Re: DSA signatures

2003-09-19 Thread Frank
Nils Larsch wrote: > On Friday 19 September 2003 15:28, Frank wrote: > > What I've seen so far with openssl is that there seems to be 10,000 ways > > to do the same thing so I want to make sure I understand how to do a DSA > > signature. My questions are as follows: > > > > 1. Do you need a sep

Re: DSA signatures

2003-09-19 Thread Nils Larsch
On Friday 19 September 2003 15:28, Frank wrote: > What I've seen so far with openssl is that there seems to be 10,000 ways > to do the same thing so I want to make sure I understand how to do a DSA > signature. My questions are as follows: > > 1. Do you need a separte cert for signing RSA DSA? I c

trusting issuer certificates

2003-09-19 Thread Christopher Fahey
hopefully someone can help me with this one. i have scoured the documentation, source code and mailing list but it is to no avail. here is the problem. i want to trust peer certificates based upon the issuer. seems simple but i can't seem to make it work. to add to the difficulty, i am not add

Re: Converting PEM cert to DER format

2003-09-19 Thread Rich Salz
Yes, the DER format is a stream of bytes that can be written to the network, stored on a file, etc. The i2d_XXX functions convert the internal C structure to a DER buffer. The "trick" to using i2d is you first give a NULL pointer, that tells you how much memory you'll need to allocate; then y

Re: Converting PEM cert to DER format

2003-09-19 Thread Frank
Well the what I'm trying to do is send as part of an application msg the senders certificate in the most efficient from a network perspective (i.e. DER right?) I can load from PEM a X509 structure. How would I then but that in a memory buffer to send via a socket? As I would like to read that ba

Re: Converting PEM cert to DER format

2003-09-19 Thread Massimiliano Pala
Frank wrote: Ok, I got a few pieces meal answers (and no answers) here so I wanted to recap to make sure I have it all straight. Certificates - Even though you may wish to send the cert DER encoded over the network, it is advisable to create and work with it while PEM encoded, correct? Now all the

Converting PEM cert to DER format

2003-09-19 Thread Frank
Ok, I got a few pieces meal answers (and no answers) here so I wanted to recap to make sure I have it all straight. Certificates - Even though you may wish to send the cert DER encoded over the network, it is advisable to create and work with it while PEM encoded, correct? Now all the examples I

DSA signatures

2003-09-19 Thread Frank
What I've seen so far with openssl is that there seems to be 10,000 ways to do the same thing so I want to make sure I understand how to do a DSA signature. My questions are as follows: 1. Do you need a separte cert for signing RSA DSA? I created certs with the following shell (create parms and c

RE: Tweaking the default cert chain verification

2003-09-19 Thread Mats Nilsson
Richard Levitte - VMS Whacker wrote: > Well, with my scheme, the "entire chain" goes from the leaf to your > point of trust, not further. Checking CRLs between those two points > makes sense, doesn't it? Henrik Nordström outlined the reasons to do > so in message > <[EMAIL PROTECTED]>. Yes, of

Re: OpenSSL database file

2003-09-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Fri, 19 Sep 2003 10:34:42 +0200 (CEST), Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> said: levitte> In message <[EMAIL PROTECTED]> on Thu, 18 Sep 2003 20:26:35 -0600, Jose Hernandez <[EMAIL PROTECTED]> said: levitte> levitte> jhernan> I have a doubt about

Re: OpenSSL database file

2003-09-19 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 18 Sep 2003 20:26:35 -0600, Jose Hernandez <[EMAIL PROTECTED]> said: jhernan> I have a doubt about of the index.txt database file. I mean, I almost jhernan> understand all the record fields but in the record: jhernan> V 040829000430Z 03 unknown jhernan> /C=M

Problems Building OpenSSL for VxWorks

2003-09-19 Thread Bob Bradley
I'm trying to build OpenSSL 0.9.7b for VxWorks (Tornado 2.0.2 for PowerPC 860) on a Windows XP host and I ran into some problems. I did the following: 0) Installed Tornado 2.0.2 (a while ago, but noted just to be thorough). 1) Installed cygwin. 2) Launched cygwin. 3) Un-targz'd OpenSSL 0.9.7b into

smime and pkcs7 enveloped data questions

2003-09-19 Thread BP
Hello, I have some questions regarding an enveloped data structure, created by : openssl smime -encrypt -aes128 -binary -outform PEM -in mydoc.doc -out envdata.pem certdest1.pem certdest2.pem This means that I want to cipher mydoc.doc for recipients dest1 and dest2, using an AES 128-CBC key. -