Re: gLite proxy certificate support.

2008-03-03 Thread Richard Levitte
that there is a proxyCertInfo extension to be accepted as such. You're talking about older style proxy certificates, which have not been implemented in OpenSSL, and quite honestly, I hope noone does. Cheers, Richard -- Richard Levitte [EMAIL PROTECTED

Re: Globally Unique Serials in CA Chains

2008-03-05 Thread Richard Levitte
lavalamp a new certificate containing a unique serial number This indicates that both the SC and UC were given the same serial number and were signed by the same CA (scenario 2 above). Cheers, Richard -- Richard Levitte [EMAIL PROTECTED

Re: crypto library in openssl

2008-03-12 Thread Richard Levitte
Qiang.Xu I am not sure whether some algorithm in these functions Qiang.Xu would go awry when dealing with the password $elkins02. They probably don't, but you need to treat them right. Cheers, Richard -- Richard Levitte

Re: [EVP_PKEY] How to duplicate it ?

2008-05-23 Thread Richard Levitte
. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very

Re: AES support in OPENSSL

2008-12-31 Thread Richard Levitte
*EVP_aes_256_ofb(void); const EVP_CIPHER *EVP_aes_256_ctr(void); Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous celebration - and I'm invited! -- from a friend's blog, translated

Re: Problems build openssl-0.9.8j on OpenVMS

2009-01-17 Thread Richard Levitte
I've seen the same thing. Fixing it. Unfortunately, it will mean that you will have to pick up a snapshot a little later or wait until the next release. Cheers, Richard In message 4971adfe.9030...@tibco.com on Sat, 17 Jan 2009 05:07:58 -0500, Sue Abercrombie ab...@tibco.com said: aberz I am

Re: Format of index.txt file

2009-01-19 Thread Richard Levitte
? elkpichico elkpichico Thanks a lot if somebody can ask me some of the questions. elkpichico I really appreciate. elkpichico elkpichico Regards, elkpichico Andres. -- Richard Levitte rich...@levitte.org http

Re: Problems build openssl-0.9.8j on OpenVMS

2009-02-01 Thread Richard Levitte
of the .c files. aberz aberz Questions, comments, recommendations? Any and all are welcome. aberz aberz Cheers! aberz Sue Abercrombie aberz Senior Architect aberz TIBCO Software Inc. aberz aberz aberz Richard Levitte wrote: aberz I've seen the same thing. Fixing it. Unfortunately, it will mean

Re: what's the difference with or without -evp when using openssl speed

2009-03-05 Thread Richard Levitte
identified above will be called instead. Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous celebration - and I'm invited! -- from a friend's blog, translated from Swedish

Re: compiling 1.0.0-beta2 on OpenVMS

2009-05-13 Thread Richard Levitte
. That sounds quite odd... Unfortunately, I've no VAX/VMS account (only a Alpha/VMS one), so I can't verify or fix. Is there any way you can help us? Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life

Re: compiling 1.0.0-beta2 on OpenVMS

2009-05-15 Thread Richard Levitte
: Wednesday, May 13, 2009 7:02 AM Whalenr To: openssl-users@openssl.org Whalenr Subject: Re: compiling 1.0.0-beta2 on OpenVMS Whalenr Whalenr I can certainly provide a suitable account, if that helps, just let me Whalenr know. Whalenr Whalenr On May 13, 2009, at 8:09 AM, Richard Levitte wrote

Re: Error in 20090826 SNAPs

2009-08-26 Thread Richard Levitte
*** Error code 1 openSSL openSSL Stop. openSSL doctor.nl2k.ab.ca//usr/source/openssl-1.0.0-stable-SNAP-20090826$ less      exit openSSL exit openSSL openSSL Script done on Wed Aug 26 05:28:21 2009 openSSL openSSL Script done on Wed Aug 26 05:28:21 2009 -- Richard Levitte

Re: Building a custom ENGINE?

2009-12-02 Thread Richard Levitte
application will have the code to build redfloyd the ENGINE and register it. redfloyd redfloyd redfloyd redfloyd Are there any good pointers on building an ENGINE? There's an example in demos/engines/rsaref/... does that help? -- Richard Levitte rich...@levitte.org

Re: Identifying openssl version from lib

2010-11-23 Thread Richard Levitte
() Returns a numeric representation of the version, see comments in openssl/opensslv.h for exact numeric details. SSLeay_version(SSLEAY_VERSION) Returns the text representation of the version, including patch level. Cheers, Richard -- Richard Levitte

Re: do i need a dedicated ip address for https?

2010-12-22 Thread Richard Levitte
with your cert vendor and see if they could support a subjectAltName of that type. I do have some doubts, as I'd guess it comes with a price, but it may be worth trying. Cheers, Richard -- Richard Levitte rich...@levitte.org http

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-24 Thread Richard Levitte
assumption is correct, OpenSSL expects the same semantics as malloc(), realloc() and free(), so you free() replacement must be able to handle a NULL argument. Cheers, Richard -- Richard Levitte rich...@levitte.org http

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-25 Thread Richard Levitte
In message 4fbf35d0.3020...@wisemo.com on Fri, 25 May 2012 09:33:36 +0200, Jakob Bohm jb-open...@wisemo.com said: jb-openssl On 5/25/2012 12:30 AM, Richard Levitte wrote: jb-openssl In jb-openssl messagecagxgq09umap5b1bhsyjj54srwrg-syzqnodk5rh_gnt29xa...@mail.gmail.com jb-openssl on Thu, 24

Re: Custom free routine is invoked with NULL argument in openssl 1.0.1

2012-05-26 Thread Richard Levitte
that CRYPTO_malloc(), CRYPTO_realloc() and CRYPTO_free() don't verify the parameters, they are just wrappers around the real memory routines (malloc(), realloc() and free() by default), and rely on those to verify parameters as they see fit. Cheers, Richard -- Richard Levitte

Re: OpenSSL on VAX/VMS

2007-06-10 Thread Richard Levitte
... gabor ... gabor ... gabor gabor I tried the publicly available WASD/SSL package (which also contains gabor these libs), but got the same results. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became

Re: use ssl for ssh transport layer (not proxy bypassing)

2007-07-02 Thread Richard Levitte
) and a small bit of configuration in ~/.ssh/config (which I can share as well). That's the method you have to use anyway if you tunnel over HTTPS (which is what you imply, it seems). Cheers, Richard -- Richard Levitte [EMAIL PROTECTED] http

Re: CryptoSwift 200 PCI Card Errors

2007-08-25 Thread Richard Levitte
/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up

Re: CryptoSwift 200 PCI Card Errors

2007-08-25 Thread Richard Levitte
) to directory where dvdrom_box this library exits. - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became

Re: CryptoSwift 200 PCI Card Errors

2007-08-25 Thread Richard Levitte
is that OpenSSL loads libcswift.so, which in turn loads libswift.so. The messages you get actually show that libcswift.so WAS correctly loaded, but that libswift.so (which, I repeat, should be distributed by the card maker) isn't. Cheers, Richard dvdrom_box Richard Levitte wrote: In message [EMAIL

Re: public key in the binary

2007-10-03 Thread Richard Levitte
-- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up. -- C.S

Re: Building OpenSSL outside the source tree

2007-11-04 Thread Richard Levitte
. But as I said, patches are welcome! Cheers, Richard -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown

Re: Building OpenSSL outside the source tree

2007-11-04 Thread Richard Levitte
/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up

Re: How i can bypass SYS$QIOW()

2008-02-05 Thread Richard Levitte
build on OpenVMS, the solution for you is very simple: do not try to compile ssl/ssl_task.c. As a matter of fact, don't bother with it at all. Cheers, Richard -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I

Re: Shamir Secret Sharing in OpenSSL?

2005-07-06 Thread Richard Levitte
... Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away

Re: OpenSSL 0.9.8 and C89 compliance

2005-07-08 Thread Richard Levitte
of warning. In other words, it's easy to miss. I'll happily correct this for 0.9.8a if I can. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED

Re: openssl 0.9.8: 3rd level certificates verification problem

2005-07-08 Thread Richard Levitte
. What in all this do you call third level certificate? I'd be happy to look at your chain of certificates if needed. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte

Re: openssl 0.9.8: 3rd level certificates verification problem

2005-07-08 Thread Richard Levitte
. - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things

Re: Problem with AES_cbc_encrypt

2005-07-08 Thread Richard Levitte
length information, so you will get decryped plain text with the length you expect. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED

Re: openssl 0.9.8: 3rd level certificates verification problem

2005-07-08 Thread Richard Levitte
/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up

Re: AW: Max length of serial number

2005-07-18 Thread Richard Levitte
consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear

Re: CSR verification

2005-08-08 Thread Richard Levitte
inspiration from... - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away

Re: Not able to do config

2005-08-10 Thread Richard Levitte
who made that package may have used a different compiler than you did. Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED

Re: strange error when trying to sign CSR

2005-08-17 Thread Richard Levitte
Gerd Schering writes: Sorry for this question, of course we have rfc2459. *ahem* 3280 Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED

Re: Format of file index.txt database of a CA

2005-08-25 Thread Richard Levitte
] - Start your day with Yahoo! - make it your home page - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED

Re: MD5SUM openssl-0.9.8.tar.gz

2005-08-29 Thread Richard Levitte
is correct. I tripple-checked it. How did you download? With FTP? Did you remember to set your transfer type to binary before downloading? Cheers, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard

Re: Does OpenSSL support AttributeCertificate RFC 3281?

2005-08-31 Thread Richard Levitte
, Richard - Please consider sponsoring my work on free software. See http://www.free.lp.se/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish

Re: OpenSSH and IPv6

2006-06-15 Thread Richard Levitte
/sponsoring.html for details. -- Richard Levitte [EMAIL PROTECTED] http://richard.levitte.org/ When I became a man I put away childish things, including the fear of childishness and the desire to be very grown up

[ANNOUNCE] OpenSSL 0.9.6b

2001-07-09 Thread Richard Levitte
are: o openssl-0.9.6a.tar.gz [normal] o openssl-engine-0.9.6a.tar.gz [engine] Yours, The OpenSSL Project Team... Mark J. Cox Richard LevitteAndy Polyakov Ralf S. Engelschall Bodo MöllerHolger Reif Dr. Stephen Henson Ulf Möller

[ANNOUNCE] OpenSSL 0.9.6b

2001-07-09 Thread Richard Levitte
] o openssl-engine-0.9.6b.tar.gz [engine] Yours, The OpenSSL Project Team... Mark J. Cox Richard LevitteAndy Polyakov Ralf S. Engelschall Bodo MöllerHolger Reif Dr. Stephen Henson Ulf Möller Geoff Thorpe Ben Laurie Lutz

Re: Why does OpenSSL own all the prefixes in the world?

2014-09-08 Thread Richard Levitte
compatibility (people will suddenly HAVE to have a line saying using namespace openssl; or something like that). Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous celebration - and I'm

Re: How to empty a BIO buffer?

2014-09-08 Thread Richard Levitte
data before resetting, as BIO_get_mem_data() gives you the pointer to the internal BIO_s_mem buffer, not to a duplicate of it. Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous

Re: How to empty a BIO buffer?

2014-09-09 Thread Richard Levitte
values. BIO_reset(bio); -- Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous celebration - and I'm invited! -- from a friend's blog, translated from

Re: How to empty a BIO buffer?

2014-09-09 Thread Richard Levitte
And of course, I noticed this email after sending my own... sorry. In message CALiegf=BytJ-1ZDzcCw3=e2=6moritr87pjunro4cxorysy...@mail.gmail.com on Mon, 8 Sep 2014 18:41:40 +0200, Iñaki Baz Castillo i...@aliax.net said: ibc 2014-09-08 18:35 GMT+02:00 Kyle Hamilton aerow...@gmail.com: ibc The

[openssl-users] A question to the VMS folks out there (SSL_TASK)

2015-04-04 Thread Richard Levitte
or not. Cheers, Richard -- Richard Levitte rich...@levitte.org http://richard.levitte.org/ Life is a tremendous celebration - and I'm invited! -- from a friend's blog, translated from Swedish

[openssl-users] RT was down today, please resend

2015-06-22 Thread Richard Levitte
Hi, due to a mysql screwup, whatever was sent to openssl-b...@openssl.org after 06:00 UTC today was lost (everything before that was safely backed up). If you did send something, I would like to kindly ask you to resend it. Sorry for the inconvenience. Cheers, Richard -- Richard Levitte

[openssl-users] [openssl-announce] Forthcoming releases

2015-06-12 Thread Richard Levitte
Forthcoming OpenSSL releases The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.0.2c, 1.0.1o. These releases will be made available on Friday 12th June. They will fix two specific issues: 1) an HMAC ABI incompatibility with

[openssl-users] [openssl-announce] Clarification on forthcoming releases

2015-06-12 Thread Richard Levitte
Clarification on the forthcoming OpenSSL releases = To clarify, the mentioned HMAC ABI incompatibility occurred in recently released versions 1.0.2b and 1.0.1n which are security fixes but which may cause other problems due to the ABI issue.

Re: [openssl-users] [openssl-dev] Do you use EGD or PRNGD?

2015-06-01 Thread Richard Levitte
a separate program use prngd and write it to a RANDFILE that openssl uses. Probably servers are the most important users, and you could/should have one file per server ... I'd like to remind people of the possibility to make an engine module. Cheers, Richard -- Richard Levitte

[openssl-users] OpenSSL version 1.1.0 pre release 2 published

2016-01-14 Thread Richard Levitte
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.1.0 pre release 2 (alpha) === OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL 1.1.0 is currently in alpha. OpenSSL 1.1.0 pre release 2 has now

[openssl-users] Fw: [openssl-dev] Evolution of build refactoring

2016-02-04 Thread Richard Levitte
Forwarding this here. However, I would prefer discussions to happen on openssl-...@openssl.org, since this is about OpenSSL development. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ --- Begin Message --- Hi, some time

Re: [openssl-users] [openssl-dev] Ubsec and Chil engines

2016-02-22 Thread Richard Levitte
In message <1456140741.4735.272.ca...@infradead.org> on Mon, 22 Feb 2016 11:32:21 +, David Woodhouse <dw...@infradead.org> said: dwmw2> On Sat, 2016-02-20 at 22:55 +0100, Richard Levitte wrote: dwmw2> > dwmw2> > sander> What I would like to see though is f

Re: [openssl-users] [openssl-dev] Ubsec and Chil engines

2016-02-22 Thread Richard Levitte
rsalz> rsalz> But really doubtful to happen in 1.1 as the API freeze is in a month. Yeah, 1.1 is unrealistic, I'm sorry to say. -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] [openssl-dev] Ubsec and Chil engines

2016-02-20 Thread Richard Levitte
gh, if someone would package the already existing engine_pkcs11 with OpenSSL (that packaging doesn't have to be done by the OpenSSL team), *or* with hardware distributions. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] RSA engine is not using the functions mentioned in struct

2017-02-13 Thread Richard Levitte
ine rsa_engine -out cipher.bin openssl pkeyutl -decrypt -in cipher.bin -inkey privkey-B.pem -engine rsa_engine -out rec.txt Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: h

Re: [openssl-users] Fwd: Makefile.org in openSSL 1.1.0d

2017-02-16 Thread Richard Levitte
With 1.1.0 and on, the build system is of the "configure first" model, unconditionally. You will get a working Makefile as a result, and will find more information in README and INSTALL. Cheers, Richard In message

Re: [openssl-users] [openssl-dev] dates, times, durations in next release (commands)

2016-09-06 Thread Richard Levitte
lz> rsalz> Both mean the same thing, from Feb 10 for 30 days. rsalz> rsalz> Comments? It's not a huge step to support full blown ISO 8601 (which has a few more alternatives to specify time intervals *). I like the idea. Cheers, Richard (*) https://en.wikipedia.org/wiki/ISO_8601 --

Re: [openssl-users] [openssl-dev] dates, times, durations in next release (commands)

2016-09-06 Thread Richard Levitte
SD to full blown ISO 8601. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Customize Windows library names

2016-09-15 Thread Richard Levitte
In message <1446abd3-1599-24fe-1340-fc7f3da5e...@wisemo.com> on Fri, 16 Sep 2016 00:12:30 +0200, Jakob Bohm <jb-open...@wisemo.com> said: jb-openssl> On 16/09/2016 00:08, Richard Levitte wrote: jb-openssl> > In message jb-openssl> > <CANt7B+feUe2W7627N

Re: [openssl-users] Customize Windows library names

2016-09-15 Thread Richard Levitte
sl.lib. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Customize Windows library names

2016-09-16 Thread Richard Levitte
In message <CANt7B+c+A1=kadnozo3ugjy0ppe_3vmuf--pmxez_pys+qw...@mail.gmail.com> on Fri, 16 Sep 2016 09:43:37 +0200, Kim Gräsman <kim.gras...@gmail.com> said: kim.grasman> Hi Richard, kim.grasman> kim.grasman> On Fri, Sep 16, 2016 at 12:08 AM, Richard Levitte <le

Re: [openssl-users] Syntax question for subjectAltName certificate extension?

2016-09-25 Thread Richard Levitte
in []-brackets? Without brackets. libcrypto will figure out that it's a IPv6 address from the presence of colons. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Failed to install OpenSSL 1.1.0 using 'nmake install'

2016-09-21 Thread Richard Levitte
Andrew, I think you need to read up in the INSTALL file in 1.1.0. Jing Liu's sequence of commands seems correct to me, and with 1.1.0, the default install prefix *is* C:\Program Files (x86)\OpenSSL\ for VC-Win32. Cheers, Richard In message

Re: [openssl-users] Failed to install OpenSSL 1.1.0 using 'nmake install'

2016-09-21 Thread Richard Levitte
Weird problem. I assume that if you do 'dir ms' while standing in D:\openssl-1.1.0, you will in fact see applink.c. Correct? My I suggest applying the attached patch to util/copy.pl and see if you get a better explanation for the mystery? Cheers, Richard In message on Wed, 21 Sep 2016

Re: [openssl-users] Libeay32.dll

2016-09-28 Thread Richard Levitte
bssl-1_1.dll on Win32. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] mailing list registration renewal - clarify bounce errors

2016-11-08 Thread Richard Levitte
In message <20161108.083722.982336643109774878.levi...@openssl.org> on Tue, 08 Nov 2016 08:37:22 +0100 (CET), Richard Levitte <levi...@openssl.org> said: levitte> In message <CADqLbz+3z=enw9rdj-3ivd-xa-05-dj7rgvv4zeufnq8bxy...@mail.gmail.com> on Mon, 7 Nov 2016 21:50:13 +0

Re: [openssl-users] mailing list registration renewal - clarify bounce errors

2016-11-07 Thread Richard Levitte
ed the problem, for reasons I cannot remember now. I'll have a closer look at what mailman can offer and get back to you. -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Failed to load libssl.so.1.1 while execuitng openssl comand

2016-11-14 Thread Richard Levitte
ould search these library in /usr/local/lib64/ Saurabh.Gupta> directory. Is that on Linux? Configure like this: ./config -Wl,--enable-new-dtags,-rpath,'$(LIBRPATH)' Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- op

Re: [openssl-users] Facing issues with dynamic loading engine RSA methods using e_capi.so library in openssl-1.1.0b.

2016-11-14 Thread Richard Levitte
What do you get from this command? ldd ../engines/capi.so? I think that the configuration example I gave you in my previous email will also help this... Cheers, Richard In message on Fri, 11 Nov 2016

Re: [openssl-users] [openssl-dev] Still seeing test failure in openssl 1.0.2 SNAPHOT 20161031

2016-11-01 Thread Richard Levitte
I just tested on two systems, Debian [unstable] and FreeBSD 8.4, and in both cases, that test goes through with no trouble at all. Could you tell us your exact configuration? If I recall correctly, you have your own hacked configuration, right? Cheers, Richard In message

Re: [openssl-users] [openssl-dev] After building 1.0.2h , ldd output shows current version as 1.0.0. How to CHange this , Why is this so ?

2016-11-03 Thread Richard Levitte
Hi, I'm curious. Why exactly do you want to change the shared library version? That being said, this is not a good idea. I hope I explained why well enough in the thread with the subject "OpenSSL 1.0.2h generates libss.so.1.0.0 instead of libssl.so.1.0.2" started by you on openssl-dev. For

Re: [openssl-users] openssl s_client B as first char sends heartbeat

2016-10-17 Thread Richard Levitte
-ign_eof Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] troubleshooting a puzzling issue

2017-01-13 Thread Richard Levitte
print("v = {}".format(v)) -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build problems on Windows

2017-01-10 Thread Richard Levitte
rces, this is jb-openssl> obviously not intended as advice to people trying to build, more as jb-openssl> something you might consider for an updated version of NOTES.PERL jb-openssl> (after testing it of cause). I've heard of more than one success with Strawberry, we just haven't tested i

Re: [openssl-users] troubleshooting a puzzling issue

2017-01-13 Thread Richard Levitte
st -disabled' (with OpenSSL 1.1.0) to see what's disabled. There are other things that can give you a -1 as well... Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] troubleshooting a puzzling issue

2017-01-13 Thread Richard Levitte
enssl-users> Real answers require real data. E... there's a script attached to the original post. It contains all the data you need, including two certs. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-

Re: [openssl-users] Unable to build with dmake

2017-01-04 Thread Richard Levitte
ot;" rajat.srivastava01> rajat.srivastava01> Please let me know how to resolve this error. Try with nmake, which comes with Visual Studio. (I now noticed we haven't made nmake a requirement, while we expect everyone to use it with the VC-* config targets. We should be more explicit about

Re: [openssl-users] Unable to build with dmake

2017-01-05 Thread Richard Levitte
an Configure itself, so it's unclear how reliably bkaduk> we can prevent it from appearing or modify it to match our bkaduk> requirements more closely. Yes, that happens as part of 'use Config;', unfortunately. I did look around to try to see how to prevent this from happening, but couldn't fi

Re: [openssl-users] MinGW64 / MSYS2 and ./Configure : use of Windows style path causing failures to 'make'

2016-12-27 Thread Richard Levitte
e like (where backslashes make sense) rather than a Unix like shell such as bash (where backslashes don't make sense). So this all tells to me that your /mingw64/bin/perl.exe comes from somewhere else, that you will probably find /usr/bin/perl.exe, and that's the perl you should use. Cheers, Rich

Re: [openssl-users] MinGW64 / MSYS2 and ./Configure : use of Windows style path causing failures to 'make'

2016-12-27 Thread Richard Levitte
In message <1733025605.2034908.1482816244...@mail.yahoo.com> on Tue, 27 Dec 2016 05:24:04 + (UTC), "Ron Gaw " said: ronmlgaw> I am using a MinGW64 / MSYS2 environment to compile OpenSSL1.1.0c, but ronmlgaw> failing consistently after multiple attempts with a few

Re: [openssl-users] openssl-users Digest, Vol 28, Issue 21

2017-03-22 Thread Richard Levitte
ng the cert with PEM_read_bio_X509() and extracting the public key with X509_get0_pubkey() or X509_get0_pubkey(). If IEEE certs differ in format, you must first know the exact byte content, where the public key is in there, make sure it's encoded in DER, and use d2i_EC_PUBKEY() to make a EC_KEY from those by

Re: [openssl-users] mingw 64-bit build of 1.1.0e

2017-03-11 Thread Richard Levitte
Just add -m64 on the config line, like this: ./config no-shared zlib -m64 -IC:/_64/msys_630/1.0/local/include \ -LC:/_64/msys_630/1.0/local/lib --prefix=C:/_64/msys_630/1.0/local This is weird, though... what config target did you get when configuring? Ideally, you should have gotten

Re: [openssl-users] mingw 64-bit build of 1.1.0e

2017-03-12 Thread Richard Levitte
In message <8CD5EEA9CC3F4643AAFC6D7DDF6EB449@OwnerPC311012> on Sun, 12 Mar 2017 16:15:47 +1100, <sisyph...@optusnet.com.au> said: sisyphus1> -Original Message- From: Richard Levitte sisyphus1> Sent: Sunday, March 12, 2017 3:25 PM sisyphus1> To: openssl-users@

Re: [openssl-users] [openssl-dev] Openssl 1.0.2 snap STABLE 20170311 issue

2017-03-11 Thread Richard Levitte
Fixed: commit 6fe43af8d77b119f8af913c284149bca482ee58c Author: Richard Levitte <levi...@openssl.org> Date: Sat Mar 11 11:19:20 2017 +0100 Revert "Use the callbacks from the SSL object instead of the SSL_CTX object" This shouldn't h

Re: [openssl-users] OpenSSL 1.1.0 providing new OIDs to source code

2017-07-09 Thread Richard Levitte
uld. This can happen if you only call a very select set of OpenSSL functions. What happens if you add this at the start of your main()? OPENSSL_init_crypto(0, NULL); (note, that should be seen as a temporary measure, as this is called internally in quite a number of spots, so for larger u

Re: [openssl-users] OpenSSL 1.1.0 providing new OIDs to source code

2017-07-11 Thread Richard Levitte
he 1.1.1-dev (master Matthias.Ballreich> branch)? Matthias.Ballreich> Matthias.Ballreich> Best regards Matthias.Ballreich> Matthias.Ballreich> Matthias Matthias.Ballreich> Matthias.Ballreich> Von: Richard Levitte Matthias.Ballreich> Gesendet: Montag, 10. Juli 2017 06:14 Matt

Re: [openssl-users] MSVC Compiling OpenSSL on Windows 64 issues with missing libs

2017-07-08 Thread Richard Levitte
b c:/OpenSSL-Win64/lib/VC/static/libssl64MTd.lib c:/OpenSSL-Win64/lib/VC/static/libssl64MT.lib >From those, I guess you need to change your dependencies to be libcrypto64MT.lib instead of libeaymt64.lib, and libssl64MT.lib instead of ssleaymt64.lib. Cheers, Richard -- Richard Levitte

Re: [openssl-users] MSVC Compiling OpenSSL on Windows 64 issues with missing libs

2017-07-08 Thread Richard Levitte
In message

Re: [openssl-users] Build from source; library not found?

2017-05-17 Thread Richard Levitte
on, rpath isn't automatically applied to the openssl application, but is a matter of extra configuration arguments. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Building libssl and libcrypto, .dlls and .libs, with different names?

2017-06-26 Thread Richard Levitte
and libssl.lib from OpenSSL 1.1.0 and on. That will most likely not change at all for the far future. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] Build from source; library not found?

2017-05-20 Thread Richard Levitte
In message <bd5f2f95-ab11-4b5f-9b91-e93c45aac...@dukhovni.org> on Thu, 18 May 2017 18:35:32 -0400, Viktor Dukhovni <openssl-us...@dukhovni.org> said: openssl-users> openssl-users> > On May 18, 2017, at 4:08 PM, Richard Levitte <levi...@openssl.org> wrote: open

Re: [openssl-users] Build from source; library not found?

2017-05-18 Thread Richard Levitte
ing hiran.chaudhuri> for application (executables) but not for shared libraries? hiran.chaudhuri> In that case the test I tried would be totally meaningless. Yes, that's correct. -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openss

Re: [openssl-users] NMAKE error

2017-05-01 Thread Richard Levitte
Can you verify that crypto\include\internal\bn_conf.h.in exists? It should, it's part of the source. Can you check if there's a file with a similar name in crypto\include\internal? Cheers, Richard ( am wondering if there are tar implementations that screw up file name with more than one

Re: [openssl-users] Win 10 failure on install

2017-05-02 Thread Richard Levitte
Are you running on an Itanium? If not, VC-WIN64I is not for you, please configure with VC-WIN64A instead. Cheers, Richard In message

Re: [openssl-users] Building libssl and libcrypto, .dlls and .libs, with (ABI compatibility)

2017-06-27 Thread Richard Levitte
change to build.info in the IF statement for /^VC-/ ? Yes, the top build.info is the file to make changes in for this. However, once again, I really do not recommend this. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL on side

2017-10-11 Thread Richard Levitte
I got curious and decided to take a look, and well, it appears setup.py has issues. I posted an issue in gitlab about it: https://gitlab.com/m2crypto/m2crypto/issues/184 In message on Wed, 11 Oct 2017 08:12:38 +0200, Matěj Cepl said:

Re: [openssl-users] Problem with Last step in setup

2017-09-05 Thread Richard Levitte
tive, if you have sudo privileges, is this: sudo make install Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

  1   2   3   4   5   6   7   8   9   10   >