Re: Mac OS X and SSL Client Certitficates [UPDATE]

2012-10-14 Thread Tom Browder
On Fri, Oct 12, 2012 at 8:59 AM, Tom Browder tom.brow...@gmail.com wrote: I have successfully generated SSL client certs (generated with openssl 1.0.1c) used by Safari, Firefox, and Chrome on Linux and Windows plus IE 9 on Windows, but I cannot get successful access with either Safari or

Re: top 10 mistakes when using libopenssl?

2012-10-14 Thread Dr. Stephen Henson
On Sat, Oct 13, 2012, Ken Goldman wrote: On 10/10/2012 8:08 PM, Kyle Hamilton wrote: Suggestions from my experience: If you include the library, #1 for novices has to be: 1 - Using strlen() to get the length of encrypted data. I'd add... Forgetting to call OpenSSL_add_all_algorithms

SSL_connect with pselect failing

2012-10-14 Thread Derek Cole
Hello, I am trying to use SSL_connect. I have bound a socket to my interface, set up the context, and call SSL_connect(). This is returning a -1, which I catch, and call SSL_get_error() to fall through a switch statement. It is retuning a SSL_ERROR_WANT_WRITE So I am trying to use pselect in a

win32 exe linked with -lssl -lcrypt

2012-10-14 Thread ml
hello sir and doctor i am a little question concerning the presence of libssl.dll libcrypt.dll into the win32 standard system or OS into linux this lib are very standard its the same when are the poor win32 OS is ready -- gpg --keyserver pgp.mit.edu --recv-key C2626742

Re: SSL_connect with pselect failing

2012-10-14 Thread Derek Cole
Nevermind. I didn't realize that I did have the call in there for my socket connect() (which was in another part of the code for non-ssl connections...it is needed for both). I had though SSL_connect took care of that too. On Sun, Oct 14, 2012 at 5:35 PM, Derek Cole derek.c...@gmail.com wrote:

RE: SSL_connect with pselect failing

2012-10-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole Sent: Sunday, 14 October, 2012 17:36 I am trying to use SSL_connect. I have bound a socket to my interface, set up the context, and call SSL_connect(). This is returning a -1, which I catch, and call SSL_get_error() to fall through a

RE: Encryption algorithm

2012-10-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Alex Chen Sent: Friday, 12 October, 2012 21:31 The 'openssl cipher -v' command shows the following cipher suites: snip If both the client and server uses the sample version of openssl library and they only calls OpenSSL_add_all_algorithms() to

RE: Firefox unhappy with my self signed Cert

2012-10-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole Sent: Friday, 12 October, 2012 17:06 Interesting. While I was playing around with this, I actually noticed that if I use the -subj option on the CSR, I am not able to do this. I was able to get it working by adding the common name

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of ml Sent: Sunday, 14 October, 2012 17:54 i am a little question concerning the presence of libssl.dll libcrypt.dll into the win32 standard system or OS into linux this lib are very standard its the same when are the poor win32 OS is ready

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread ml
Le dimanche 14 octobre 2012 à 18:10 -0400, Dave Thompson a écrit : From: owner-openssl-us...@openssl.org On Behalf Of ml Sent: Sunday, 14 October, 2012 17:54 i am a little question concerning the presence of libssl.dll libcrypt.dll into the win32 standard system or OS into linux

RE: win32 exe linked with -lssl -lcrypt

2012-10-14 Thread Jeremy Farrell
From: ml [mailto:m...@smtp.fakessh.eu] Sent: Sunday, October 14, 2012 11:33 PM Le dimanche 14 octobre 2012 à 18:10 -0400, Dave Thompson a écrit : From: owner-openssl-us...@openssl.org On Behalf Of ml Sent: Sunday, 14 October, 2012 17:54 i am a little question concerning the presence

Re: FIPS seed_pid issue

2012-10-14 Thread Kumar Ghanta
Thank you very much for the quick response Stephen. Is it fine if we allow parent and child processes to share the same seed? I just want to know if there are any NIST restrictions. If possible, can you please elaborate on how does openssl takes care automatically after 1.2? On Fri, Oct 12, 2012

RE: Keys for des-ede encryption

2012-10-14 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of naveen Sent: Saturday, 13 October, 2012 21:59 I have a question related to openssl. I need to give two keys k1 and k2 for ede encryption(for des). Now how do I give it in the command line ? I see that there is a pass parameter and iv parameter,