Re: Problems porting Openssl 1.1.1d to zos.

2020-03-04 Thread Salz, Rich via openssl-users
Perhaps someone should writeup and submit a "NOTES.zos" file to add?

Re: Problems porting Openssl 1.1.1d to zos.

2020-03-04 Thread Patrick Steuer
Regarding perl, this is the version which works for us : > perl -v This is perl 5, version 24, subversion 0 (v5.24.0) built for os390 Copyright 1987-2016, Larry Wall MVS (OS390) port by Mortice Kern Systems, 1997-1999 Perl may be copied only under the terms of either the Artistic License or t

Re: Problems porting Openssl 1.1.1d to zos.

2020-03-04 Thread K Lengauer
Thank you very much Patrick Steuer. This certainly helps! I am now also in the progress of building OpenSSL and come across missing "cflags" and the likes so with your config I can hopefully save some time as well as verify what I already use. I will also share my config in the near future once I

Re: Problems porting Openssl 1.1.1d to zos.

2020-03-04 Thread Michael Mueller
This is a very helpful post. Thank you. We lacked Perl and had no clear path to getting it. Can't say this deficiency caused our project to miss generous targets, but it certainly contributed. On Wed, Mar 4, 2020, 6:07 AM Patrick Steuer wrote: > > I stumbled across this mails when looking for

Re: Ues 'openssl s_server command' to disable TLS1.0

2020-03-04 Thread Matt Caswell
On 04/03/2020 08:31, guoxiaobi...@163.com wrote: > Thanks Matt, > > As your advice, I tried to execute the following both commands to disable TLS > 1.0 for Client and Server separately. Since I have no right to access private > keyfile, of course they failed. Could you please correct me if t

Re: Problems porting Openssl 1.1.1d to zos.

2020-03-04 Thread Patrick Steuer
I stumbled across this mails when looking for information regarding OpenSSL on zOS. Currently, I am working on getting OpenSSL 1.1.1c running on zOS. So far I created my own config "target" inside 10-main.conf based on the old configuration that was used pre OpenSSL 1.1.0. Still, I was not able

RE: Ues 'openssl s_server command' to disable TLS1.0

2020-03-04 Thread guoxiaobinni
Thanks Matt, As your advice, I tried to execute the following both commands to disable TLS 1.0 for Client and Server separately. Since I have no right to access private keyfile, of course they failed. Could you please correct me if the command format is fine? I then will assign them to senior

Signing cms using hash of data instead data

2020-03-04 Thread Ilya Yurkevich
Hello everyone. Is it possible to create cms Signed Data using hash of the input data instead of the data? What I need use? Thanks.