Re: [openssl-users] Using Windows system certficate store for server authentication

2018-09-08 Thread Viktor Dukhovni
On Sat, Sep 08, 2018 at 01:44:50PM +, Salz, Rich via openssl-users wrote: > OpenSSL does not use *any* certificate store, on any platform, it is up to > the applications to do what they need. More precisely, OpenSSL does not bundle any trusted certificates with the upstream source. OpenSSL

Re: [openssl-users] Using Windows system certficate store for server authentication

2018-09-08 Thread Salz, Rich via openssl-users
OpenSSL does not use *any* certificate store, on any platform, it is up to the applications to do what they need. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Using Windows system certficate store for server authentication

2018-09-08 Thread J Decker
On Fri, Sep 7, 2018 at 11:55 PM Juan Isoza wrote: > > It's a good idea using openssl under windows (with new openssl 1.1.1, we > will be able to use TLS 1.3 under Windows, from 7/2008 to 10/2016) instead > internal windows crypto.. > > But, by example, curl build for windows with openssl need a

Re: [openssl-users] FIPS mode on Windows

2018-09-08 Thread Hubert Kario
On Friday, 7 September 2018 16:18:48 CEST Alessandro Gherardi wrote: > Thank you for your reply. > Looking at the OpenSSL FIPS Security > Policy https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-valid > ation-program/documents/security-policies/140sp1747.pdf, I see the following >

[openssl-users] SSL_connect returns SSL_ERROR_SYSCALL and errno == EWOULDBLOCK

2018-09-08 Thread Jahn, Gerhard
Hi, We are using OpenSSl 1.0.2n in our server running on LINUX. We call SSL_connect() on async socket (after TCP connect completion) to establish a secure connection. According to DOC SSL_get_error(() has to be called if SSL_connect() returns <=0 We do not understand what to do if

Re: [openssl-users] FIPS mode on Windows

2018-09-08 Thread Hubert Kario
On Thursday, 6 September 2018 04:18:38 CEST Alessandro Gherardi via openssl- users wrote: > I have a question: On Windows, should OpenSSL FIPS automatically enable FIPS > mode (FIPS_mode_set(1)) if the FIPS registry > entry HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithm >

Re: [openssl-users] SSL_connect returns SSL_ERROR_SYSCALL and errno == EWOULDBLOCK

2018-09-08 Thread Matt Caswell
On 07/09/18 09:16, Jahn, Gerhard wrote: > Hi, >   > We are using OpenSSl 1.0.2n in our server running on LINUX. > We call SSL_connect() on async socket (after TCP connect completion) to > establish a secure connection. > According to DOC SSL_get_error(() has to be called if SSL_connect() >

[openssl-users] Using Windows system certficate store for server authentication

2018-09-08 Thread Juan Isoza
It's a good idea using openssl under windows (with new openssl 1.1.1, we will be able to use TLS 1.3 under Windows, from 7/2008 to 10/2016) instead internal windows crypto.. But, by example, curl build for windows with openssl need a --insecure parameters or a custom root certificate file. What