KDF algorithms

800-56A) Now my company is going to use OpenSSL instead. I checked OpenSSL and it seems to me that OpenSSL doesn't support these KDF algorithms. My question is - is there any way to implement these algorithms in OpenSSL? Thanks so much in advance, Aaron -- View this message in context

Re: KDF algorithms

Thanks so much for answering my question, Matthew. -- View this message in context: http://openssl.6102.n7.nabble.com/KDF-algorithms-tp45762p45779.html Sent from the OpenSSL - User mailing list archive at Nabble.com. __

CRYPTO_set_mem_functions() Doesn't Work in Version 1.0.1b

/Modules/_ssl.c: Anyone have encountered the same issue? Will this be fixed? Thanks a lot, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/CRYPTO-set-mem-functions-Doesn-t-Work-in-Version-1-0-1b-tp46745.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] Default ciphersuite has changed from 1.0.1l to 1.0.2a?

() I noticed that in routine ssl_get_cipher_by_char() the internal cipher name it gets is DHE_RSA_AES256_SHA which should be corresponding to DHE_RSA_WITH_AES_256_CBC_SHA. My question is if this behavior change is expected? Thanks in advance, Aaron -- View this message in context: http://openssl

[openssl-users] Is there any plan for FIPS to be supported on Linux-aarch64?

, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Is-there-any-plan-for-FIPS-to-be-supported-on-Linux-aarch64-tp57389.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users mailing list

[openssl-users] The default cipher of executable 'openssl'

back to ECDHE-RSA-AES256-SHA? Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-default-cipher-of-executable-openssl-tp58557.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users

[openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

Architecture 2011 crypto extensions'. My question is if the support for SPARC architecture crypto extensions has been Implemented yet? Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Has-the-support-for-SPARC-architecture-crypto-extensions-been

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

Found this, so the feature has been implemented. Aaron Changes between 1.0.1l and 1.0.2 [22 Jan 2015] ... *) Support for SPARC Architecture 2011 crypto extensions, first implemented in SPARC T4. This covers AES, DES, Camellia, SHA1, SHA256/512, MD5, GHASH and modular exponentiation

Re: [openssl-users] The default cipher of executable 'openssl'

Does your test case result in ECDHE being used when you change only the protocol on both ends from ssl3 to tls1? Yes, I tested and verified this. Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl

Re: [openssl-users] The default cipher of executable 'openssl'

in 1.0.1m. The issue started to appear in 1.0.2 rather than 1.0.2a. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58631.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: [openssl-users] The default cipher of executable 'openssl'

Thanks so much, Viktor. Hence, this is an expected behavior change. In this case I will update my application. Aaron. -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58637.html Sent from the OpenSSL - User mailing

Re: [openssl-users] The behavior change of command line utility -- 'openssl'

I wonder if this is an expected behavior change or it is a bug. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/The-behavior-change-of-command-line-utility-openssl-tp58557p58578.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

Hello Andy and David, As the feature owners, would you please give me some tips for how to use the functionality of the feature? Thanks, Aaron The Changes between 1.0.1l and 1.0.2 [22 Jan 2015] ... *) Support for SPARC Architecture 2011 crypto extensions, first implemented in SPARC

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

implementation of GOST engine 2) This is the default 'openssl' installed in Solaris 11.1 ksol1% /usr/bin/openssl engine (t4) SPARC T4 engine support (dynamic) Dynamic engine loading support (pkcs11) PKCS #11 engine support Anybody knows the answer please? Thanks, Aaron -- View this message

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

no-asm solaris64-sparcv9-cc -KPIC make clean make make test make install Anyone knows how to let OpenSSL applications or utilities use SPARC crypto accelerator? Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Has-the-support-for-SPARC-architecture

Re: [openssl-users] Has the support for SPARC architecture crypto extensions been Implemented?

Some additional information here. When testing the default openssl installed in /usr/bin/ on Solaris 11, I saw a much better result below. Hence I believe OpenSSL utility 'openssl' built by me does not use the hardware crypto accelerators at all. Anyone knows the reason? Thanks, Aaron ksol1

[openssl-users] How to let OpenSSL applications/utilities use SunSPARC crypto accelerators?

, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-let-OpenSSL-applications-utilities-use-SunSPARC-crypto-accelerators-tp59163.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users mailing

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Can-OpenSSL-applications-utilities-use-SunSPARC-crypto-accelerators-tp59163p59198.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users

Re: [openssl-users] Can OpenSSL applications/utilities use SunSPARC crypto accelerators?

in Oracle website was obsolete. But my test results could not verify my idea. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/Can-OpenSSL-applications-utilities-use-SunSPARC-crypto-accelerators-tp59163p59218.html Sent from the OpenSSL - User mailing list

[openssl-users] OpenSSL 1.0.1q build fails on RS6000, SunSparc and HPIA

: *** [depend] Error 1 Anyone knows how to solve this issue? Any suggestion is appreciated. Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-1-0-1q-build-fails-on-RS6000-SunSparc-and-HPIA-tp62001.html Sent from the OpenSSL - User mailing list archive

Re: [openssl-users] OpenSSL 1.0.1q build fails on RS6000, SunSparc and HPIA

Thank you very much, Michael. It works. Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-1-0-1q-build-fails-on-RS6000-SunSparc-and-HPIA-tp62001p62018.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

core developer). Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62326.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___ openssl-users

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

Hello, Anyone knows how to check what is updated in commit 9501418ea2287658d1a11ce888ff97fa49e9164d ? Any help is appreciated. Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62344.html Sent from

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

wonder if you could show me what is updated in the commit or let me know how to check it? Your help is appreciated. Thanks again, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62336.html Sent from

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

Thank you very much, jjf. Regards, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62402.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

the issue? Thanks a lot in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289.html Sent from the OpenSSL - User mailing list archive at Nabble.com

Re: [openssl-users] How to fix OpenSSL 1.0.1q Windows x86_64 build failure?

Hi, Anyone knows how to check what is updated in commit 544058202be49a6 ? Thanks, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/How-to-fix-OpenSSL-1-0-1q-Windows-x86-64-build-failure-tp62289p62291.html Sent from the OpenSSL - User mailing list archive at Nabble.com

[openssl-users] OpenSSL FIPS test failure starting from version 1.0.2g

e[1]: Leaving directory `/tzedek_ocsdev/qun/crs/797167/openssl_diff/openssl-1.0.2g.test/test' make: *** [tests] Error 2 Anyone knows how to fix the issue please? Thanks in advance, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-FIPS-test-failure-starting-f

Re: [openssl-users] OpenSSL FIPS test failure starting from version 1.0.2g

Thank you very much, Viktor. It works. Regards, Aaron -- View this message in context: http://openssl.6102.n7.nabble.com/OpenSSL-FIPS-test-failure-starting-from-version-1-0-2g-tp65320p65325.html Sent from the OpenSSL - User mailing list archive at Nabble.com. -- openssl-users mailing list

Openssl

What is the command please to view the entire contents of a certificate? Thank you, Chuck Kyle Hamilton wrote: ergh. My apologies for not catching that. You're right, it shouldn't matter on the client side. Okay... going back to basics (I'm sorry if this seems a bit patronizing, I honestly

SSL and LDAP

Greetings... We are trying to sync up the SSL and LDAP configurations and we are having problems with the SSL certificates allowing Access when LDAP has Locked the Account. Do you have any suggestions ? Thanks Aaron Angel -- NOTICE: The information contained

test

__ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager majord...@openssl.org

openssl-0.9.8k.tar.gz

I have saved this file off the openssl site to my documents. I am trying to copy the *.gz file with secure fx from my documents and the Alpha server using vms 8.3 and it will not allow me to transfer the file. Any ideas on how I get it there to unzip it? Thanks, Chuck

nonblocking implementation question

knows of an implementation out there like this, I'd love to see it. Thanks! -Aaron __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org

Re: nonblocking implementation question

to do one thing and one thing only: provide me the necessary information to handle an SSL connection. Not handle it for me. Not sure if I'm asking this well... -Aaron __ OpenSSL Project http

Re: nonblocking implementation question

On Tue, May 26, 2009 at 5:27 PM, Victor Duchovni victor.ducho...@morganstanley.com wrote: On Tue, May 26, 2009 at 05:02:59PM -0400, Aaron Wiebe wrote: You're looking for a BIO_s_mem. No, he is looking for BIO_new_bio_pair(3) and SSL_set_bio(3). So, apologies for hammering this down

Re: nonblocking implementation question

of misunderstanding for developers. -Aaron __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Certificate Verification

Ok. This is hopefully a simple question, and one that I see quite a bit in the archives. However, everything Ive tried and gleaned from searching the archives have come up nothing. I have server certificate from a Microsoft Domain Controller that was created via MSs certificate authority.

RE: Certificate Verification

openssl CA certificate Simply: cat MScaCERT.pem cacert.pem 2006/10/12, Dr. Stephen Henson [EMAIL PROTECTED]: On Wed, Oct 11, 2006, Aaron Smith wrote: Ok.This is hopefully a simple question, and one that I see quite a bit in the archives.However, everything

N00B needs csr/key help

is hardcoded soemhow into the key and it would be found? I would just try these things, but of course i have to go through the whole process of generating a new csr and getting new keys every time i do that from godaddy. Thanks in advance. Aaron

Wierd Linking issue with 0.9.8d

? Aaron Smith[EMAIL PROTECTED] System Administrator (269) 337-7496 Kalamazoo College

RE: Wierd Linking issue with 0.9.8d

Ah! Excellent! That did indeed correct that annoying error. Thank you. Aaron Smith[EMAIL PROTECTED] System Administrator (269) 337-7496 Kalamazoo College -Original Message- From: [EMAIL PROTECTED

OpenSSL with Windows subordinates

I have an OpenSSL CA running on a BSD 6.1 machine as the root, and am trying to have that act as the parent to subordinate Windows online enterprise CAs. The installation went fine. I signed the Windows subordinate CA cert request with SSL, then converted it to pkcs12 to be installed. That's

RE: OpenSSL with Windows subordinates

certificate. I also executed the command you suggested and tried installing the .der file; it gives the same error. Regards, Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Wednesday, December 27, 2006 11:24 To: openssl

RE: OpenSSL with Windows subordinates

extension has not been observed. Does this mean I may have something configured incorrectly in the openssl.cnf file? One bit of good news though is that I no longer have to export the certificate into .der format; the .pem file worked just fine. Aaron -Original Message- From: [EMAIL

RE: OpenSSL with Windows subordinates

, the OpenSSL root issued the certificate as a simple 'machine' cert, not as a subordinate CA. Am I on the right track? Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 11:55 To: openssl-users

RE: OpenSSL with Windows subordinates

to set up in the overall PKI. I'll also email you copies of the certificates separately. Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 12:34 To: openssl-users@openssl.org Subject: Re: OpenSSL

RE: OpenSSL with Windows subordinates

elsewhere? It didn't work when I placed it in the v3_ca section. Thanks, Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Thursday, December 28, 2006 15:47 To: openssl-users@openssl.org Subject: Re: OpenSSL with Windows

Newca error, -create_serial

Let me preface first by saying I did see some previous users had this problem also. I've even gone so far as to completely wipe the system and start fresh only to have the same issue. Running a FreeBSD 6.2 server with OpenSSL 0.9.8d. After I do the installation, I execute the CA.pl -newca

Openssl root and subordinate, CA creation problem

I've setup an openssl root and a subordinate CA. I have successfully signed CA certificate for the subordinate from the root (used the -newreq option), however when I execute the 'ca.pl -newca' it doesn't set up the subordinate authority at all. When it asks for the CA certificate filename, I

openssl tool vs. EVP API missmatch for desx des-ede3-cbc

I'm having a problem under OS X (10.4.9/Intel) where Openssl 0.9.8e (compiled from source) is returning different encrypted values using the cli (openssl enc) and the EVP interface for desx and des-ede3-cbc. -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing replay

Re: openssl tool vs. EVP API missmatch for desx des-ede3-cbc

crap... hit send not save... rest of the email is below On 4/30/07, Aaron Turner [EMAIL PROTECTED] wrote: I'm having a problem under OS X (10.4.9/Intel) where Openssl 0.9.8e (compiled from source) is returning different encrypted values using the cli (openssl enc) and the EVP interface

Re: Recall: do_cipher function

http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED] -- Aaron Turner http://synfin.net/ http://tcpreplay.synfin.net/ - Pcap editing replay tools for Unix

Custom oid in openssl.cnf

A quick question for everyone... In the openssl.cnf, by default there is a new_oids section with a testoid line to serve as an example. So if I have a unique assigned oid, can I just remove the # on the testoid1 line? I recall reading someone mentioning using a line of dc=(oid number) instead.

SSL Library Error

I apologize in advance if this is not the correct forum for this question. I haven't had much luck in the apache forums. I have an apache 2.0.55 installation that I'm attempting to recompile on an HP-UX 11 system. It has mod_ssl 2.0.66 and I have OpenSSL 0.9.8d installed in /opt/openssl098d.

RE: SSL Library Error

] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 1:57 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 01:43:50PM -0400, Aaron Smith wrote: I apologize in advance if this is not the correct forum for this question. I haven't had much luck

RE: SSL Library Error

] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 4:12 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 03:34:13PM -0400, Aaron Smith wrote: Looking at the output of LDD closer, it looks like the httpd binary is linked to both libraries

RE: SSL Library Error

: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Victor Duchovni Sent: Tuesday, September 11, 2007 4:12 PM To: openssl-users@openssl.org Subject: Re: SSL Library Error On Tue, Sep 11, 2007 at 03:34:13PM -0400, Aaron Smith wrote: Looking at the output of LDD closer, it looks like the httpd

RE: SSL Library Error

... state. This installation has no mention in the ldd output of links to the 0.9.8 so it should be, as far as I can tell, using ONLY the 0.9.7 system, OS installed Openssl libraries. Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marek Marcola Sent

RE: SSL Library Error

The system is 11.11. I'm *pretty* sure everything has been compiled with gcc. I'm compiling apache with gcc, but OpenLDAP and Openssl might have been compiled with something different. The apache install that works was definitely also compiled with gcc and uses the same install of OpenSSL and

How to disable id and password check

Can anyone tell me how to disable id and pw checking when entering a specific web site. I'd like to turn it completely off. Thanks, Chuck Mark wrote: my last mail seem to be lost somewhere.. I got it! Hi all, Im testing an SSL server with s_client. I want to implement client

OpenSSL 0.9.8a Crashes Apache--and a Fix

has already. Hope this helps someone... Aaron Aaron Greenspan President CEO Think Computer Corporation http://www.thinkcomputer.com __ OpenSSL Project http://www.openssl.org User Support Mailing

0.9.6j vs 0.9.7b

appreciated. ---Aaron AxelsenAIM: AAAK2Email: [EMAIL PROTECTED]Want reliable web hosting ataffordable prices?www.modevia.com Web Dev/Design Community/Zine www.developercube.com

0.9.6j vs 0.9.7b

? Thanks is advance your your assistance, it is much appreciated. - --- Aaron Axelsen AIM: AAAK2 Email: [EMAIL PROTECTED] Want reliable web hosting at affordable prices? www.modevia.com Web Dev/Design Community/Zine www.developercube.com -BEGIN PGP SIGNATURE- Version: PGPfreeware 7.0.3

Re: Test

yes, it made it. __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

RE: Where are the reason codes?

Did you call ERR_load_crypto_strings ()? Without it, you won't get the descriptive text. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Putnam Sent: Tuesday, April 27, 2004 10:27 AM To: [EMAIL PROTECTED] Subject: Where are the reason codes? I

Re: Certificate Revocation

That did the trick. Thanks a lot! On Fri, 2004-05-14 at 12:52, Olaf Gellert wrote: Aaron Smith wrote: We have been using OpenSSL to generate certificates for various applications here with a home grown CA (created using openssl ca). We recently started upgrading our servers from

Re: Question about generating keys, certificate requests

Thanks in advance for your help -- - Aaron Smith vox: 269.226.9550 ext.26 http://www.nexcerpt.com fax: 269.349.9076 ...Nexcerpt... Extend Your Expertise

SSL and OSU

them to ssl (https) and leave the other application http or will I have to make it all https if I chose that route? Thanks in advance, Chuck Aaron

description of error numbers?

Where can I find a description of the various error numbers? Here's what I'm getting in my apache logs: OpenSSL: error:14094418:lib(20):func(148):reason(1048) l8r Aaron -- There's no trick to being a humorist when you have the whole government working for you -- Will Rodgers

Trouble Compiling 0.9.6 on Mac OS X Server

Having trouble compiling 0.9.6 on Mac OS X Server, heres the output: Any suggestions? Thanks in advance! [aaron:~/Projects/ApacheSSL/openssl-0.9.6] afaby$ make making all in crypto... ( echo "#ifndef MK1MF_BUILD"; \ echo " /* auto-generated by crypto/Makefile.ssl for cr

Re: Trouble Compiling 0.9.6 on Mac OS X Server

Did you unpack that in the same spot as an older version of OpenSSL? Did you run Configure? No, and yes sh config no-idea -fPIC | Aaron Faby [EMAIL PROTECTED] | | Implementation Specialist, PowerSchool, Inc. | | http

Mac OS X Server Troubles

Has anyone gotten OpenSSL 0.9.6 to compile on Mac OS X Server? If so what arguements did you add to get it to work? Thanks! | Aaron Faby [EMAIL PROTECTED] | | Implementation Specialist, PowerSchool, Inc. | | http://www.powerschool.com

rsa to pkcs8 question

hat format the private key is in? Can I tell how a key is password encrypted? Can I directly generate a pkcs8 key using openssl? Any info would be helpful. Thanks. Aaron __ OpenSSL Project

PEM_read_X509

xperienced this before? Not actually sure about the parameter that I need to add for it to compile successfully. Probably a NULL but I am having so much of these that I am wondering why there is so much of a mismatch between the headers and actual code. Aaron

Re: .CRT

Thanks everyone for the help about .Crt Aaron - Original Message - From: "Massimiliano Pala" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 27, 2000 6:22 PM Subject: Re: .CRT Aaron Galea wrote: Hi, Hi, Does anyone know how to read a .crt certificat

DSA vs RSA

. I am not sure about this, so any help would definitely clarify my ambiguities. Thanks, Aaron

Re: Compilation Errors on Winnt

During Winnt compilation it gives you a number of unresolved externals. The best way is to create a library "crypto.lib" and ensure you set up all the correct paths in the settings. Quite a tedious task!!! - Original Message - From: "Louis Lam" [EMAIL PROTECTED] To: [EMAIL PROTECTED];

x509

Certificate - Attribute 10 Does anyone know what is the difference between them??? or if there is anydocument that explain this??? Thanks, Aaron

Re: Need a certificate verification help

Sorry, it's a typo, of course. I'm using X509_verify_cert(ctx). Was it supposed to work, i.e., successfully verify? -a Dr S N Henson wrote: Aaron Stromas wrote: I am probably making a silly mistake but I've been stuck on it for quite a long time. Please help me to get out of my

Re: Need a certificate verification help

Dr S N Henson wrote: Aaron Stromas wrote: Sorry, it's a typo, of course. I'm using X509_verify_cert(ctx). Was it supposed to work, i.e., successfully verify? See what error you get and see if: openssl verify -CAfile cacert.pem cert.pem works. It does. Returns OK. Is it the code

Resolved. Was: Need a certificate verification help

Dr S N Henson wrote: http://www.openssl.org/support/faq.html#PROG7 for what I suspect is the cause of the error. Yes, it was. OpenSSL_add_all_algorithms() solved it. Thank you. -- Aaron Stromas| "Tick-tick-tick!!!... ja, Pantani is weg..." O

Re: Installation over Linux Slackware

I am running the most current release on that very operating system, any reason you are not running OpenSSL 0.9.X instead of SSLeay? On Monday 23 April 2001 03:32, you wrote: I'm trying to install SSLeay-0.8.1 on Linux-Slackware. Compiling is not right because file standards.h is

RE: DES - 3DES (novice)

? If this IS right, then will I need to create a working certificate for the client next? SSL_CTX_set_cipher_list(yourCTX, RC4-MD5:DES-CBC3-SHA); Thanks very much, I'm sure this is simple and I just need to get these few answers to move forward. Aaron -Original Message- Here's an example

client cert is rejected - y2k?

lf another client certificate and it failed too. i'm going to reissue the server certificate next. has anyone experienced this problem? -- Aaron Stromas Oracle Corp. "Tick-tick-tick!!!... ja, Pantani is weg" (BRTN commentator, L'Alpe d'Huez, 1995 Tour de Fra

Re: client cert is rejected - y2k?

ate next. has anyone experienced this problem? -- Aaron Stromas Oracle Corp. I just tested ours (we also use self-certs), .. no problem, this one was recreated ours on December 21.) I would expect: 1) You only generated a cert with 30 days expiration (created in November). 2) When you gene

Re: Apache SSL side keeps thunkin out...help?

s not pass the SSL info as one would think it would. It just again gives the connection reset, rather than connection refused. Thank you for your help, Aaron Gelner / [EMAIL PROTECTED] Aaron Gelner wrote: Dear List, Since our initial date of receiving our SSL cert CA'd by Thawte, eve

Problems compiling on Solaris x86 (7)

I am trying to compile OpenSSL on my solaris x86 box and I receive the error message below. can anyone help? make[2]: Entering directory `/usr/agray/openssl-0.9.4/crypto/sha' gcc -I.. -I../../include -DTHREADS -D_REENTRANT -O3 -fomit-frame-pointer -m486 -Wall -DL_ENDIAN -DSHA1_ASM -DMD5_ASM

Re: running httpd.conf

] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Aaron Stromas| "

Re: Attempting to use EVP Context initialisation functions under 0.9.6d

REMOVE Tim Gillott wrote: Greetings. I am having trouble initialising both Digest Contexts and Digests using the EVP wrappers. I am using 0.9.6d under Windows XP Pro. I can't seem to find the functions EVP_MD_CTX_init, EVP_MD_CTX_create or EVP_DigestInit_ex in any of the includes or

Re: OpenSSL: Support, Mailing Lists

I just installed mod_ssl on my Mac OS X server and when I try to access it for testing I get the following error message: SSL_connect:error in SSLv2/v3 read server hello A 404:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:460: Any suggestions? Thanks, Aaron

New and bleeding - Install Win64 problems

problem? Or??? Thanks. == Aaron Bahmer Director, Instructional Technology Eastern Wyoming College http://ewc.wy.edu | (307) 532-8284 1-866-327-8996 (1-866-EAST WYO) x8284 __ OpenSSL Project http

RE: New and bleeding - Install Win64 problems

Call me wimpy, but after six hours of fighting the compiling process, I went with the slproweb binary. New certificates are also in place. Thanks for the help--I'm no longer bleeding! == Aaron Bahmer Director, Instructional Technology Eastern Wyoming College http://ewc.wy.edu | (307) 532-8284 1

Apache SSL proxy to Weblogic fails

finished successfully [Thu Sep 18 09:32:14 2014] [info] [client 141.1.3.134] Connection closed to child 2 with standard shutdown (server aaproxiedel1:443) Best regards, -a Aaron Stromas | RSA The Security Division of EMC | Practice Consultant | Identity

RE: Apache SSL proxy to Weblogic fails

) at weblogic.work.ExecuteThread.run(ExecuteThread.java:173 Best regards, -a Aaron Stromas | RSA The Security Division of EMC | Practice Consultant | Identity Fraud Protection Practice | M – 240 271 64 58 | aaron.stro...@rsa.com -Original Message- From: owner

RE: Apache SSL proxy to Weblogic fails

of the values work. Best regards, -a Aaron Stromas | RSA The Security Division of EMC | Practice Consultant | Identity Fraud Protection Practice | M – 240 271 64 58 | aaron.stro...@rsa.commailto:aaron.stro...@rsa.com From: owner-openssl-us

validifying RSA key fingerprint

+h3Q06mqZauu+BeLt147ChuqHXT0hO08TLfM= so how can i convert the ssh-rsa into a fingerprint to compare the two. Or maybe there's even an easier way? TIA, Aaron Martinez ps, i know the above fingerprint and the following ssh-rsa don't match

RE: validifying RSA key fingerprint

On Wed, 2005-05-04 at 14:18 -0700, Miles Bradford wrote: User a class A or B IP If you're offsite - your 192.X.X.X probably won't work. The IP addresses provided were for problem explanation purposes only. if you like, use x.x.x.x. -Original Message- From: Aaron P. Martinez

What US companies need to know about RSA

d and illegal to use in the US without the RSA license. -- Aaron Turner[EMAIL PROTECTED] 650.237.0300 x252 Security Engineer Vicinity Corp. Cell: 408-314-9874 Pager: 650-317-1821 htt

Re: What US companies need to know about RSA

On Mon, 20 Sep 1999, Dave Neuer wrote: -Original Message- From: Aaron D. Turner [EMAIL PROTECTED] To: Stunnel Maillist [EMAIL PROTECTED]; [EMAIL PROTECTED] [EMAIL PROTECTED] Date: Friday, September 17, 1999 5:43 PM Subject: What US companies need to know about RSA After

  1   2   >