I have looked into the snapshot, as my problem is in d2i_Netscape_RSA_2, the pkey=d2i_NETSCAPE_PKEY is NULL. The fix could not be my answer. I have tried RC4-40, and it doesn't work. What I get from RC4 decrption is some dummy bytes. There could not be any ASN1 coding among these bytes. The only answer is that the decryption is a wrong decryption. And I guess the bytes decrypted should be a NETSCAPE_PKEY for the length is suitable: 631 bytes. If someone tell me where I can find the doc about how the protecting RC4-key is generated from password(or the old doc which said the RC4-key should delivered from password by MD5 ) It could be very helpful. Dr Stephen Henson wrote: > SCH wrote: > > > > I used d2i_Netscape_RSA to get the priavtekey > > exported from IIS.It worked well when the key > > is 512 bit before. But as to 1024 bit RSA key. The same function > > failed to get the validate key from the exported file. > > > > The protecting Alg ID is still RC4. Should I try RC4-40? > > I am outside North America. > > > > Try a later snapshot. I've applied a fix that makes OpenSSL tolerate a > broken IIS format. What specific error do you get? > > Its been mentioned that when IIS generates an SGC request it uses a > different format. I've never had one of these to test so I haven't been > able to confirm this or fix the code. > > Steve. > -- > Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/ > Personal Email: [EMAIL PROTECTED] > Senior crypto engineer, Celo Communications: http://www.celocom.com/ > Core developer of the OpenSSL project: http://www.openssl.org/ > Business Email: [EMAIL PROTECTED] PGP key: via homepage. > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]