Re: Unsigned attributes to PKCS#7

2004-09-01 Thread Nils Larsch
Antonio Ruiz Martínez wrote: Hello! I would like to add a TimeStamping to a signed PKCS#7 and I have got some questions: - Is it the TimeStamping structure in asn.1 defined in openssl (or planned)? rfc 3161 timestamps are currently not implemented in OpenSSL, but you can use the Openssl patch

Unsigned attributes to PKCS#7

2004-09-01 Thread Antonio Ruiz Martínez
Hello! I would like to add a TimeStamping to a signed PKCS#7 and I have got some questions: - Is it the TimeStamping structure in asn.1 defined in openssl (or planned)? - Is there some attribute defined in Openssl to add the time stamping structure to a PKCS#7 as an unsigned attribute (is the

Re: Encryption using EVP_PKEY

2004-09-01 Thread Dr. Stephen Henson
On Wed, Sep 01, 2004, Fabrício Abrão Costa wrote: > Hi There, > I have a doubt about the encryption using the EVP_PKEY estructure. > What happens is that I need get a private key from a Engine. This part is > ok, I got the private key using the ENGINE_load_private_key. > The next step is encrypt a

Re: Certificate chain verification with more crl

2004-09-01 Thread Dr. Stephen Henson
On Wed, Sep 01, 2004, chiba4mail wrote: > Hi, > I'd like to verify a certificate chain with crl check. > > This is the scenario: > > A->B->C->D(end user) > > a rootCA (A) signed a certificate for an other CA (B) > that signed a certificate for a third CA (C). > The last CA (C) signed an user ce

Certificate chain verification with more crl

2004-09-01 Thread chiba4mail
Hi, I'd like to verify a certificate chain with crl check. This is the scenario: A->B->C->D(end user) a rootCA (A) signed a certificate for an other CA (B) that signed a certificate for a third CA (C). The last CA (C) signed an user certificate (D) used for authentication. Each CA has own crl, s

TLS encrypt with RC4 question

2004-09-01 Thread Niklas Olsson
Hi, I figured out from yesterdays mail, I misstook the Finish handshake with the CertificateVerify. I havn't got it to work completly yet and I just wanted to check if my RC4 encryption is wrong. (using TLS_RSA_WITH_RC4_128_MD5) I do like this void EncryptRC4(unsigned char *pKey, int nKeyLen,

Encryption using EVP_PKEY

2004-09-01 Thread Fabrício Abrão Costa
Hi There, I have a doubt about the encryption using the EVP_PKEY estructure. What happens is that I need get a private key from a Engine. This part is ok, I got the private key using the ENGINE_load_private_key. The next step is encrypt a plain text using the EVP_PKEY that I got, but the unique pla

Looking for best practices for session cache client

2004-09-01 Thread Sylvain MARECHAL
Hello, I have to develop a simple ssl client. Currently, it works, but to improve performance, I try to anderstand the session cache client mecanism. Here is what I have anderstood. Can someone tell me if I'm right ? After looking in the man page, I see that cache should be enabled with this cal