.7) When i run the command openssl version, i get this OpenSSL 1.0.0-fips 29 Mar 2010 Why

Re: SSL v3.0 is not set as default protocol upon disabling v2.

Thanks John, After reading through http://tools.ietf.org/html/rfc2246#appendix-E I understood what you meant here, and couls make sense about fallback to SSLv3. TLS version 1.0 and SSL 3.0 are very similar; thus, supporting both is easy. TLS clients who wish to negotiate with SSL 3.0

Query reg AES_NI usage with OpenSSL-1.0.1h

Hi, I have written application code for encryption and decryption using OpenSSL library. I am testing on machine where AES-NI support is present. I am not sure how can I confirm whether execution is using AES-NI instruction set. When run command line openssl speed -evp aes128, I was seeing

TLS handshake failure i/o timeout

I have an ubuntu 14.04 with openssl 1.0.1f-1ubuntu2.3 server running and a another server connecting as the client with ubuntu 12.04 with openssl 1.0.1-4ubuntu5.16. I am getting an error about the TLS handshake failing i/o timeout. I have tried using our internal wildcard certs on both servers

Re: Query reg AES_NI usage with OpenSSL-1.0.1h

I have written application code for encryption and decryption using OpenSSL library. I am testing on machine where AES-NI support is present. I am not sure how can I confirm whether execution is using AES-NI instruction set. ... Any pointers will be appreciated.. OpenSSL has a test for

read call hangs in SSL library

Hi, We have an LDAP client that calls into OpenSSL libraries to talk to a secure LDAP server. If for any reason we lose connection to the LDAP server, the LDAP handle is freed. As part of ldap_unbind(LDAP *ld), the ssl3_shutdown() is called, which calls read and hangs. The stack is as

Re: TLS handshake failure i/o timeout

This may sound basic, but have you verified that the firewall on the server is set up to allow communication from the client? I think Ubuntu's firewall rejects all traffic to ports that don't match what its installed and configured packages claim they run on, without external configuration.

Re: Query reg AES_NI usage with OpenSSL-1.0.1h

Thanks Jeff for really good amount of info.. I have integrated code from below link of HasAESNI() and HasRDRAND() in my application code. AESNI is enabled but RDRAND is not. http://stackoverflow.com/questions/25284119/how-can-i-check-if-openssl-is-suport-use-the-intel-aes-ni . I am using EVP

Re: TLS handshake failure i/o timeout

Kyle, Thanks for the reply. It was certificate issue. After I was able to line the correct certs with the correct key it started working as advertised. Thank you, Eric Speake Web Systems Administrator O'Reilly Auto Parts (417) 862-2674 Ext. 1975 From: Kyle Hamilton aerow...@gmail.com

compilation error

/usr/bin/ld: cannot find -lopenssl this is the error when i have tried to compile the code i attached below i install the openssl lib in ubuntu 12.10 i use eclipse and add at the linker setting openssl usr/include/openssl i don't know how to solve this problem please help -- Warmest regards and

Re: SSL v3.0 is not set as default protocol upon disabling v2.

Actually, Abhijit, I think your question still has merit. The documentation says that a client will use a TLS hello even when SSLv3 is one of its supported protocols. The problem then is, how can such a client communicate with an SSLv3 only server, which probably won’t understand the TLS

RE: compilation error

It’s -lssl, not -lopenssl. From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Amir Reda Sent: Thursday, September 18, 2014 1:33 PM To: openssl-users@openssl.org Subject: compilation error /usr/bin/ld: cannot find -lopenssl this is the error when i have

Re: SSL v3.0 is not set as default protocol upon disabling v2.

On Thu, Sep 18, 2014 at 04:47:22PM -0400, John Lane Schultz wrote: The documentation says that a client will use a TLS hello even when SSLv3 is one of its supported protocols. The problem then is, how can such a client communicate with an SSLv3 only server, which probably won't understand