Re: Certificate, encoding and signing questions.

On Wed, 17 Sep 2003, Frank wrote: > Encoding - Now from some testing I did with PKCS7 structures before if > you DER encode instead of PEM encode the data it appears to be much > smaller. Is that correct? >From what I have understood PEM is simply BASE64 encoded DER plus headers which clearly in

Re: RE : Certificate, encoding and signing questions.

Thanks for the info. I guess I should have qualified that I wanted to send the cert via a msg/memory encoded, not a file. Any examples of this around? BP wrote: > I'm busy so partial reply : > > >>if you DER encode instead of PEM encode the data it appears to be much > smaller. Is that correct?

Re: setting an extension via run parameters

On Wed, Sep 17, 2003, Edward Lewis wrote: > I don't see that it is possible to set an extension via a run time > parameter. The question is: am I missing something, is it already > possible? > > To elaborate on what I'd like to do, here's an example modulo syntax > finery... > > openssl x509

Re: Tweaking the default cert chain verification

On Wed, Sep 17, 2003, Mats Nilsson wrote: > Hi > > Using OpenSSL-0.9.7b. > > We are building an application where we want to have a flexible model > for certificate trust. In essence, we want to be able to say: > > CA0 (self signed) is explicitly trusted > CA1 (signed by CA0)

RE : Certificate, encoding and signing questions.

I'm busy so partial reply : >>if you DER encode instead of PEM encode the data it appears to be much smaller. Is that correct? I guess yes, binary format. >>Now if you want to send a certificate to some one is it possible to send it DER encoded? Yes, as a .cer file. >> Do you create the ce

Certificate, encoding and signing questions.

Well I have a few questions here so hopefully I can get this straight, if I'm lucky. Certificates - Now I have worked with RSA certificates, but if I wish to do DSA instead of RSA signatures I need to create DSA certificates right? If so anyone have examples laying around? Encoding - Now from som

RE: A question about openssl used library

> Dear all: > I have a question about used libraries by openssl toolkits. > OpenSSL toolkits includes three modules: libssl.a ,libcrypto.a > ,and openssl. > Can I only use the command line tool "openssl" > independently without use any library like "libcrypto.so.0.9.8" ?? It all depe

setting an extension via run parameters

I don't see that it is possible to set an extension via a run time parameter. The question is: am I missing something, is it already possible? To elaborate on what I'd like to do, here's an example modulo syntax finery... openssl x509 -req -in csr.pem -CA \ -subjAltName URI: -subjAltNa

Re[3]: some errors

hm> hmmm, same error... :o( hm> debugger says at this line error: Unhandled exception in rsa.exe (NTDLL.DLL): hm> 0xC005: Access Violation. Oki, problemo is solved... I must set Multithreaded DLL in project settings... thanx for time Aliex, miso __

Re: some errors

http://www.openssl.org/support/faq.html#PROG2 Regards Christian On Wed, Sep 17, 2003 at 02:58:53PM +0200, [EMAIL PROTECTED] wrote: > > ACF> you forgot to call OpenSSL_add_all_algorithms() at the beginning. > > hmmm, same error... :o( > debugger says at this line error: Unhandled exception in rs

Re[2]: some errors

ACF> you forgot to call OpenSSL_add_all_algorithms() at the beginning. hmmm, same error... :o( debugger says at this line error: Unhandled exception in rsa.exe (NTDLL.DLL): 0xC005: Access Violation. miso __ OpenSSL Project

Tweaking the default cert chain verification

Hi Using OpenSSL-0.9.7b. We are building an application where we want to have a flexible model for certificate trust. In essence, we want to be able to say: CA0 (self signed) is explicitly trusted CA1 (signed by CA0) is explicitly trusted CA2 (signed by CA1) is neutral

Re: some errors

"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> writes: > Hello, > > I try to write some beginner sample codes. Compilation is ok in Visual > C++ 6.0. > But when I execute it, program raise error on function > PEM_read_X509 at line 34. > > I don't know, where is problem... > you forgot to call OpenSSL

Target functionality for 0.9.8?

Please can some kind openSSL developer(s) tell me what the target functionality is for the 0.9.8 release? Judging by the mailing list there are not many outstanding problems at the moment. Does that mean that release will be delayed until there is a real problem detected, then the fix will be relea

some errors

Hello, I try to write some beginner sample codes. Compilation is ok in Visual C++ 6.0. But when I execute it, program raise error on function PEM_read_X509 at line 34. I don't know, where is problem... thanx, miso rsa.cpp Description: Binary data

A question about openssl used library

Dear all: I have a question about used libraries by openssl toolkits. OpenSSL toolkits includes three modules: libssl.a ,libcrypto.a ,and openssl. Can I only use the command line tool "openssl" independently without use any library like "libcrypto.so.0.9.8" ?? regards. Eric. _

Re: Triple DES ECB - just with key - no iv no salt

In message <[EMAIL PROTECTED]> on Wed, 17 Sep 2003 01:35:48 +0200 (CEST), Henrik Nordstrom <[EMAIL PROTECTED]> said: hno> On Tue, 16 Sep 2003, Richard Levitte - VMS Whacker wrote: hno> hno> > In message <[EMAIL PROTECTED]> on Tue, 16 Sep 2003 13:56:40 +0100, Robert Hogan <[EMAIL PROTECTED]> sai

Re: Triple DES ECB - just with key - no iv no salt

Thanks for the comments - constructive and otherwise. My ignorance has receded slightly and I now realise the command I think I may need is des-ede (encrypt-decrypt-encrypt right?).. No matter what IV I use the result is the same - so you're right about the dummy IV Henrik. Thanks. - Orig

RE: Cert chain confusion

On Tue, 16 Sep 2003, Dann Daggett wrote: > I understand. Are there options on how the chain is presented? > In particular, is it always presented as a single (combined) > response to the client, or can/does the client make a second > request for the next cert up the chain if it finds it does not >