out range error compiling fips 1.2.3

2011-09-09 Thread Kenneth Goldman
I'm getting this error compiling openssl-fips-1.2.3.tar.gz, which seems to be the latest. It seems to be well known on openssl-dev, but I don't know what to do about it. Any ideas? gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -m64 -DL_ENDIAN

Re: How to Check Whether the resources of X509 has been freed when it is freed by X509_free()

2011-09-09 Thread Jakob Bohm
On 9/9/2011 5:21 AM, Erwin Himawan wrote: Hi All, I have several questions associated with freeing resources of X509 struct. snippet of my code: X509 *x509Cert = X509_new(); if (x509Cert == NULL) printf(Error instantiating X509 object\n); /* do some processing with my x509Cert object */ /*

Re: out range error compiling fips 1.2.3

2011-09-09 Thread Jakob Bohm
On 9/8/2011 9:35 PM, Kenneth Goldman wrote: ... A second question. In researching this error, I saw someone compile with ./config fipscanisterbuild That's not in the INSTALL file. Do I need this? -- Ken Goldman kg...@watson.ibm.com 914-784-7646 (863-7646) Hmm, in previous versions of the

Re: out range error compiling fips 1.2.3

2011-09-09 Thread Dr. Stephen Henson
On Thu, Sep 08, 2011, Kenneth Goldman wrote: I'm getting this error compiling openssl-fips-1.2.3.tar.gz, which seems to be the latest. It seems to be well known on openssl-dev, but I don't know what to do about it. Any ideas? gcc -I.. -I../.. -I../../include -DOPENSSL_THREADS

Re: How to Check Whether the resources of X509 has been freed when it is freed by X509_free()

2011-09-09 Thread Erwin Himawan
Thanks for the explanation and pinter for the relevant ASN1 function. Erwin -- From: Jakob Bohm jb-open...@wisemo.com Sent: Friday, September 09, 2011 4:22 AM To: openssl-users@openssl.org Subject: Re: How to Check Whether the resources of X509

TLS Alert insufficient security

2011-09-09 Thread Alban D.
Hi there, I'm trying to connect to a SSL server, but on specific cipher suites, the server sends me an alert insufficient security, during the handshake. It's the first time I'm seeing that (and I've played with lots of servers)... Anyone knows the exact meaning of that alert ? I'm guessing the

Creating AES Key for encryption in server side and share the key

2011-09-09 Thread krishnamurthy santhanam
I am implementing SSL on server side to authenticate the client certificate(X.509) and also client will authenticate the servers certificate(X.509). Once the mutual authentication has completed server has to generate AES key for encryption and decryption. In server side I am creating 256

openssl 1.0.1 release 20110910 issue

2011-09-09 Thread The Doctor
Script started on Fri Sep 9 22:35:59 2011 doctor.nl2k.ab.ca//usr/source/openssl-1.0.1-stable-SNAP-20110910$ exitmakeegrep bsdi Conf figure.nl2k.ab.ca//usr/source/openssl-1.0.1-stable-SNAP-20110910$ egrep bsdi configure.nl2k.ab.ca//usr/source/openssl-1.0.1-stable-SNAP-20110910$