RE: OpenSSL 1.0.1e with FIPS 2.0 and Visual Studio 2012 -- has anyone made this work for Win32?

just the /fixed flag? Jim Adams -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Tuesday, February 25, 2014 5:14 PM To: openssl-users@openssl.org Subject: Re: OpenSSL 1.0.1e with FIPS 2.0 and Visual S

Exclusive Use of the FIPS Object Module

has an option to use either OpenSSL-FIPS or MS-CAPI, in FIPS mode, for SSL functionality, does that somehow invalidate the claim that the OpenSSL use is validated? Jim Adams Manager, Software Engineering Rocket Software 70 Main St., Suite 51 * Warrenton, VA 20186 * USA Tel: +1.404.364.1735 * Fax

RE: pkcs12 command does not work in FIPS mode

The private key is probably encoded with a non-FIPS-compliant algorithm. Try encoding the private key with PKCS8. Jim Adams Principal Software Developer Rocket Software Email: jad...@rs.com<mailto:jsh...@rocketsoftware.com> Web: bluezone.rocketsoftware.co

RE: 2038 date limit

Windows does not appear to have a signed/unsigned int problem such as you report. Jim Adams -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, June 05, 2008 4:33 PM To: openssl-users@openssl.org Subject: Re: 2038 date limit

RE: OpenSSL FIPS Object Module v1.1.1 patch (v1.1.2) now validated

Steve, The FTP site does not appear to have any of the fips-1.1.2 files available. The HTTP site has the fips-1.1.2.tar.gz, but does not appear to have any of the signature files. Can you confirm the availability of these files? Jim Adams -Original Message- From: [EMAIL PROTECTED

RE: building 0.9.7j with fips parameter

I was recently able to build the 20060323 stable snapshot of 0.9.7j in fips mode with the fips 1.0 canister built per the security policy. (Windows build). Previously when I got the error that the source didn't match the validated source, it was because I had unzipped with CR LF instead of jus

RE: OpenSSL FIPS Certification

mode? Or am I doing something wrong, or is there an additional step in the build process that is not yet documented? Jim Adams Principal Software Developer Seagull Software Systems, Inc. Voice: (540) 341-8440 x102, Fax: (540) 428-3473 -Original Message- From: [EMAIL PROTECTED] [mailto

Questions about FIPS mode in Windows

FIPS certification is technical or political? There seems to be great mystery surrounding the reasons for the holdup. Jim Adams Principal Software Developer Seagull Software Systems, Inc. Voice: (540) 341-8440 x102, Fax: (540) 428

RE: Does anybody know where certs are installed on Windows?

SSL_CTX_load_verify_locations() is called to tell Openssl where your application has stored your .0 root cert files. Windows does not keep its root certs in a directory, or in .0 format. So Openssl cannot verify directly against Windows' certs. You can retrieve Windows' certs using the Crypto

RE: Problem with some self-signed certs

] Subject: Re: Problem with some self-signed certs Hello Jim, Jim Adams wrote: > I am experiencing a problem with self-signed server certificates > generated by z/OS's pskkyman program in my openssl-enabled telnet > client. Usually, a self- signed certificate will generate an err

Problem with some self-signed certs

signed certs. Can anybody tell me how a self-signed cert can generate these errors instead of the "self-signed certificate" error? I have attached the certificate in question. Any help would be appreciated. Jim Adams Principal Software Developer Seagull Software Systems, In