RE: How can I pass data to a running instance of OpenSSL CLI on Windows within a batch file?

2012-11-14 Thread Funnell, Leon
Carl, Thanks for your reply. I would love to have a service which I could call, unfortunately my Windows development skills don't stretch that far as I am an infrastructure person with some basic VBscripting skills. Do you (or another member of this list as CC'ed) have something that

Re: How can I pass data to a running instance of OpenSSL CLI on Windows within a batch file?

2012-11-14 Thread John Zavgren
Leon: I suggest that you write a program that uses file descriptors for IO? I'd write it in C. On Mon, Oct 22, 2012 at 5:51 AM, Funnell, Leon leon.funn...@catlin.comwrote: We have Windows application which passes data to OpenSSL.exe to encrypt as a Windows command, then scrapes the encrypted

RE: How can I pass data to a running instance of OpenSSL CLI on Windows within a batch file?

2012-11-14 Thread Carl Young
I would hope that one of us could provide you something given a week or so... very busy with work currently but I'm sure I could do something in time. Carl From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] on behalf of John Zavgren [j...@zavgren.com] Sent: 14 November

Re: I can't believe how much this sucks

2012-11-14 Thread Jakob Bohm
On 11/13/2012 11:24 PM, Pierre DELAAGE wrote: If we would have to have deep understanding of the various codes we are using everyday (I am myself a programmer, and openssl WCE contributor), we would not have enough time to work, to produce anything. Anyway understanding what the code is

Re: How can I pass data to a running instance of OpenSSL CLI on Windows within a batch file?

2012-11-14 Thread Jakob Bohm
(Top posting to keep this thread consistent) Hi, As for encrypting/decrypting a file via stdin/stdout, the openssl.exe program can already do that (it is almost the default behavior for those commands that encrypt/decrypt things, you may need to add the -passin option to indicate if the

certool v.s. openssl - broken/mis-interpreted sha256 cert issue.

2012-11-14 Thread Dirk-Willem van Gulik
Folks, Have a CA (created by certtool, validates in openssl as self signed just fine) and a server cert (created with certtool, signed with certool) which des NOT validate in openssl. However the signature (when extracted with openssl its asn1parse; openssl its rsautl and openssl its sha256)

Openssl FIPS and Boost

2012-11-14 Thread Nou Dadoun
Hi folks, We have several projects that use openssl in both FIPS-mode and non-FIPS-mode; one of the projects that we have that does not use FIPS-mode is one that uses the Boost ASIO library in which we can reach done into the openssl properties to get properties and operations that aren't

Re: Openssl FIPS and Boost

2012-11-14 Thread Jeffrey Walton
On Wed, Nov 14, 2012 at 12:32 PM, Nou Dadoun ndad...@teradici.com wrote: Hi folks, We have several projects that use openssl in both FIPS-mode and non-FIPS-mode; one of the projects that we have that does not use FIPS-mode is one that uses the Boost ASIO library in which we can reach done

Re: certool v.s. openssl - broken/mis-interpreted sha256 cert issue.

2012-11-14 Thread Dirk-Willem van Gulik
On 14 nov. 2012, at 18:42, Dirk-Willem van Gulik di...@webweaving.org wrote: Have a CA (created by certtool, validates in openssl as self signed just fine) and a server cert (created with certtool, signed with certool) which des NOT validate in openssl. However the signature (when

Re: FIPS 2.0.2 module

2012-11-14 Thread Steve Marquess
On 11/14/2012 04:15 AM, Fredrik Jansson wrote: Hi! I have compiled the 2.0.2 FIPS module, when I call FIPS_module_version_text() it returns FIPS 2.0.1 validated test module 12 Jun 2012. It seems a bit odd that it says 2.0.1 and test, does this indicate that I have made a mistake when

Re: certool v.s. openssl - broken/mis-interpreted sha256 cert issue.

2012-11-14 Thread Dr. Stephen Henson
On Wed, Nov 14, 2012, Dirk-Willem van Gulik wrote: Folks, Have a CA (created by certtool, validates in openssl as self signed just fine) and a server cert (created with certtool, signed with certool) which des NOT validate in openssl. However the signature (when extracted with openssl

Re: [openssl-users] Re: certool v.s. openssl - broken/mis-interpreted sha256 cert issue.

2012-11-14 Thread Erwann Abalea
In addition to Mr Henson answer, your CA certificate doesn't have any keyUsage extension, depending on the toolkit it may not be considered a valid CA. Your countryName AVA is wrong, too. It must be only 2 characters long, NL in your case. -- Erwann ABALEA - yuppiexpédidétritus: cadavres

Re: certool v.s. openssl - broken/mis-interpreted sha256 cert issue.

2012-11-14 Thread Dirk-Willem van Gulik
On 14 nov. 2012, at 19:58, Dr. Stephen Henson st...@openssl.org wrote: On Wed, Nov 14, 2012, Dirk-Willem van Gulik wrote: Folks, Have a CA (created by certtool, validates in openssl as self signed just fine) and a server cert (created with certtool, signed with certool) which des NOT

OpenSSL/FIPS Object Module and FIPS compliance - testing some assertions

2012-11-14 Thread mclellan, dave
[If this is posted a 2nd time, my apologies, I believe my subscription was broken] We are starting our FIPS implementation soon (FIPS OM 2.0 and OpenSSL 1.0.1) and I'd like to test out this set of assumptions (or maybe they are 'assertions') - In the context of OpenSSL, FIPS

Re: OpenSSL/FIPS Object Module and FIPS compliance - testing some assertions

2012-11-14 Thread Jeffrey Walton
On Wed, Nov 14, 2012 at 3:25 PM, mclellan, dave dave.mclel...@emc.com wrote: ... We are starting our FIPS implementation soon (FIPS OM 2.0 and OpenSSL 1.0.1) and I’d like to test out this set of assumptions (or maybe they are ‘assertions’) - In the context of OpenSSL, FIPS

RE: OpenSSL/FIPS Object Module and FIPS compliance - testing some assertions

2012-11-14 Thread mclellan, dave
Thanks for that clarification. It's not so cut and dry, I see. About this: ... and don't even bother to build fipscanister.o... Then on what grounds could they claim FIPS compliance? Dave -Original Message- From: owner-openssl-us...@openssl.org

Re: OpenSSL/FIPS Object Module and FIPS compliance - testing some assertions

2012-11-14 Thread Jeffrey Walton
On Wed, Nov 14, 2012 at 4:21 PM, mclellan, dave dave.mclel...@emc.com wrote: Thanks for that clarification. It's not so cut and dry, I see. About this: ... and don't even bother to build fipscanister.o... Then on what grounds could they claim FIPS compliance? Exactly ;) And the more

Re: OpenSSL/FIPS Object Module and FIPS compliance - testing some assertions

2012-11-14 Thread Steve Marquess
On 11/14/2012 04:21 PM, mclellan, dave wrote: Thanks for that clarification. It's not so cut and dry, I see. About this: ... and don't even bother to build fipscanister.o... Then on what grounds could they claim FIPS compliance? There is a common confusion between FIPS compliant