Re: Problems decrypting PKCS# Private Key , Docs needed

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, Carlos Roberto Zainos H wrote: > > > If its in DER format then d2i_PKCS8PrivateKey_bio() will handle the > encrypted form, and d2i_PKCS8_PRIV_KEY_INFO() followed by EVP_PKCS82PKEY() > for the unencrypted form. > > Steve. > > > > Thanks a lot dr Henson . just anothe

certificate creation verification errors / ldap

2004-04-23 Thread Mark
so i created local certs for ldap using: /usr/depot/openssl/current/ssl/misc/CA.sh -newca openssl req -newkey rsa:1024 -nodes -keyout newreq.pem -out newreq.pem /usr/depot/openssl/current/ssl/misc/CA.sh -sign and then i tried to start the ldap and verify the certs using openssl s_client

Re: Problems decrypting PKCS# Private Key , Docs needed

2004-04-23 Thread Carlos Roberto Zainos H
If its in DER format then d2i_PKCS8PrivateKey_bio() will handle the encryptedform, and d2i_PKCS8_PRIV_KEY_INFO() followed by EVP_PKCS82PKEY() for theunencrypted form.Steve.   Thanks a lot dr Henson . just another little question where are the references to d21PKCS8_PRIV_KEY_INFO() and EV

Re: OpenSSL with Pound rev-proxy problem - repost without Re:

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, Jonathan Cyr wrote: > Hello OpenSSL folks, > > Having a problem generating the proper certificate set for my Verisign > 128bit class 3 certificate. > > Here's the story... > > I am using a Reverse-proxy, load balancer called Pound, it's open > source, and uses certificat

OpenSSL with Pound rev-proxy problem - repost without Re:

2004-04-23 Thread Jonathan Cyr
Hello OpenSSL folks, Having a problem generating the proper certificate set for my Verisign 128bit class 3 certificate. Here's the story... I am using a Reverse-proxy, load balancer called Pound, it's open source, and uses certificates/keys from OpenSSL.  They seem to be generated before

Re: Problems decrypting PKCS# Private Key , Help needed

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, Carlos Roberto Zainos H wrote: > Hi all!!! > > Thanks again for the answers. > > The question that I now post refers to decrypt a private key PBE (PKCS#5). > I've working with priv/pub keys gotten from openssl, but now my C > applications needs to work with ones generated

Problems decrypting PKCS# Private Key , Help needed

2004-04-23 Thread Carlos Roberto Zainos H
Hi all!!!   Thanks again for the answers.   The question that I now post refers to decrypt a private key PBE (PKCS#5). I've working with priv/pub keys gotten from openssl, but now my C applications needs to work with ones generated with another application (commercial software). I've been discovere

Re: Add a new signer to a PKCS#7

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, Antonio Ruiz Martínez wrote: > Hello! > > I'm trying to add a new signer to a PKCS#7 that I receive from > another person. In first term, I'm decoding the PKCS#7 and then I'm > trying to using my private key and my cert to sign the content of this > PKCS#7 and insert my

Add a new signer to a PKCS#7

2004-04-23 Thread Antonio Ruiz Martínez
Hello! I'm trying to add a new signer to a PKCS#7 that I receive from another person. In first term, I'm decoding the PKCS#7 and then I'm trying to using my private key and my cert to sign the content of this PKCS#7 and insert my signature in this PKCS#7 in order to get the PKCS#7 with the two

Re: Problems compiling 0.9.7d for WCE

2004-04-23 Thread Antonio Ruiz Martínez
Hello! Steven Reddie wrote: > Hi Antonio, > > A patch for this has been submitted and I'll work it into a larger set of > changes for supporting newer WCE SDKs. To fix the problem that you're > having right now take a look at the source code at the locations listed > below and make sure that the

DES write key out

2004-04-23 Thread Kai
Hi,   Just a quick question on the DES library, I have generated and scheduled a key to work with, but how do I see the contents of the key? I would like to extract the key and write it to a file…   Thanks   John

Re: Success: Re: cannot compile openssl-0.9.7d into php-4.3.6 with apache-1.3.27 on Redhat 7.3

2004-04-23 Thread Mike Ryerse
So do you think that if I would have re-installed curl and made sure that it used libssl.so.0.9.7 instead of libssl.so.2 (and the same for libcrypto.*) that PHP might have worked? --- Richard Levitte - VMS Whacker <[EMAIL PROTECTED]> wrote: > In message <[EMAIL PROTECTED]> on > Thu, 22 Apr 2004 22

Re: Securing a CA

2004-04-23 Thread Charles B Cranston
Mark H. Wood wrote: Um, feel free to point me elsewhere, but I'm having trouble visualizing what's being discussed. I keep reading "branched certificate chain", but what I understood from the description is like this: Before:OurRoot ---> Level1 ---> EndUsers After: IdenT

Réf. : Re: signing a file with openssl

2004-04-23 Thread LAMI, Gilles - DSIA
Thank you ! "Dr. Stephen Henson" <[EMAIL PROTECTED]> 23/04/2004 14:38 Veuillez répondre à openssl-users Pour : [EMAIL PROTECTED]@[EMAIL PROTECTED] Hub

Re: SSL and Python

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, Lukasz Wójcicki wrote: > > > > > > I read about non blocking IO in documentation of OpenSSL. There is > written > > > that I have to call SSL_write when I get SSL_ERROR_WRITE. What I'm doing > bad > > > ? > > > > > > > Where does it say that? In general you should wait until

Crypt::SSLeay & client certificate authentication

2004-04-23 Thread Sean Evans
Reposting this since it got lost in the churn. I have a Perl script using that is failing mysteriously to connect with an HTTPS site requiring client certificates for authentication. Here's the command that allows me to connect to the site in question: openssl s_client -connect hostname:443 -cert

Re: signing a file with openssl

2004-04-23 Thread Dr. Stephen Henson
On Fri, Apr 23, 2004, [EMAIL PROTECTED] wrote: > Hi, > > I am trying to sign a file with openssl : > > openssl rsautl -raw -sign -in coucou1.pdf -inkey gilles.pem -out sig > Enter pass phrase for gilles.pem: > RSA operation error > 30452:error:0406B06E:rsa routines:RSA_padding_add_none:data too

RE: Problems compiling 0.9.7d for WCE

2004-04-23 Thread Steven Reddie
Hi Antonio, A patch for this has been submitted and I'll work it into a larger set of changes for supporting newer WCE SDKs. To fix the problem that you're having right now take a look at the source code at the locations listed below and make sure that the closing ')' is included. You'll see tha

signing a file with openssl

2004-04-23 Thread gilles . lami
Hi, I am trying to sign a file with openssl : openssl rsautl -raw -sign -in coucou1.pdf -inkey gilles.pem -out sig Enter pass phrase for gilles.pem: RSA operation error 30452:error:0406B06E:rsa routines:RSA_padding_add_none:data too large for key size:rsa_none.c:70: I did not find anything clear

Problems compiling 0.9.7d for WCE

2004-04-23 Thread Antonio Ruiz Martínez
Hello! I'm compiling OpenSSL 0.9.7d for WCE but when I execute: nmake -f ms\ce.mak I'm getting the next error: clarm.exe /Fotmp32_ARM\apps.obj -DMONOLITH -Iinc32 -Itmp32_ARM /W3 /WX / Ox /O2 /Ob2 /Gs0 /GF /Gy /nologo -DWCEPLATFORM=MS_POCKET_PC_2002 -DARM -D_ARM_ - DUNDER_CE=300 -D_WIN

Re: Success: Re: cannot compile openssl-0.9.7d into php-4.3.6 with apache-1.3.27 on Redhat 7.3

2004-04-23 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Thu, 22 Apr 2004 22:38:33 -0700 (PDT), Mike Ryerse <[EMAIL PROTECTED]> said: mikeryerse> I was able to finally get php-4.3.7-devel loaded into mikeryerse> apache by removing my install of openssl-0.9.7d (by mikeryerse> deleting /usr/local/ssl) and then installing

Re: SSL and Python

2004-04-23 Thread Lukasz Wójcicki
> > > > I have server SSL written in C and client SSL written by python. Also, I > > use > > > > SSL non blocking in server SSL. > > > > Beginning If I trying send any data to client, it's ok. In one moment I > > get > > > > SSL_ERROR_WANT_WRITE. Because I have non blocking SSL in server, my > > pr