Re: During client cert verification: RSA_padding_check_PKCS1_type_1:block type is not 01

2019-08-03 Thread Viktor Dukhovni
> On Aug 2, 2019, at 8:21 AM, Graham Leggett wrote: > > Edge using the smartcard to the same site returns the following: > > [Fri Aug 02 13:47:43.238262 2019] [ssl:info] [pid 20742:tid 139771397486336] > SSL Library Error: error:0407006A:rsa > routines:RSA_padding_check_PKCS1_type_1:block

RE: bug in ghash-x86_64.pl for non-AVX assemblers?

2019-08-03 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Richard Levitte > Sent: Friday, August 02, 2019 12:07 > To: openssl-users@openssl.org > Subject: Re: bug in ghash-x86_64.pl for non-AVX assemblers? > > This bug was found a couple of days after 1.1.1b was released. The

bug in ghash-x86_64.pl for non-AVX assemblers?

2019-08-03 Thread Michael Wojcik
I'm trying to build 1.1.1b on an old RHEL 5.5 machine (for reasons too tiresome to explain). It has a rather ancient version of the Gnu assembler, 2.17.50, which ghash-x86_64.pl decides means it doesn't have AVX support. (The script looks for 2.20 or later, basically. I assume that's correct.)

During client cert verification: RSA_padding_check_PKCS1_type_1:block type is not 01

2019-08-03 Thread Graham Leggett
Hi all, I have a WIndows 10 system with a smartcard attached to it. Firefox+Smartcard works great. Edge using the smartcard to the same site returns the following: [Fri Aug 02 13:47:43.238262 2019] [ssl:info] [pid 20742:tid 139771397486336] SSL Library Error: error:0407006A:rsa

1.0.2 to 1.1 migration problem with verify_callback()

2019-08-03 Thread Neptune
I am in the process of migrating our code from the 1.0.2 library to 1.1 and have run across a situation that I am struggling to reconcile: The existing code utilizes the verify_callback() function in order to perform validation measures against a peer certificate. This callback performs

Re: bug in ghash-x86_64.pl for non-AVX assemblers?

2019-08-03 Thread Richard Levitte
This bug was found a couple of days after 1.1.1b was released. The fix us found in commit dbb1340314fcec37662d79720e6566fdd5a232e8 The best thing you can do is to update your source to 1.1.1c, which has this fix and more. Cheers Richard Michael Wojcik skrev: (2 augusti 2019 16:00:59 CEST)

FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())

2019-08-03 Thread Dipak B
Hi, Can anyone help me with following? 1) Calling FIPS_mode_set() from inside a DLL just after SSL_library_init() fails with [error:2D06B06F:lib(45):func(107):reason(111)] 2) This DLL links to a] static libraries (libeay, libssl, libcompat)from FIPS capable OpenSSL. b] static libcurl which is