RE: Is dhparam only needed by server when using DHE-related cipher suites

2013-08-27 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Yijun Wu Sent: Tuesday, 27 August, 2013 01:07 It seems that when DHE-related cipher suites are used connection can not be established if the dhparam is not set on the server side. However, when dhparam is set on the server side the connection

PEM_read_RSA_PUBKEY() PEM_read_RSAPublicKey()

2013-08-27 Thread Cyberman Wu
I've tried both to load public key from PEM file, but PEM_read_RSAPublicKey() failed. I can't get any information from manual, so I've googled a lot, and got that opnion: = You might try PEM_read_RSA_PUBKEY() instead of

Re: PEM_read_RSA_PUBKEY() PEM_read_RSAPublicKey()

2013-08-27 Thread Dr. Stephen Henson
On Tue, Aug 27, 2013, Cyberman Wu wrote: I've tried both to load public key from PEM file, but PEM_read_RSAPublicKey() failed. It would help if you said what error you get or posted the file. See also: http://www.openssl.org/support/faq.html#PROG6 I can't get any information from manual

X509 CRLs

2013-08-27 Thread Thaddeus Fuller
Hello all, I had a couple questions about X509 CRLs. 1) It appears that OpenSSL does not check my tree against the CRLs I provide. If I revoke my own leaf certificate, and establish mutually-authenticated SSL, OpenSSL does not prevent the connection from going through. However if I revoke the

Re: [openssl-users] X509 CRLs

2013-08-27 Thread Erwann Abalea
Bonjour, Le 27/08/2013 18:14, Thaddeus Fuller a écrit : Hello all, I had a couple questions about X509 CRLs. 1) It appears that OpenSSL does not check my tree against the CRLs I provide. If I revoke my own leaf certificate, and establish mutually-authenticated SSL, OpenSSL does not prevent

RE: PEM_read_RSA_PUBKEY() PEM_read_RSAPublicKey()

2013-08-27 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Dr. Stephen Henson Sent: Tuesday, 27 August, 2013 08:10 Adding a little: On Tue, Aug 27, 2013, Cyberman Wu wrote: I've tried both to load public key from PEM file, but PEM_read_RSAPublicKey() failed. It would help if you said what

FIPS mode: failure during build-test of shared library: FIPS_check_incore_fingerprint:fingerprint does not match

2013-08-27 Thread TJ
I'm working with the Debian/Ubuntu openssl package for Ubuntu 13.10, Saucy, version 1.0.1e. I'm trying to adapt the Debian package-build to produce a FIPS-linked openssl. I've followed the procedure to download, build and install the FIPS canister v2.0.1 which was successful: $