Does Openssl 0.9.8g Support RSASSA-PKCSV1.5 with EMSA PKCSV1.5

Can any one tell which API i need to use for the above Encryption method according to RFC3447 to Sign a message with SHA256 algorithm.. -- View this message in context: http://old.nabble.com/Does-Openssl-0.9.8g-Support-RSASSA-PKCSV1.5-with-EMSA-PKCSV1.5-tp32316532p32316532.html Sent from the Op

Problem with moving SSL cert from Apache (Linux) to another Apache (Windows)

Hi all, I have issue with moving working SSL cert from Apache with OpenSSL, I had asked this question before on serverfault but no solution yet. Hope someone in this mailing list can help me solve the problem. We just setup new Windows machine as a web server, with Apache 2.2.19 with openssl insta

RE: Using the FIPS Object Module

OK, thanks Steve. I'll build the FIPS Capable OpenSSL as you have advised. Regards Harvey From: Steve Marquess [mailto:marqu...@opensslfoundation.com] Sent: Tuesday, 23 August 2011 10:34 a.m. To: Harvey Shepherd Cc: openssl-users@openssl.org Subject: Re: Using the FIPS Object Module On 08/22/201

Re: Using the FIPS Object Module

On 08/22/2011 05:28 PM, Harvey Shepherd wrote: > ... >> >> Building the FIPS module (fipscanister.o) and the usual shared >> libraries out of the same source distribution is unwise. For the >> older v1.2.3 module, the shared libraries generated as a byproduct >> of the FIPS module build are unsuppo

Re: Help compiling,assembling and linking RC4 code.

On 19 Aug 2011, at 4:08 AM, rastir...@rastirrat.force9.co.uk wrote: > What I am try to do is build the assembly language version of RC4. So far > I have been able to create the rc4-586.asm file by running the rc4-586.pl > script. > > I specifically want to run rc4speed and rc4test but using the

RE: Using the FIPS Object Module

Hi Steve, Thanks for the reply - I appreciate it. Please see my comments below. > > Sorry if the answer to this posting seems obvious, but I'm not very > knowledgeable when it comes to build processes. I'm trying to build a > version of Net-SNMP that only uses FIPS recognised algorithms for > SNM

Problem at creating a certificate from a web-frontend

Hello community, I have a problem with creation of certificates to a self-written web-frontend. The situation: I want to create a more secure access of our network with openvpn. So far connection via openvpn and manual creation of certificates and keys works as expected. OpenVPN uses easy-rsa

Re: creating Master-Key for encryption/decryption

Please read the RFC, it would clearly explain how the master secret is dervied, and from that how the read and write keys are derived. With that you can get to know how to extract the read n write keys. Meanwhile the read and wirte keys are available as part of the ssl object. Check that structure

Re: Problems with stack_st_X509_EXTENSION

On Mon, Aug 22, 2011, Rick Lopes de Souza wrote: > Hi all, > I'm using OpenSSL 1.0.0d and i'm trying to compile the following code: > > TS_TST_INFO *tstInfoOpenssl; > > tstInfoOpenssl->extensions->num = 3; > > (X509_EXTENSION*) requisicaoOpenssl->extensions->data[_i] > > Actually, it's

creating Master-Key for encryption/decryption

I have more than 100 clients that will connect to my server and communicate the data. I am implementing SSL on server side to authenticate the client certificate(X.509) and also client will authenticate the servers certificate. Once the mutual authentication has completed I have to generate master

Re: hi

Ethereal, pls listen on port 443 and check out the handshake messages. Btw the initial client hello (for the very 1st time) would be sent in sslv3 (assuming u have disabled v2, am not sure why ur bothered abt that version, pls disable on ur client and server). Once the initial client hello is sent,

Re: consolidation of CMS with PBE in release

Hi, it is working ok for me now. the command line to encrypt a binary file would be: openssl cms -encrypt -in BINARY.BIN -pwri_password password -binary -outform DER -aes128 -out ENCRYPTED and to decrypt: openssl cms -decrypt -in ENCRYPTED -pwri_password password -inform DER -out DECRYPTED af

Problems with stack_st_X509_EXTENSION

Hi all, I'm using OpenSSL 1.0.0d and i'm trying to compile the following code: TS_TST_INFO *tstInfoOpenssl; tstInfoOpenssl->extensions->num = 3; (X509_EXTENSION*) requisicaoOpenssl->extensions->data[_i] Actually, it's just a piece of the code, but it retrieves these errors: error: ‘str

Esdsa test problem

Hello, We performed long test for Edsa sign(ECDSA_do_sign function) and verify (ECDSA_do_verify function). The test sometimes fails after 20 -30 cycles. The each cycle use the same private and public key and the same digest input. The output of function ECDSA_do_sign in this case depe

RE: hi

Hi,     Thanks for your quich response. One more question. 1) Can you please tell us is there any want to check wat version client and server is using? 2) If the client rollback happens the client can rollback form version 3 to version 2 rt? In this case will it send V2 hello handshake or