Thanks. So in the meantime we can remove the DEFINE macros and the pragmas (or
just the pragmas as we have done) to build the no-shared libraries.
Regards,
John.
Originalmeddelande
Från: Richard Levitte
Skickat: 16 maj 2019 08:34:06 GMT-07:00
Till: John Unsworth
Ämne: RE:
On 5/16/19 12:14 PM, Michael Wojcik wrote:
From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of
shiva kumar
Sent: Thursday, May 16, 2019 04:30
1) If I upgrade to 1.1.1b will it cause any problem to other applications? which
uses openssl for communications. ( say apache
On Thu, May 16, 2019 at 04:22:13PM +, shalu dhamija via openssl-users wrote:
> But the same flow does not work for TLS1.3. In TLSv1.3, sessions are
> established after the main handshake has completed. So, I have implemented
> the callback SSL_CTX_sess_set_new_cb. And in the callback, I am
Hi All,
I am in process of using TLS1.3 using openssl 1.1.1b version in my client
application. In order to use session resumption, I have implemented an external
cache when acting as the client. The key to the cache is combination of host
and port and the value associated is SSL_SESSION*.
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of
> shiva kumar
> Sent: Thursday, May 16, 2019 04:30
> 1) If I upgrade to 1.1.1b will it cause any problem to other applications?
> which
> uses openssl for communications. ( say apache http server ).
I don't think
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of
> Jakob Bohm via openssl-users
> Sent: Thursday, May 16, 2019 02:21
>
> On 16/05/2019 02:11, Paul Dale wrote:
> > Just noting that any module built in this manner is *not* FIPS compliant.
> >
> Only deviations from the
And now, to openssl-users. Oops...
Originalmeddelande
Från: Richard Levitte
Skickat: 16 maj 2019 08:34:06 GMT-07:00
Till: John Unsworth
Ämne: RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix
The actual problem is the call of DEFINE macros in safestack.h.
On 5/16/19 10:55 AM, John Unsworth wrote:
This is sparc 10, building no-shared, oracle studio 12.4. Building shared works
fine. The change was introduced in 1.1.1b.
OKay, Solaris 10 and for some reason you are using Studio 12.4?
Fair enough. I will take a glance.
--
Dennis Clarke
This is sparc 10, building no-shared, oracle studio 12.4. Building shared works
fine. The change was introduced in 1.1.1b.
-Original Message-
From: openssl-users On Behalf Of Dennis
Clarke
Sent: 16 May 2019 15:50
To: openssl-users@openssl.org
Subject: Re: OpenSSL 1.1.1b tests fail on
On 5/16/19 6:46 AM, John Unsworth wrote:
In the absence of any steer from openssl gurus we will proceed by
removing the #pragmas in safestack.h and lhash.h while we build the
no-shared libraries on solaris. Hopefully someone will come up with a
proper fix at some point.
This seems awefully
Thanks, from someone else who builds no-shared and will need this mod.
From: openssl-users On Behalf Of John
Unsworth
Sent: Thursday, May 16, 2019 5:47 AM
To: openssl-users@openssl.org
Subject: RE: OpenSSL 1.1.1b tests fail on Solaris - solution and possible fix
In the absence of any steer
In the absence of any steer from openssl gurus we will proceed by removing the
#pragmas in safestack.h and lhash.h while we build the no-shared libraries on
solaris. Hopefully someone will come up with a proper fix at some point.
Regards,
John
From: openssl-users On Behalf Of John
Unsworth
Hi,
I wanted to move from OpenSSL 1.0.2r to 1.1.1b. I have some doubts they are
1) If I upgrade to 1.1.1b will it cause any problem to other applications?
which uses openssl for communications. ( say apache http server ).
2) can I expect FIPS module for 1.1.1b as well ?
3) since OpenSSL 1.1.1b
On 16/05/2019 02:11, Paul Dale wrote:
Just noting that any module built in this manner is *not* FIPS compliant.
The distribution must be unmodified and build exactly as per the documentation.
Any change to the files or the build process renders the result invalid from a
FIPS perspective.
14 matches
Mail list logo