Re: OpenSSL 3.0 FIPS module configuration file

2022-02-16 Thread Richard Dymond
On Tue, 15 Feb 2022 at 09:53, Tomas Mraz wrote: > Please note that there are two checksums in the configuration file. One > of them is the FIPS module checksum and the other is the checksum of > the configuration. You can copy the file across machines if it is > without the configuration checksum

Re: Fwd: Trying to generate a RSA private key

2022-02-16 Thread mary mary
Hi Victor, Thanks for advising me and for the links. I'm learning a lot, despite the bad news Thanks. Kind regards loredana Il giorno mer 16 feb 2022 alle ore 15:30 Viktor Dukhovni < openssl-us...@dukhovni.org> ha scritto: > On Wed, Feb 16, 2022 at 11:16:03AM +0100, mary mary wrote: >

Re: Unable to load PKCS#12 with password and no MAC

2022-02-16 Thread Tomas Mraz
Yes, unfortunately PKCS12_parse currently does not support PKCS12 files without the MAC. Such support could be easily added. As a workaround you can look at how the pkcs12 application is implemented and use these calls instead. Regards, Tomas Mraz, OpenSSL On Wed, 2022-02-16 at 14:09 +, Flor

Re: Fwd: Trying to generate a RSA private key

2022-02-16 Thread Viktor Dukhovni
On Wed, Feb 16, 2022 at 11:16:03AM +0100, mary mary wrote: > But now the issue would become different, and I'll try to share it > possibly even if the subject changes, in case i could get advice. I > needed the private key for adding it in wireshark for decoding some > encrypted messages exchange

Unable to load PKCS#12 with password and no MAC

2022-02-16 Thread Florin Spatar
Hi, I am trying to use OpenSSL 3 in FIPS mode to load a PKCS#12. First, I got this error: [root@q032 ~]# openssl pkcs12 -nokeys -info -in agent.p12 -passin pass:opsware_admin MAC: sha256, Iteration 2048 MAC length: 32, salt length: 8 Error verifying PKCS12 MAC; no PKCS12KDF supp

答复: What is plan of the next LTS version?

2022-02-16 Thread Chenxinping via openssl-users
Got it, Thanks -邮件原件- 发件人: Matt Caswell [mailto:m...@openssl.org] 发送时间: 2022年2月16日 20:09 收件人: Chenxinping ; openssl-users@openssl.org 主题: Re: What is plan of the next LTS version? There is an ongoing OMC vote (started earlier today) to answer this question. The proposal is that 3.0 will

Re: What is plan of the next LTS version?

2022-02-16 Thread Matt Caswell
There is an ongoing OMC vote (started earlier today) to answer this question. The proposal is that 3.0 will be made the LTS. You can track the vote here: https://github.com/openssl/general-policies/issues/9 Matt On 16/02/2022 12:06, Chenxinping via openssl-users wrote: 3.0 is not LTS version,

What is plan of the next LTS version?

2022-02-16 Thread Chenxinping via openssl-users
3.0 is not LTS version, and 1.1.1 will be supported until 11th September 2023, What is the next LTS version? And what is the release plan? Refer: The latest stable version is the 3.0 series supported until 7th September 2023. Also available is the 1.1.1 series which is our Long Term Support (LTS)

Re: Fwd: Trying to generate a RSA private key

2022-02-16 Thread mary mary
Hello Mark, Thank you so much for your input. Indeed there is not an entry for the private key, and that let me understand why i could not extract it. But now the issue would become different, and I'll try to share it possibly even if the subject changes, in case i could get advice. I needed the p