[stunnel-users] Incompatibility between openssl 1.0.0 and 0.9.8 which cause stunnel windows version malfunction.

[Ludovic LEVET]

- For FIPS certification.

Fips is writen for 0.9.8 version at begining. So migrate it to 1.0.0 
take very lot of work (to many code changing) and time.

Ludovic.

Le 21/12/2011 12:12, ayanamist a écrit :
> I can understand it, but why does stunnel downgrade it from 1.00 to 
> 0.98 on windows version?
>
> On Wed, Dec 21, 2011 at 5:52 PM, Ludovic LEVET <llevet at ludosoft.org 
> <mailto:llevet at ludosoft.org>> wrote:
>
>     Hi,
>
>     - For FIPS certification.
>     - Yes, crypted headers of certificates are differentes from
>     openssl 0.9.8 and 1.0.0 like this :
>
>
>     openssl 1.0.0 key :
>
>     -----BEGIN ENCRYPTED PRIVATE KEY-----
>     MIIJnzBJBgkqhkiG9w0BBQ0wPDAbBgkqhkiG9w0BBQwwDgQI0Z45oYYRJ1cCAggA
>     MB0GCWCGSAFlAwQBAgQQF4QLI0IILDItqQFXHJeAxgSCCVBAo1Ed9BHwyhHeBzx2
>     rQELkAghar26CFsP7qvMwZ+vnATbArA2MvFWJWy0l2pl7/Rn7RcoztbSzg82c8IG
>     ...
>
>     openssl 0.9.8 key :
>
>     -----BEGIN RSA PRIVATE KEY-----
>     Proc-Type: 4,ENCRYPTED
>     DEK-Info: DES-EDE3-CBC,327E4B06D51C7728
>
>     grestO9v2wfiqFwBy8bBbpNjMWpFrrc/9y8q68n6c48enCFyDsdVlyqToOQ+Razt
>     d98I+rkTow33X83e9+Zt8rGlKJlPXn3zHTKbjNhfc7j6kk+ssWJft5OAvu5NShMx
>     FOATl4pW97qCf1x4pFwQGm8/8MhCqOpqv2cLfjz2T4Egu1qP2sHZ35QU/gHBLHYh
>     ...
>
>
>     Ludovic.
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20111221/85a29705/attachment.html>