Pkcs 12 key generation

2000-09-21 Thread Marco Donati
I need a simple sequence to generate an RSA private key and to save into a PKCS12 file. I tried to generate the RSA key as in the eay example, converted it to der, converted from der to EVP and pass it to the PKCS12_create function. I don't have a certificate for this key, so the PKCS12_create

Re: PEM to PKCS12 conversion erro

2000-09-21 Thread Dr S N Henson
Soul Fire wrote: > > Folks, > > Any ideas as to why this is happening ? > > $ openssl pkcs12 -in ./newcert.pem -inkey ./newreq.pem -certfile >../private/CAcert.pem -out newcert.p12 > > 3652:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too >long:asn1_lib.c:139: > You need t

PEM to PKCS12 conversion erro

2000-09-21 Thread Soul Fire
Folks, Any ideas as to why this is happening ? $ openssl pkcs12 -in ./newcert.pem -inkey ./newreq.pem -certfile ../private/CAcert.pem -out newcert.p12 3652:error:0D06B078:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:139: Thanks. s0ulfire _

Re: install

2000-09-21 Thread Leland V. Lammert
At 08:39 AM 9/18/00 -0700, you wrote: >how do I get it to work on win 98. I have perl and turbo C++ by Borland. HELP Build a server. Lee __ OpenSSL Project http://www.openssl.org User Su

RE: SSL/TLS and Secure-HTTP

2000-09-21 Thread Gregory Pietsch
Thanks, Eric! I never expected my answer to come from a co-author of RFC 2660! I'm reading the other two RFCs now. Gregory Pietsch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eric Rescorla Sent: Thursday, September 21, 2000 12:39 PM To: [EMAIL PROTE

Re: random generator on solaris

2000-09-21 Thread Brian Hatch
> > Solaris 8 ships with a perl that was compiled with Sun cc. > > Thus to install modules/etc that require compilation, you > > must use Sun cc. Even if you install gcc, you cannot compile > > code that will link correctly with sun's supplied perl. > > > > Answer: Buy sun's cc, or recompile p

OS2IP and I2OSP

2000-09-21 Thread Michael Sierchio
Are there utility functions in OpenSSL to perform the "Octet String to Integer" and "Integer to Octect String (of a given length)" ? These are OS2IP(x) and I2OSP(x,n) as defined in PKCS#1/RFC 2437. Thanks, Michael __ OpenSSL

RE: SSL/TLS and Secure-HTTP

2000-09-21 Thread Gregory Pietsch
I think the problem starts here. This happens similarly in both the engine and the regular beta3: $ ./Configure no-threads CygWin32 Makefile => Makefile.ssl Configuring for CygWin32 IsWindows=0 CC=gcc CFLAG =-DDSO_WIN32 -DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wal

Re: random generator on solaris

2000-09-21 Thread Carson Gaspar
--On 09/21/00 10:23:26 AM -0700 Brian Hatch <[EMAIL PROTECTED]> wrote: > Solaris 8 ships with a perl that was compiled with Sun cc. > Thus to install modules/etc that require compilation, you > must use Sun cc. Even if you install gcc, you cannot compile > code that will link correctly with su

Re: rsautl -- does it work?

2000-09-21 Thread Dr S N Henson
Michael Mason wrote: > > Hi folks, > > I'm new here so feel free to point me at TFM. > > I'm using openssl and would like to sign messages using RSA. From the docs, > it looks like I'm trying to use "openssl rsautl", but my from-source build > of 0.9.5a doesn't seem to have this command impleme

Re: random generator on solaris

2000-09-21 Thread Brian Hatch
> sjha> Now while installing egd-0.8 on solaris-8, > sjha> # perl Makefile.PL > sjha> SHA module not found. We will install our own. > sjha> Writing Makefile for SHA > sjha> Warning: overwriting endian.h > sjha> Writing Makefile for egd > sjha> # make > sjha> cc -c -O -DVERSION=\"1.2\" -

Solved -RE: random generator on solaris

2000-09-21 Thread Sanjeev Jha
Random generator error message -> this problem is solved in Solaris-7. I did edit /usr/local/ssl/openssl.cnf and changes the file name at "RANDFILE = /sur/local/bin/egd.pl". Oh yeah, I could use -rand option "./config -rand=/usr/local/bin/egd.pl" Now I trying on Solaris -8 to install egd 0.8. Just

RE: rsautl -- does it work?

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Michael Mason <[EMAIL PROTECTED]> michael.mason> Sorry, it's Redhat linux 6.2, and openssl-0.9.5a. I've michael.mason> just built 0.9.6-beta3 and the command is included in michael.mason> that version. I'm going to try it out now. That explains it. rsautl is new in 0.9.6. -- Richard Lev

RE: random generator on solaris

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Sanjeev Jha <[EMAIL PROTECTED]> sjha> To better understand the problem, let me tell you error messages --> sjha> While running stunnel or openssl key generation (even after egd sjha> installtion on solaris-7 with random path option)--> sjha> sjha> # openssl req -new -x509 -nodes -out stunn

Re: SSL/TLS and Secure-HTTP

2000-09-21 Thread Eric Rescorla
Gregory Pietsch <[EMAIL PROTECTED]> writes: > Second (and this is more complicated), what's the difference between using > SSL/TLS and Secure HTTP (as defined in RFC 2660)? They are both similar. > Is there any difference in use? Actually, they're totally different. Secure HTTP is message level s

RE: rsautl -- does it work?

2000-09-21 Thread Michael Mason
> What exactly is the error message? What platform are we talking > about? Sorry, it's Redhat linux 6.2, and openssl-0.9.5a. I've just built 0.9.6-beta3 and the command is included in that version. I'm going to try it out now. Cheers, Mike. __

RE: random generator on solaris

2000-09-21 Thread Sanjeev Jha
To better understand the problem, let me tell you error messages --> While running stunnel or openssl key generation (even after egd installtion on solaris-7 with random path option)--> # openssl req -new -x509 -nodes -out stunnel.pem -keyout stunnel.pem Using configuration from /usr/local/ssl/op

Re: rsautl -- does it work?

2000-09-21 Thread Richard Levitte - VMS Whacker
From: Michael Mason <[EMAIL PROTECTED]> michael.mason> I'm using openssl and would like to sign messages using michael.mason> RSA. From the docs, it looks like I'm trying to use michael.mason> "openssl rsautl", but my from-source build of 0.9.5a michael.mason> doesn't seem to have this command i

random generator on solaris

2000-09-21 Thread Sanjeev Jha
Hi All, encountering problem with OpenSSL 0.9.5a while generating key on Solaris7 and solaris-8. I guess some of you might had this problem. I did see the same almost same error message while running "stunnel 3.8p4". According to there site http://www.stunnel.org/faq/troubleshooting.html#ToC14 ,