Re: Role Separation

2019-09-15 Thread Kyle Hamilton
OpenSSL is a toolkit, not a full implementation. More importantly, it is a library, so anyone who can link against it can perform all operations that the library can support, and the library has no concept of role separation built in. As such, the 'openssl' commandline tool allows the use of any

Role Separation

2019-09-15 Thread Jimmy Jung
I had been poking around the internet looking for implementations of Role Separation for OpenSSL (in this case in Centos). I thought I should ask here as well. By "role separation" I'm thinking that only PKI roles can perform OpenSSL commands and system admins are restricted from these

Re: 1.1.1d LD_LIBRARY_PATH

2019-09-15 Thread Mal via openssl-users
On 14/09/2019 3:26 pm, Hal Murray wrote: > >> Would someone let me know how to add this path permanently, as currently i >> need to re-add on restart ? > > man ld, search for rpath > > Re-built with: ./config -Wl,-rpath,/os/openssl-1.1.1d Worked a treat.

openssl smime/cms unable to handle binary encoded message? (header too long:asn1)

2019-09-15 Thread Carlos Maynard
Hello gentlemen, I am troubleshooting an issue with an AS2 setup, the error I'm getting is AS1_get_obect:header too long:asn1. Playing with another system, I was able to replicate the issue by switching the encoding from Base64 to Binary. Before i get a smart response... the trading partner