OpenSSL version 1.1.1e published

2020-03-17 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OpenSSL version 1.1.1e released === OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ The OpenSSL project team is pleased to announce the release of version 1.1.1e of our open

Re: AD with PKI authentication - issue on cert generation

2020-03-17 Thread Matt Caswell
On 17/03/2020 12:33, Lionel Monchecourt wrote: > I already tried to replace > > scardLogin=1.3.6.1.4.1.311.20.2.2 > > with > > msSmartcardLogin=1.3.6.1.4.1.311.20.2.2 Try removing this line altogether. OpenSSL already has a built-in object of this name with this OID so it should not be

Re: 回复: Ues 'openssl s_server command' to disable TLS1.0

2020-03-17 Thread Hubert Kario
On Tuesday, 17 March 2020 13:02:36 CET, 163 wrote: Hi Hubert, Sorry for unclear description. I just want to disable TLS 1.0 on Redhat Linux server. After run those both commands, then how to take them effect or no need any. May I have your more advice? there is a language barrier please

AD with PKI authentication - issue on cert generation

2020-03-17 Thread Lionel Monchecourt
Hi, I'm trying to install an AD with PKI auth.I'm so referring to : https://wiki.samba.org/index.php/Samba_AD_Smart_Card_Login Let's put aside of course Samba config .. I'm now trying to generate the root CA. Using the template in the wiki , When I try to openssl req -new req -new

Re: 回复: Ues 'openssl s_server command' to disable TLS1.0

2020-03-17 Thread 163
Hi Hubert, Sorry for unclear description. I just want to disable TLS 1.0 on Redhat Linux server. After run those both commands, then how to take them effect or no need any. May I have your more advice? Chobin > 在 2020年3月17日，19:10，Hubert Kario 写道： > >> On Tuesday, 17 March 2020 10:04:34 CET,

Re: 回复: Ues 'openssl s_server command' to disable TLS1.0

2020-03-17 Thread Hubert Kario
On Tuesday, 17 March 2020 10:04:34 CET, guoxiaobi...@163.com wrote: Hi Matt, I have asked senior colleague for running the following commands on Redhat Linux server. $ openssl s_server -no_tls1 -key keyfile -cert certname $ openssl s_client -no_tls1 May I know any actions will make them take

Re: Create p12 from a .pem with only a private key

2020-03-17 Thread Hubert Kario
On Thursday, 20 February 2020 09:35:56 CET, Estefania wrote: I do not know if I explained well, i have a .pem with a private key inside like this. -BEGIN PRIVATE KEY- masdfasdfasdfasdfasdfasdfasdff asdfasdfasdfasdfasdfasdfasdfasf asdfasfasdfasdfasdfasdfasdfasdf -END PRIVATE KEY-

Re: Regarding engine implementation for RSA and AES

2020-03-17 Thread Matt Caswell
On 17/03/2020 07:42, Mahendra SP wrote: > Hi, > > We are looking at implementing an engine for RSA and AES. > > For AES, looking at the documentation, understand that engine will get > invoked only if the application or SSL library invokes EVP based calls > rather than native AES calls. Is

[no subject]

2020-03-17 Thread hamed salini

回复: Ues 'openssl s_server command' to disable TLS1.0

2020-03-17 Thread guoxiaobinni
Hi Matt, I have asked senior colleague for running the following commands on Redhat Linux server. $ openssl s_server -no_tls1 -key keyfile -cert certname $ openssl s_client -no_tls1 May I know any actions will make them take effect after run? -邮件原件- 发件人: Matt Caswell 发送时间: 2020年3月4日

Regarding engine implementation for RSA and AES

2020-03-17 Thread Mahendra SP
Hi, We are looking at implementing an engine for RSA and AES. For AES, looking at the documentation, understand that engine will get invoked only if the application or SSL library invokes EVP based calls rather than native AES calls. Is this correct ? For RSA, is it mandatory to use EVP for