Re: signature verif. error : data greater than mod len

2003-09-15 Thread Ken Ballou
I believe the input signature to be verified should be binary, not hexadecimal characters. I would suspect that the 512 bytes of hexadecimal characters are being treated as 512 * 8 = 4096 bits of binary data. - Ken - Original Message - From: "BP" <[EMAIL PROTECTED]> T

Loading Verisign Test CA root certificate

2003-09-15 Thread vinay . peddi
Hi All, I am trying to test my client & server using the verisign test certificates. I am not sure how to load the verisign Test CA root certificates using openSSL. The verisign website provides instructions to load the certificate to a browser but nothing about a stand-alone client/server. IS the

Re: ocsp request without issuers cert?

2003-09-15 Thread Dr. Stephen Henson
On Mon, Sep 15, 2003, Tanel Kuusk wrote: > Martin Kouril wrote: > >code is everytime used "X509_get0_pubkey_bitstr" function called with > >issuers cert in argument when creating an ocsp request. Is possible to > >bypass it? > >I don't think so. But maybe . :) > > An OCSP responder uses thr

RE: FAQ item USER 12. Clarification regarding pkcs12

2003-09-15 Thread Bart J. Smit
Windows does indeed maintain certificate stores per machine, per user and for each service. It decides per cert where to store these. E.g. certs for which you have a private key go into the user store, CA certs into the machine store, etc. You can override the choice of store and storage method in