RE: FIPS error on Apache httpd v2.4.3, OpenSSL 1.0.1c and fips-2.0.1

2012-08-27 Thread Ruiyuan Jiang
Hi, Cassie I followed your post. I tried to recompile Apache with the recommendation that you given. I tried to rename Redhat's libcrypto and libssl to something else then Apache complains about LDAP library missing in the configure phase. I then tried using LDFLAGS for configure in Apache but

FIPS enabled OpenSSL v1.0.1c

2012-08-27 Thread Ruiyuan Jiang
Hi, When I tried to start Apache(v2.4.3) with FIPS enabled OpenSSL v1.0.1c on RHEL v6.3, I was prompted for the pass phrase which is normal. After I typed in correct pass phrase, I got a message: Apache: mod_ssl:Error: Pass phrase incorrect (5 more retries permitted). When I ctrl-c to exist,

RE: FIPS error on Apache httpd v2.4.3, OpenSSL 1.0.1c and fips-2.0.1

2012-08-24 Thread Ruiyuan Jiang
Thanks, Cassie Ldd shows Apache httpd uses Redhat (v6.x)'s built in /lib64/libcrypto.so/a not my OpenSSL's /usr/local/ssl/lib/libcrypto.so. I got to fix that problem first. Thanks. Ryan Jiang -Original Message- From: owner-openssl-us...@openssl.org

FIPS error on Apache httpd v2.4.3, OpenSSL 1.0.1c and fips-2.0.1

2012-08-23 Thread Ruiyuan Jiang
Hi, I am not sure this mailing list is the proper one to ask for the problem that I have. I enabled fips when I compiled OpenSSL 1.0.1c. # /usr/local/ssl/bin/openssl OpenSSL version OpenSSL 1.0.1c-fips 10 May 2012 OpenSSL I compiled Apache httpd v2.4.3 against this version of OpenSSL. If I

RE: Compiling openssl 1.0.1c with fips 2.0.1

2012-08-10 Thread Ruiyuan Jiang
Thanks, Cassie. Ryan -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Cassie Helms Sent: Friday, August 10, 2012 12:08 PM To: openssl-users@openssl.org Subject: Re: Compiling openssl 1.0.1c with fips 2.0.1 ar: creating

Compiling openssl 1.0.1c with fips 2.0.1

2012-08-09 Thread Ruiyuan Jiang
Hi, I am trying to compile openssl 1.0.1c with fips 2.0.1 enabled on Redhat RHEL 6.3 64bit server. I first compiled fips 2.0.1 in the source tree directory: # config # make # make install I then tried to compile openssl 1.0.1c in the source tree directory per FIPS user guide: # ./config

OpenSSl v1.0.1c and Apache httpd v2.2.22

2012-07-28 Thread Ruiyuan Jiang
Hi, I am trying to use openssl v1.0.1c or 1.0.0j with Apache v.2.2.22 but failed. I can use v1.0.0g no problem. It failed at configure phase of Apache. I posted error message in the Apache mailing list twice but no answer. I am not sure this mailing list can help me or not. Thanks. #

Can't start Apache when ssl is enabled on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
Hi, I have two Apache 2.2.21 reverse proxy servers on Solaris 10 (SPARC) with OpenSSL (v1.0.0x) enabled. They are running fine so far. Now we want to migrate Apache to Redhat Enterprise server v5.7 (64 bit). I compiled Oopenssl with 64 bit option specified on RHEL and then compiled Apache the

RE: Can't start Apache when ssl is enabled on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
Hi, One more piece of information, Apache never prompts me for the Pass Phrase when it starts with https enabled on Redhat which it supposed to. Ryan Jiang From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Ruiyuan Jiang Sent: Monday, January 23, 2012

RE: Can't start Apache when ssl is enabled on RHEL v5.7

2012-01-23 Thread Ruiyuan Jiang
is your culprit... your config isn't 100% transportable between Solaris and linux. Sent from my Verizon Wireless 4G LTE Phone -Original message- From: Ruiyuan Jiang ruiyuan_ji...@liz.com To: openssl-users@openssl.org openssl-users@openssl.org Sent: Mon, Jan 23, 2012 23:23:51 GMT+00:00

Migrate from RSA key to PK12 format

2011-10-13 Thread Ruiyuan Jiang
Hi, I have a certificate generated with RSA format for Apache web server. Now I have a need to convert the key and cert or generate a new key, csr with same URL name using PK12 format to migrate to MS Windows platform. Can anyone help me? Thanks. Ryan Jiang This message (including any

RE: Download fips 1.2.3

2011-05-24 Thread Ruiyuan Jiang
Of Kyle Hamilton Sent: Monday, May 23, 2011 11:56 PM To: openssl-users@openssl.org Subject: Re: Download fips 1.2.3 Solaris has a buggy tar. You need to use gnu tar. -Kyle H On Mon, May 23, 2011 at 3:11 PM, Ruiyuan Jiang ruiyuan_ji...@liz.com wrote: Hi, all   Has anyone had problem

Download fips 1.2.3

2011-05-23 Thread Ruiyuan Jiang
Hi, all Has anyone had problem with openssl-fips-1.2.3.tar.gz? When I tried to tar xvf on my Solaris 10 SPARC, the source had error message unexpected EOF. I have tried with different proxy servers and direct download from the site but had no luck. I now downloaded v1.2.2 and no problem with

RE: Download fips 1.2.3

2011-05-23 Thread Ruiyuan Jiang
@openssl.org; openssl-users@openssl.org Subject: Re: Download fips 1.2.3 You need to: gunzip openssl-fips-1.2.3.tar.gz That will create openssl-fips-1.2.3.tar Then tar -xvf openssl-fips-1.2.3.tar Eric At 03:11 PM 5/23/2011, Ruiyuan Jiang wrote: Hi, all Has anyone had problem with openssl-fips

RE: Openssl for Solaris 10

2005-07-27 Thread Ruiyuan Jiang
file, both openssl 0.9.7g and 0.9.8 was compiled fine. I am not sure why you got the problem maybe library files were not in your path? Thanks anyway. Ryan -Original Message- From: Ramon Berger [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 26, 2005 6:06 PM To: Ruiyuan Jiang Subject: Re