RE: Is dhparam only needed by server when using DHE-related cipher suites

2013-08-27 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Yijun Wu >Sent: Tuesday, 27 August, 2013 01:07 >It seems that when DHE-related cipher suites are used connection >can not be established if the dhparam is not set on the server side. >However, when dhparam is set on the server side the connecti

PEM_read_RSA_PUBKEY() & PEM_read_RSAPublicKey()

2013-08-27 Thread Cyberman Wu
I've tried both to load public key from PEM file, but PEM_read_RSAPublicKey() failed. I can't get any information from manual, so I've googled a lot, and got that opnion: = You might try PEM_read_RSA_PUBKEY() instead of PEM_read_

Re: PEM_read_RSA_PUBKEY() & PEM_read_RSAPublicKey()

2013-08-27 Thread Dr. Stephen Henson
On Tue, Aug 27, 2013, Cyberman Wu wrote: > I've tried both to load public key from PEM file, but > PEM_read_RSAPublicKey() failed. > It would help if you said what error you get or posted the file. See also: http://www.openssl.org/support/faq.html#PROG6 > I can't get any information from manu

X509 CRLs

2013-08-27 Thread Thaddeus Fuller
Hello all, I had a couple questions about X509 CRLs. 1) It appears that OpenSSL does not check my tree against the CRLs I provide. If I revoke my own leaf certificate, and establish mutually-authenticated SSL, OpenSSL does not prevent the connection from going through. However if I revoke the

Re: [openssl-users] X509 CRLs

2013-08-27 Thread Erwann Abalea
Bonjour, Le 27/08/2013 18:14, Thaddeus Fuller a écrit : Hello all, I had a couple questions about X509 CRLs. 1) It appears that OpenSSL does not check my tree against the CRLs I provide. If I revoke my own leaf certificate, and establish mutually-authenticated SSL, OpenSSL does not prevent t

RE: PEM_read_RSA_PUBKEY() & PEM_read_RSAPublicKey()

2013-08-27 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Dr. Stephen Henson > Sent: Tuesday, 27 August, 2013 08:10 Adding a little: > On Tue, Aug 27, 2013, Cyberman Wu wrote: > > > I've tried both to load public key from PEM file, but > > PEM_read_RSAPublicKey() failed. > > > > It would help if yo

FIPS mode: failure during build-test of shared library: FIPS_check_incore_fingerprint:fingerprint does not match

2013-08-27 Thread TJ
I'm working with the Debian/Ubuntu openssl package for Ubuntu 13.10, Saucy, version 1.0.1e. I'm trying to adapt the Debian package-build to produce a FIPS-linked openssl. I've followed the procedure to download, build and install the FIPS canister v2.0.1 which was successful: $ ../../openssl-f