Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Jeffrey Walton
On Tue, Jan 6, 2015 at 12:37 AM, Viktor Dukhovni wrote: > On Tue, Jan 06, 2015 at 12:23:35AM -0500, Jeffrey Walton wrote: > >> Use -outform to control the output encoding. I think the two values of >> interest are DER and PEM. > > What actually matters are multiple ASN.1 key formats. Whether the

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Tue, Jan 06, 2015 at 12:23:35AM -0500, Jeffrey Walton wrote: > Use -outform to control the output encoding. I think the two values of > interest are DER and PEM. What actually matters are multiple ASN.1 key formats. Whether the ASN.1 is raw binary or packaged in PEM is secondary. $ opens

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Jeffrey Walton
On Tue, Jan 6, 2015 at 12:04 AM, jack seth wrote: > Thanks for the response. First I am running this on Windows 7. Questions > > 1. How can I determine what key format my ca.key is in? If its binary, then its simply ASN.1/DER encoded. If its ASCII (human readable) and starts with MII (IIRC), t

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Mon, Jan 05, 2015 at 11:04:19PM -0600, jack seth wrote: > Thanks for the response. First I am running this on Windows 7. Questions > > 1. How can I determine what key format my ca.key is in? openssl asn1parse -in ca.key (don't post the output). plus some knowledge of the various A

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread jack seth
Thanks for the response. First I am running this on Windows 7. Questions 1. How can I determine what key format my ca.key is in? 2. You say there are multiple key formats for the same key, but for my peace of mind I would like to get the same key format that I originally had. How can I do th

Re: [openssl-users] Need help encrypting my ca.key

2015-01-05 Thread Viktor Dukhovni
On Mon, Jan 05, 2015 at 08:37:24PM -0600, jack seth wrote: > I must be doing something wrong but I can't figure out what it is. I am > trying to encrypt my private ca key with this command > > openssl rsa -in ca.key -out caencrypted.key -aes256 > > This works fine but the problem is I don't g

[openssl-users] Need help encrypting my ca.key

2015-01-05 Thread jack seth
I must be doing something wrong but I can't figure out what it is. I am trying to encrypt my private ca key with this command openssl rsa -in ca.key -out caencrypted.key -aes256 This works fine but the problem is I don't get the original key back when I decrypt it using this command openss

[openssl-users] POST Integrity test/fingerprint failure on 32-bit MIPS/R3000 with openssl-fips-2.0.5

2015-01-05 Thread Rohit Kaushal
Hello, I am working on a validation with a FIPS lab including algorithm testing etc. and not claim any OpenSSL 2.0.5 FIPS certs. For this, i have made minor changes to the fips-openssl-2.0.5 source including the fips_test_suite.c file. This (modified) fips_test_suite binary with fipscanister.o stat

Re: [openssl-users] OpenSSL and iCloud

2015-01-05 Thread Jeffrey Walton
On Mon, Jan 5, 2015 at 5:31 PM, wrote: > Never mind - I got it to work by using: meth = SSLv23_method(); You might consider removing the weak/wounded stuff: meth = SSLv23_method(); ... long flags = SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_COMPRESSION; SSL_CTX_set_options(c

[openssl-users] Web site problem

2015-01-05 Thread Erik Forsberg
Starting a few days ago, www.openssl.org when clicking on the Source tab, then selecting the GitWeb tab, redirects you to git.openssl.org (probably ok ? ) but that page returns the OpenSSL home page (same as www.openssl.org) so no web git access. DNS issues perhaps ? __

Re: [openssl-users] OpenSSL and iCloud

2015-01-05 Thread openssl
Never mind - I got it to work by using: meth = SSLv23_method(); > >> >> On Jan 5, 2015, at 12:01 PM, open...@comaxis.com wrote: >>> Are there any known problems using OpenSSL with iCloud? I am trying to >>> connect to imap.mail.me.com using port 993. My call to SSL_Connect() >>> returns 0, with S

Re: [openssl-users] OpenSSL and iCloud

2015-01-05 Thread openssl
> > On Jan 5, 2015, at 12:01 PM, open...@comaxis.com wrote: >> Are there any known problems using OpenSSL with iCloud? I am trying to >> connect to imap.mail.me.com using port 993. My call to SSL_Connect() >> returns 0, with SSL_get_error() returing 1 (SSL_ERROR_SSL). I am using >> OpenSSL vers

Re: [openssl-users] OpenSSL and iCloud

2015-01-05 Thread Wim Lewis
On Jan 5, 2015, at 12:01 PM, open...@comaxis.com wrote: > Are there any known problems using OpenSSL with iCloud? I am trying to > connect to imap.mail.me.com using port 993. My call to SSL_Connect() > returns 0, with SSL_get_error() returing 1 (SSL_ERROR_SSL). I am using > OpenSSL version 1.0.

[openssl-users] OpenSSL and iCloud

2015-01-05 Thread openssl
Are there any known problems using OpenSSL with iCloud? I am trying to connect to imap.mail.me.com using port 993. My call to SSL_Connect() returns 0, with SSL_get_error() returing 1 (SSL_ERROR_SSL). I am using OpenSSL version 1.0.1h, running on Win32. I can use this code with any other IMAP se

[openssl-users] Forthcoming OpenSSL releases

2015-01-05 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Forthcoming OpenSSL releases The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.0.1k, 1.0.0p and 0.9.8zd. These releases will be made available on 8th January. They will fix a nu

Re: [openssl-users] [openssl-announce] Another record-breaking donation from Smartisan Technology

2015-01-05 Thread elaine ossipov
Congrat's, that is so good to hear, and looking forward to some awesome breakthroughs! :) ~e --- Begin Message --- In May of this year the OpenSSL project received what has been our largest single donation to date, 100 RMB (roughly 16 USD or 133000 EUR) from Smartisan Technology (http://w

[openssl-users] OpenSSL source reformat

2015-01-05 Thread Matt Caswell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have previously announced our intention to reformat the entire codebase into a more consistent style (see our roadmap document here: https://www.openssl.org/about/roadmap.html) Since then we have been busy working towards doing that. I'd like to ma

[openssl-users] X509_CINF_dup fails with "invalid object encoding" error

2015-01-05 Thread VVPrasad Chalumuri
Hi, I was trying to duplicate the X509_CINF structure variable using ASN1_item_dup with OpenSSL 1.0.1i code. But, it fails with the following error. The same code works fine, if I run it against OpenSSL 0.9.8zb. *error code; 218906840 in a_object.c line 303.Error message: error:0D0C40D8:as