RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread John Unsworth
Thanks. So in the meantime we can remove the DEFINE macros and the pragmas (or just the pragmas as we have done) to build the no-shared libraries. Regards, John. Originalmeddelande Från: Richard Levitte Skickat: 16 maj 2019 08:34:06 GMT-07:00 Till: John Unsworth Ämne: RE:

Re: FIPS module for OpenSSL 1.1.1x

2019-05-16 Thread Dennis Clarke
On 5/16/19 12:14 PM, Michael Wojcik wrote: From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of shiva kumar Sent: Thursday, May 16, 2019 04:30 1) If I upgrade to 1.1.1b will it cause any problem to other applications? which uses openssl for communications. ( say apache

Re: Query related to session resumption in TLS1.3

2019-05-16 Thread Viktor Dukhovni
On Thu, May 16, 2019 at 04:22:13PM +, shalu dhamija via openssl-users wrote: > But the same flow does not work for TLS1.3. In TLSv1.3, sessions are > established after the main handshake has completed. So, I have implemented > the callback SSL_CTX_sess_set_new_cb. And in the callback, I am

Query related to session resumption in TLS1.3

2019-05-16 Thread shalu dhamija via openssl-users
Hi All, I am in process of using TLS1.3 using openssl 1.1.1b version in my client application. In order to use session resumption, I have implemented an external cache when acting as the client. The key to the cache is combination of host and port and the value  associated is SSL_SESSION*.   

RE: FIPS module for OpenSSL 1.1.1x

2019-05-16 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > shiva kumar > Sent: Thursday, May 16, 2019 04:30 > 1) If I upgrade to 1.1.1b will it cause any problem to other applications? > which > uses openssl for communications. ( say apache http server ). I don't think

RE: Build the FIPS Object Module issue on Ubuntu 18.04

2019-05-16 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Jakob Bohm via openssl-users > Sent: Thursday, May 16, 2019 02:21 > > On 16/05/2019 02:11, Paul Dale wrote: > > Just noting that any module built in this manner is *not* FIPS compliant. > > > Only deviations from the

Fwd: RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread Richard Levitte
And now, to openssl-users. Oops... Originalmeddelande Från: Richard Levitte Skickat: 16 maj 2019 08:34:06 GMT-07:00 Till: John Unsworth Ämne: RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix The actual problem is the call of DEFINE macros in safestack.h.

Re: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread Dennis Clarke
On 5/16/19 10:55 AM, John Unsworth wrote: This is sparc 10, building no-shared, oracle studio 12.4. Building shared works fine. The change was introduced in 1.1.1b. OKay, Solaris 10 and for some reason you are using Studio 12.4? Fair enough. I will take a glance. -- Dennis Clarke

RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread John Unsworth
This is sparc 10, building no-shared, oracle studio 12.4. Building shared works fine. The change was introduced in 1.1.1b. -Original Message- From: openssl-users On Behalf Of Dennis Clarke Sent: 16 May 2019 15:50 To: openssl-users@openssl.org Subject: Re: OpenSSL 1.1.1b tests fail on

Re: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread Dennis Clarke
On 5/16/19 6:46 AM, John Unsworth wrote: In the absence of any steer from openssl gurus we will proceed by removing the #pragmas in safestack.h and lhash.h while we build the no-shared libraries on solaris. Hopefully someone will come up with a proper fix at some point. This seems awefully

RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread Ludwig, Mark
Thanks, from someone else who builds no-shared and will need this mod. From: openssl-users On Behalf Of John Unsworth Sent: Thursday, May 16, 2019 5:47 AM To: openssl-users@openssl.org Subject: RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix In the absence of any steer

RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix

2019-05-16 Thread John Unsworth
In the absence of any steer from openssl gurus we will proceed by removing the #pragmas in safestack.h and lhash.h while we build the no-shared libraries on solaris. Hopefully someone will come up with a proper fix at some point. Regards, John From: openssl-users On Behalf Of John Unsworth

FIPS module for OpenSSL 1.1.1x

2019-05-16 Thread shiva kumar
Hi, I wanted to move from OpenSSL 1.0.2r to 1.1.1b. I have some doubts they are 1) If I upgrade to 1.1.1b will it cause any problem to other applications? which uses openssl for communications. ( say apache http server ). 2) can I expect FIPS module for 1.1.1b as well ? 3) since OpenSSL 1.1.1b

Re: Build the FIPS Object Module issue on Ubuntu 18.04

2019-05-16 Thread Jakob Bohm via openssl-users
On 16/05/2019 02:11, Paul Dale wrote: Just noting that any module built in this manner is *not* FIPS compliant. The distribution must be unmodified and build exactly as per the documentation. Any change to the files or the build process renders the result invalid from a FIPS perspective.