Re: AES-256 using CTR mode.

2013-01-16 Thread Matt Caswell
No, as far as I know, there is no support for OCB. For the documentation on which modes are supported check evp.h!!! :-) Matt On 16 January 2013 02:57, Rohit Bansal banr...@gmail.com wrote: Thanks Matt. On that note, do we have support for OCB mode in openssl. Where can i find the

Re: How to remove certificate from X509_STORE?

2013-01-16 Thread Srivardhan Hebbar
Thanks Dave, I tried with the 2nd option. But people here didn't agree so finally went ahead with the 3rd option. Thanks for soln. Sri On Fri, Jan 11, 2013 at 3:25 AM, Dave Thompson dthomp...@prinpay.comwrote: From: owner-openssl-us...@openssl.org On Behalf Of Srivardhan Hebbar Sent:

id-smime-aa-signingCertificate - attribute definition

2013-01-16 Thread kapetr
Hello, I'm not able to find RFC, where is defined this attribute. An example in Time Stamp Reply looks like that: - 523:d=7 hl=3 l= 179 cons: SEQUENCE 526:d=8 hl=2 l= 11 prim: OBJECT

Building OpenSSL for EFI

2013-01-16 Thread Caswell, Paul
Hello list, I would like (need) to get OpenSSL working in the EFI (Extensible Firmware Interface) environment (a pre-boot environment). I am able to setup a TCP connection from the EFI environment to the outside world using the Tianocore EFI Toolkit - this toolkit provides a BSD like API for

Re: id-smime-aa-signingCertificate - attribute definition

2013-01-16 Thread kapetr
I'm sorry - I was blind ?! :-/ The both ESSCertIDs are in same Signing Certificate entity. But -I'm still interesting to find RFC with def of id-smime-aa-signingCertificate attribute type. Thanks. - PŮVODNÍ ZPRÁVA - Od: kapetr kap...@mizera.cz Komu: openssl-users@openssl.org

Web site: Send to Majordomo broken

2013-01-16 Thread Bruce Cran
On http://www.openssl.org/support/community.html the mailing list subscription feature is broken - clicking Send to Majordomo just displays the majordomo.cgi script. -- Bruce Cran __ OpenSSL Project

RE: Web site: Send to Majordomo broken

2013-01-16 Thread Memmott, Lester
It appears that the web site went through a few changes recently and some aren't working quite right yet. Another case is on the FIPS page (http://www.openssl.org/docs/fips/) the link for the User Guide is also broken. Thanks, Lester -Original Message- From:

Re: Web site: Send to Majordomo broken

2013-01-16 Thread Jeffrey Walton
On Wed, Jan 16, 2013 at 9:02 AM, Bruce Cran br...@cran.org.uk wrote: On http://www.openssl.org/support/community.html the mailing list subscription feature is broken - clicking Send to Majordomo just displays the majordomo.cgi script. It also looks like its injectable: $query_string =

Re: Web site: Send to Majordomo broken

2013-01-16 Thread Lutz Jaenicke
On 01/16/2013 03:29 PM, Memmott, Lester wrote: It appears that the web site went through a few changes recently and some aren't working quite right yet. Another case is on the FIPS page (http://www.openssl.org/docs/fips/) the link for the User Guide is also broken. Thanks, Lester

After adding GOST engine, ssh stop work

2013-01-16 Thread Михаил Гаврилов
Hi all! I have problem. After adding to openssl.cnf following lines: openssl_conf = openssl_def [openssl_def] engines = engine_section [engine_section] gost = gost_section [gost_section] engine_id = gost dynamic_path = /usr/lib64/openssl/engines/libgost.so default_algorithms = ALL CRYPT_PARAMS

Re: Web site: Send to Majordomo broken

2013-01-16 Thread Valentin Bud
On Wed, Jan 16, 2013 at 02:02:23PM +, Bruce Cran wrote: On http://www.openssl.org/support/community.html the mailing list subscription feature is broken - clicking Send to Majordomo just displays the majordomo.cgi script. -- Bruce Cran

X.509 certificates in OpenSSL FIPS 2.0

2013-01-16 Thread Rahul Godbole
Hi We are using X.509 certificates in our product and are newly moving to OpenSSL FIPS 2.0 from previous versions. I see issues in calling the previous X.509 APIs in this version. The directory crypto/x509 not there in OpenSSSL 2.0. Can someone please tell me how I could use x509 certificates