Re: Signature Verification problem

2003-04-01 Thread Howard Chan
Aleix, Well what I meant was "a private key from a .p12 file"not a cert. Apologies. What about using the openssl commands? ie. x509, rsautl, dgst, etc. Can I do all that I specified below strictly using those openssl commands? If so, how? Thank you very much. - HC - Original Message

Re: X509_STORE and X509_verify performance

2003-04-01 Thread Dr. Stephen Henson
On Tue, Apr 01, 2003, Chris Jarshant wrote: > > Well... do what you need to do. I'm going with the evil short-term > hack cause the alternative is our user base sitting their twiddling > their thumbs looking up the number of the sales guy that sold them > crappy app that hangs for 10 minutes :-)

Re: X509_STORE and X509_verify performance

2003-04-01 Thread Chris Jarshant
> Well in the short term some kind of evil hack will be needed by an > application. This would involve messing around with the internals of the > X509_STORE and normally you shouldn't go near those. However in this case you > haven't got any choice. > > In outline you'd create an X509_OBJECT for e

Latest patches

2003-04-01 Thread Filip Hanik
looks like the two security advisoris are already in the source that I downloaded today (4/1/03) from the website. Because my patch command asked if I wanted to revert it, so I cancelled the patches Can someone confirm this as well, thanks Filip __

Re: java/openssl

2003-04-01 Thread Sly Upah
MD5withRSA on the java side to generate the sig which verifies correctly with Java code. On the C side: #include #include #include #include #include #include #include #include #include int main () { int i,err; char data[1024] = "abcdefg"; EVP_MD_CTX md_ctx; EVP

Re: java/openssl

2003-04-01 Thread Michelle Li
Um...are you using the exact same algorithm on both side? What about padding schemes? Can you give more details? I think as long as the algorithm is totally the same, it shouldn't matter if it is Java generated or openssl generated. Michelle On Tue, 1 Apr 2003, Sly Upah wrote: > Can anyone p

java/openssl

2003-04-01 Thread Sly Upah
Can anyone point me to source or give me instructions on how I can verify a Java generated signature? I can create a signature and verify it using pure openssl calls but anything coming from the Java side looks like the bytes are all screwed up. Do I have to do something special to massage the bit

Re: X509_STORE and X509_verify performance

2003-04-01 Thread Dr. Stephen Henson
On Tue, Apr 01, 2003, Chris Jarshant wrote: > > - Original Message - > From: "Dr. Stephen Henson" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, March 31, 2003 7:52 PM > Subject: Re: X509_STORE and X509_verify performance > > > > On Mon, Mar 31, 2003, Chris Jarshant wrote

Re: X509_STORE and X509_verify performance

2003-04-01 Thread Chris Jarshant
- Original Message - From: "Dr. Stephen Henson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, March 31, 2003 7:52 PM Subject: Re: X509_STORE and X509_verify performance > On Mon, Mar 31, 2003, Chris Jarshant wrote: > > > I generated 1000 test self-signed CA certs, and wrote >

Hifn Crypto Processors

2003-04-01 Thread James Dabbs
I see that OpenSSL supports several accelerator boards that use Hifn's PCI crypto processors. Does anyone here have experience putting any of these chips (not board-level products) directly onto the motherboard of an appliance design using Linux/OpenSSL? Thanks! __

Re: openssl libs vs RSA libs problem

2003-04-01 Thread Dr. Stephen Henson
On Tue, Apr 01, 2003, Avinash Agarwal wrote: > Hello all, > > > > I have a server implemented using openssl libs and a client which is > implemented using RSA libs. > > > > The handshake is failing and I get the following errors > > > > on the client : > > “ > > - Certificate chain d

openssl libs vs RSA libs problem

2003-04-01 Thread Avinash Agarwal
Hello all,   I have a server implemented using openssl libs and a client which is implemented using RSA libs.   The handshake is failing and I get the following errors   on the client : “ - Certificate chain didn't validate: Incomplete certificate  - CA is Unknown CA SSL: Certific

delivery rejected: GregH at ceoworkz dot com ?

2003-04-01 Thread Aleix Conchillo Flaque
hi, everytime i send a message to the list i'm getting a mail notification about delivery problems to GregH at ceoworkz dot com. is that normal? regards, aleix __ OpenSSL Project http://www.ope

Re: Signature Verification problem

2003-04-01 Thread Aleix Conchillo Flaque
"Howard Chan" <[EMAIL PROTECTED]> writes: > > I have this file which used sha1 hash algorithm to obtain it's message > digest, and subsequently the digest was encrypted (signed) using RSA > algorithm with a private key from a X.509 certificate. > i don't think you can get a private key from an X5

Signature Verification problem

2003-04-01 Thread Howard Chan
Dear all,   I'm experimenting with openssl and I have the following problem at hand:   I have this file which used sha1 hash algorithm to obtain it's message digest, and subsequently the digest was encrypted (signed) using RSA algorithm with a private key from a X.509 certificate.   Now, I h

Re: :Re: SSL_read performance problem

2003-04-01 Thread David Schwartz
On Mon, 31 Mar 2003 07:36:38 GMT, Jean Pierre Cognasse wrote: > > >>>The test is between the first called SSL_Write to when SSL_Read >>>returned >>>the last byte > >>And you sent all the data in a single call to SSL_Write? > >>-- >>David Schwartz >><[EMAIL PROTECTED]> > >Yes > >Jp That sou