I have looked into the snapshot, as my problem is in d2i_Netscape_RSA_2,
the pkey=d2i_NETSCAPE_PKEY is NULL. The fix could not be my answer.

I have tried RC4-40, and it doesn't work.

What I get from RC4 decrption is some dummy bytes.
There could not be any ASN1 coding among these bytes.
The only answer is that the decryption is a wrong decryption.
And I guess the bytes decrypted should be a NETSCAPE_PKEY
for the length is suitable: 631 bytes.

If someone tell me where I can find the doc about how the protecting
RC4-key is generated from password(or the old doc which said the
RC4-key should delivered from password by MD5 )
It could be very helpful.


Dr Stephen Henson wrote:

> SCH wrote:
> >
> > I used d2i_Netscape_RSA to get the priavtekey
> > exported from IIS.It worked well when the key
> > is 512 bit before. But as to 1024 bit RSA key. The same function
> > failed to get the validate key from the exported file.
> >
> > The protecting Alg ID is still RC4. Should I try RC4-40?
> > I am outside North America.
> >
>
> Try a later snapshot. I've applied a fix that makes OpenSSL tolerate a
> broken IIS format. What specific error do you get?
>
> Its been mentioned that when IIS generates an SGC request it uses a
> different format. I've never had one of these to test so I haven't been
> able to confirm this or fix the code.
>
> Steve.
> --
> Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
> Personal Email: [EMAIL PROTECTED]
> Senior crypto engineer, Celo Communications: http://www.celocom.com/
> Core developer of the   OpenSSL project: http://www.openssl.org/
> Business Email: [EMAIL PROTECTED] PGP key: via homepage.
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to