[openssl-users] Forthcoming OpenSSL Releases

2018-11-14 Thread Matt Caswell
The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.1.1a, 1.1.0j and 1.0.2q. These releases will be made available on 20th November 2018 between approximately 1300-1700 UTC. These are bug-fix releases. They also contain the fixes for three LOW severity

Re: [openssl-users] Extracting decrypt key for AES from openssl on client side

2018-11-14 Thread Viktor Dukhovni
> On Nov 14, 2018, at 6:54 AM, Hemant Ranvir wrote: > > My main goal here is to use openssl for initial handshake sequence. Once the > connection is established between server and client, decrypt the incoming > message (this time not using the openssl api but rather by using the decrypt >

Re: [openssl-users] File permissions on keys, csr, and certificates

2018-11-14 Thread Peter Magnusson
root:root, chmod 400. And ideally your Root CA files should not be hosted on your web server, otherwise a server compromise also compromises your root authority. https://redmine.lighttpd.net/projects/1/wiki/docs_ssl Permissions Be careful to keep your .pem file private! Lighttpd reads all

[openssl-users] Extracting decrypt key for AES from openssl on client side

2018-11-14 Thread Hemant Ranvir
I have implemented AES 128 encrypt and decrypt functions and tested it with sample data and it checks out perfectly. I used the following reference: https://nvlpubs.nist.gov/nistpubs/fips/nist.fips.197.pdf Next I implemented a dummy SSL client and SSL server which uses openssl to send and receive