Re: Addendum, make report included

2006-03-30 Thread William A. Rowe, Jr.
[EMAIL PROTECTED] wrote: I am unable to install openssl 0.9.8a as I sent earlier. Here is make report: Compiler: gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release) EEEK! 2.91? Really? Try a more modern compiler that understands modern assembly syntax. ___

Untrsuted Root CA warning instead of error

2006-03-30 Thread michael Dorrian
The way openssl is set up you load the CAs you trust and if they dont match an unknown CA error happens...is it possible to not have this as an error but a warning and then the user can decide whether to break the connection or not. New Yahoo! Messenger with Voice. Call regular phones from yo

Re: Why is a client certificate needed?

2006-03-30 Thread michael Dorrian
sorry typo client CA = client cert.michael Dorrian <[EMAIL PROTECTED]> wrote:This is the scenario. I have a root CA which i use to sign both the client certificate and server certificate. When you are checking the client certificate all you are checking is if the ip address matches the ip addre

Re: mactel install?

2006-03-30 Thread Nils Larsch
John Russell wrote: ./Configure darwin-i386-cc --prefix=/usr/webtools05/apache2 --openssldir=/usr/webtools05/apache2/ Install on mac (intel) fails with collect2: ld returned 1 exit status make[2]: *** [link_app.] Error 1 make[1]: *** [openssl] Error 2 make: *** [build_apps] Error 1 This is t

Why is a client certificate needed?

2006-03-30 Thread michael Dorrian
This is the scenario. I have a root CA which i use to sign both the client certificate and server certificate. When you are checking the client certificate all you are checking is if the ip address matches the ip address in the certificate but the certificate and ip address could be anyones?. There

Re: Renewing expired certificates

2006-03-30 Thread michael Dorrian
Thanks alot for the response. It helped alot. Bernhard Froehlich <[EMAIL PROTECTED]> wrote: michael Dorrian wrote:> Is this correct or is there a simpler way. I have to revoke all my > client,server and root files and then basically create everything over > again?. It depends on which certs are e

Re: Compilation of OpenSSL-fips-1.0 under Windows

2006-03-30 Thread Dr. Stephen Henson
On Thu, Mar 30, 2006, Gianluca Varenni wrote: > > > Would it be possible to have some hints on how to compile with MSYS? Or > just some links on the mailist list archive, it the topic was already > discussed? > The build procedure has to be the same as the Unix build. So if you install MSYS

Re: Compilation of OpenSSL-fips-1.0 under Windows

2006-03-30 Thread Gianluca Varenni
- Original Message - From: "Dr. Stephen Henson" <[EMAIL PROTECTED]> To: Sent: Thursday, March 30, 2006 12:32 PM Subject: Re: Compilation of OpenSSL-fips-1.0 under Windows On Thu, Mar 30, 2006, Gianluca Varenni wrote: Hi everyone. Is it possible to compile a fips certified version

Addendum, make report included

2006-03-30 Thread InnSites
I am unable to install openssl 0.9.8a as I sent earlier. Here is make report:   OpenSSL self-test report:   OpenSSL version:  0.9.8aLast change:  Remove the functionality of SSL_OP_MSIE_SSLV2_RSA_PADDI...Options:  -mcpu=pentium no-gmp no-krb5 no-mdc2 no-rc5 no-shared no-zlib no-

Trouble making openssl-0.9.8a

2006-03-30 Thread InnSites
Trouble making openssl-0.9.8a: ./config was ok, but make or make test fail:viva:/usr/tmp/openssl-0.9.8a# make testtesting...make[1]: Entering directory `/var/tmp/openssl-0.9.8a/test'(cd ..; make DIRS=crypto all)make[2]: Entering directory `/var/tmp/openssl-0.9

Re: Compilation of OpenSSL-fips-1.0 under Windows

2006-03-30 Thread Dr. Stephen Henson
On Thu, Mar 30, 2006, Gianluca Varenni wrote: > Hi everyone. > > Is it possible to compile a fips certified version of OpenSSL (using > OpenSSL-fips-1.0.tar.gz) under Windows? > > I tried following the instructions in INSTALL.W32, and the result is in the > attached text file. > Yes it is po

Compilation of OpenSSL-fips-1.0 under Windows

2006-03-30 Thread Gianluca Varenni
Hi everyone. Is it possible to compile a fips certified version of OpenSSL (using OpenSSL-fips-1.0.tar.gz) under Windows? I tried following the instructions in INSTALL.W32, and the result is in the attached text file. The same error ***FIPS module directory sanity check failed*** FIPS modu

RE: building 0.9.7j with fips parameter

2006-03-30 Thread Jim Adams
I was recently able to build the 20060323 stable snapshot of 0.9.7j in fips mode with the fips 1.0 canister built per the security policy. (Windows build). Previously when I got the error that the source didn't match the validated source, it was because I had unzipped with CR LF instead of jus

Re: building 0.9.7j with fips parameter

2006-03-30 Thread Dr. Stephen Henson
On Thu, Mar 30, 2006, Tinnerello, Richard wrote: > Hello, > Has anyone been able to build 0.9.7j (OpenSSL-fips-1.0) with the 'fips' > parameter? > We get a hash check error although we have modified nothing in the > distribution: > > make[3]: Leaving directory `/sci/users/OpenSSL/openssl-0.9.7

building 0.9.7j with fips parameter

2006-03-30 Thread Tinnerello, Richard
Title: building 0.9.7j with fips parameter Hello, Has anyone been able to build 0.9.7j (OpenSSL-fips-1.0) with the 'fips' parameter? We get a hash check error although we have modified nothing in the distribution: make[3]: Leaving directory `/sci/users/OpenSSL/openssl-0.9.7j/fips-1.0/hma

Re: Static build of openssl on windows with zlib

2006-03-30 Thread Dr. Stephen Henson
On Thu, Mar 30, 2006, Steve doh wrote: > Hi, > I have a static build of openssl 0.9.7.g > I want to add zlib compression but not dynamically loaded at runtime. > Is it possible to statically link zlib into the openssl build? > If yes, what configure options do you use? > I have tried: > perl confi