RE: Enabling Logging in OpenSSL

2012-09-10 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar Sent: Monday, 10 September, 2012 01:56 Answering -users only, this isn't a -dev question. I have a challenge befor me where i have to debug a SSL handshake failure. Client has OpenSSL libraries and Server is Microsoft SQL Server.

Re: Confused: different results on different OSs

2012-09-10 Thread Ben White
No, look at your output: the certificate chain is identical. What differs is the result of verification against each system's truststore, which is the set of CA (root) certs it trusts. Since you didn't specify -CAfile or -CAdir on s_client, it's using (whatever is in) the default

Re: FIPS validation process

2012-09-10 Thread Steve Marquess
On 09/08/2012 10:03 AM, V.Ravikumar wrote: Hello All, I would be so thankful if somebody explains the application fips validation process in details. Also need purpose of below files and how they will be used in validation process. fipscanister.o fipscanister.o.sha1 fips_premain.c:

Re: Enabling Logging in OpenSSL

2012-09-10 Thread Mithun Kumar
Hello Dave, Please find my reply inline On Mon, Sep 10, 2012 at 1:52 PM, Dave Thompson dthomp...@prinpay.comwrote: From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar Sent: Monday, 10 September, 2012 01:56 Answering -users only, this isn't a -dev question. I have a challenge

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
I have moved the iOS directory to one level above and I am able to generate the 2.0 module. One more difference that I have observed between 1.2 and 2.0 for iOS is: when I built the FIPS module, I also had libcrypto.a, libssl.a etc. in my /usr/local/ssl/Release-iphoneos/lib. I did not build a

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Steve Marquess
On 09/10/2012 10:31 AM, Taraniteja Vishwanatha wrote: I have moved the iOS directory to one level above and I am able to generate the 2.0 module. One more difference that I have observed between 1.2 and 2.0 for iOS is: when I built the FIPS module, I also had libcrypto.a, libssl.a etc. in my

Re: FIPS_mode_set(1) always returns false

2012-09-10 Thread Taraniteja Vishwanatha
Thanks Steve. I wish you had the equipment for some more time :(. I am taking a look at the Makefile.shared which is the helper makefile to link shared libraries. Hope to find a clue. On Mon, Sep 10, 2012 at 10:47 AM, Steve Marquess marqu...@opensslfoundation.com wrote: On 09/10/2012 10:31 AM,

Does this mailinglist work?

2012-09-10 Thread Carlo Wood
I just sent a long mail... but it doesn't seem to appear on the list :/ -- Carlo Wood ca...@alinoe.com __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Does this mailinglist work?

2012-09-10 Thread Charles Mills
Yes, it works. It may be moderated. Please be patient. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Carlo Wood Sent: Monday, September 10, 2012 10:34 AM To: openssl-users@openssl.org Subject: Does this mailinglist

RE: Enabling Logging in OpenSSL

2012-09-10 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Mithun Kumar Sent: Monday, 10 September, 2012 08:17 On Mon, Sep 10, 2012 at 1:52 PM, Dave Thompson dthomp...@prinpay.com wrote: 2. If it's a handshake failure, can you use commandline s_client? That has logging builtin, use -msg

RE: Confused: different results on different OSs

2012-09-10 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Ben White Sent: Monday, 10 September, 2012 06:17 snip my previous advice, can't easily reformat Calling openssl with the -CApath pointing to the certificate store resolves this issue, so it's definitely related to this. However, there seems to