AW: AES-GCM decrypt with OpenSSL 1.1.1 - when to set the tag?

2021-11-23 Thread Lynch, Andrew via openssl-users
> I've raised a PR to correct the docs here: > > https://github.com/openssl/openssl/pull/17111 > > Hopefully that is sufficient to convince your reviewers. Thanks, Matt. That should do the trick. Regards, Andrew.

AES-GCM decrypt with OpenSSL 1.1.1 - when to set the tag?

2021-11-23 Thread Lynch, Andrew via openssl-users
Hi, We have an application that uses OpenSSL 1.1.1k to receive AES256-GCM encrypted messages. The streamed data starts with a 12 byte IV, then the ciphertext and ends with the 16 byte tag. Our decryption code is based directly on the sample code in the Wiki and the distribution.

URI with commas in crlDistributionPoints

2021-01-04 Thread Andrew via openssl-users
I'm following a procedure for generating an offline CA for use with Microsoft Active Directory Certificate Services for my own internal use, with instructions available here: https://www.altaro.com/hyper-v/wsl-offline-root-certificate-authority-windows-pki/ I am, however, using a different