RE: PEM pass phrase

When I try to strip the password encryption off of the private key, as described below, I get the following error:   req -key keyrq.txt -keyout test.key -nodes -config openssl.cnf unable to load Private key344:error:02001002:system library:fopen:system lib:tmp32dll\bss_file.c:103:fopen('.oid

Re: PEM pass phrase

> Chris Kopp wrote: > > When I try to strip the password encryption off of the private key, as > described below, I get the following error: > > req -key keyrq.txt -keyout test.key -nodes -config openssl.cnf > unable to load Private key > 344:error:02001002:system library:fopen:system > lib:tmp3

Re: authoritykeyidentifier ?

> Richard Dykiel wrote: > > Hello, > > I'm using the openssl utility to create a set of certificates. > I created a root certificate. > Now I'm trying to create a certifiate request for an intermediate CA > (it would be signed by my root certificate). > > The command I use is: > openssl req -co

Re: Verifying Certificates

Mark E. Schoneman wrote: > > I'm aware I'm trying to cheat abit here, but here's the problem. > I'm trying to verify certificates via API rather than reading from files. > I have the CA cert in CAx509 and the cert to verify in x509 > I use X509_STORE_add_cert it load the CA's cert in the store, t

authoritykeyidentifier ?

Hello,   I'm using the openssl utility to create a set of certificates. I created a root certificate. Now I'm trying to create a certifiate request for an intermediate CA (it would be signed by my root certificate).   The command I use is: openssl req -config CAconf.conf -newkey rsa:1024 -outfo

Verifying Certificates

I'm aware I'm trying to cheat abit here, but here's the problem. I'm trying to verify certificates via API rather than reading from files. I have the CA cert in CAx509 and the cert to verify in x509 I use X509_STORE_add_cert it load the CA's cert in the store, thinking that if finds it there firs

Re: Can "openssl req" be scripted?

On Wed, Mar 08, 2000 at 12:14:31PM +, Dr Stephen Henson wrote: > OpenSSL 0.9.5 req was modified to specifically allow this and has > several new config file options, the manual page has an example too. Absolutely great - just installed and it worked as I wanted :-) Thanks! -- Cheers Jason

Application Data MAC

Hi, I am a relatively new user of SSL. I had a few doubts about the Alert Protocol.Now the standard defines error handling (which is closing of connection) only for Handshake protocol in section 5.4.2 The standard does not say anything about Error Handling for "Application data". I want

RE: non-RSA cert and ciphers?

Step 1: perl Configure no-rsa VC-WIN32 Output: skipped (all successful no warnings or errors) Step 2: ms\do_nasm Output: skipped (all successful no warnings or errors) Step 3: nmake -f ms\nt.mak Output: skipped (all successful no warnings or errors) Step 4: ssltest Output: 283:error:0D09C

Re: Please teach me how to use OpenSSL to encrypt the data.

Goetz Babin-Ebell wrote: > > At 10:17 08.03.00 +0900, you wrote: > >Hello, > Hello, > > >I develop applications running on Windows95/98/UNIX(Solaris2.6),deploying > >OpenSSL technology. Now I'm trying to exploit an application that encrypts/ > >decrypts data using RSA's public key encryption, th

Re: openSSL pkcs12: Generating self signed .p12 file

Hi All! Guess i was on the same path today and pkcs just doesnt want to export. Just got a few more grey hairs. please if i weant to make a client server connection 1.first make a key and a cert for CA 2. install in apache for example 3.create client key and cert 4 sign em with the ca something li

Re: Please teach me how to use OpenSSL to encrypt the data.

At 10:17 08.03.00 +0900, you wrote: >Hello, Hello, >I develop applications running on Windows95/98/UNIX(Solaris2.6),deploying >OpenSSL technology. Now I'm trying to exploit an application that encrypts/ >decrypts data using RSA's public key encryption, that is;the application encrypts >data with

Re: [Q] Dealing with Cisco SCEP (Simple Certificate Enrollment Protocol)

Hi Dave, any progress on your SCEP- project? I am also planning to implement SCEP using OpenSSL and do not want ro re-invent the wheel ;-) regards, janus dave madden wrote: > > Hi. > > I'm trying to use OpenSSL to create certificates for a Cisco PIX > firewall/vpn box. I've been able to down

RE: openSSL pkcs12: Generating self signed .p12 file

Thanks, it worked. -Arne- -Original Message- From: Richard Levitte - VMS Whacker [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 08, 2000 11:41 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: openSSL pkcs12: Generating self signed .p12 file etoxarr> # Generating PKCS#12 file

Re: Can "openssl req" be scripted?

Jason Haar wrote: > > I'm trying to automate the generation of certs, and I've found that "openssl > req" under OpenSSL-0.9.4 doesn't like running non-interactively. > > There's no "-batch" mode option and if I try to do clever things with > redirecting stdin, it just doesn't work :-( > > Can s

Re: openSSL pkcs12: Generating self signed .p12 file

Riiber Arne AV/G(NES/ETO/I/KE) wrote: > > Hello, openssl-users. > > I try to generate a pkcs12 file that can be imported in Netscape by > doing the following command sequence: > > # create random state > openssl md5 * > rand.dat > > # generate a private key protected with a passphrase > openss

Client Authentication Steps

Hi I am porting an application from SSLRef to OpenSSL, and I am trying to connect up with a SSL server, performing Client Authentication, but I', having troubles doing so. I have DER certs that are read into a API above OpenSSL. I can dump these certs to stdout, and they look fine. During the han

Re: openSSL pkcs12: Generating self signed .p12 file

etoxarr> # Generating PKCS#12 files etoxarr> openssl pkcs12 -export -in selfsigned.pem -out selfsigned.p12 -name etoxarr> "selfsigned" etoxarr> etoxarr> The last command fails with the following error message: etoxarr> etoxarr> Error loading private key etoxarr> 13372:error:0906D06C:PEM routines

Can "openssl req" be scripted?

I'm trying to automate the generation of certs, and I've found that "openssl req" under OpenSSL-0.9.4 doesn't like running non-interactively. There's no "-batch" mode option and if I try to do clever things with redirecting stdin, it just doesn't work :-( Can someone tell me how I can automate t

help on error?

My app. is giving this error and I'm not sure where to look or how to correct this? This is on a SSL_read(): 29413:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:279: Any pointers on what to look for? Thanks, Aaron _

Re: openSSL pkcs12: Generating self signed .p12 file

On Wed, Mar 08, 2000 at 09:50:54AM +0100, Riiber Arne AV/G(NES/ETO/I/KE) wrote: > # generate a private key protected with a passphrase > openssl genrsa -rand rand.dat -des3 1024 > key.pem > > # generate a dummy self-signed certificate > openssl req -new -x509 -key key.pem -out selfsigned.pem > >

openSSL pkcs12: Generating self signed .p12 file

Hello, openssl-users. I try to generate a pkcs12 file that can be imported in Netscape by doing the following command sequence: # create random state openssl md5 * > rand.dat # generate a private key protected with a passphrase openssl genrsa -rand rand.dat -des3 1024 > key.pem # generate a du