RE: X509 Cert dates

2005-05-25 Thread Pj
Thanks guys, you rock! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tan Eng Ten Sent: Thursday, 26 May 2005 12:13 PM To: openssl-users@openssl.org Subject: Re: X509 Cert dates Hi Pj, U could use memory BIO instead - BIO_new(BIO_s_mem()). Data written

Re: Problem loading engine module libgmp.so

2005-05-25 Thread prakash babu
Hello Nils,      The configure option you suggested works fine for Linux. For HPUX it did not work. It worked only after adding -DENGINE_DYNAMIC_SUPPORT to the configure option.   Thanks, PrakashNils Larsch <[EMAIL PROTECTED]> wrote: prakash babu wrote:> Hello All,> > I am using OpenSS

Re: X509 Cert dates

2005-05-25 Thread Tan Eng Ten
Hi Pj, U could use memory BIO instead - BIO_new(BIO_s_mem()). Data written to the BIO could be accessed by BIO_get_mem_data(). Pj wrote: Thanks Tan! that worked, I'm wondering if there is a way of reading the dates directly to a string buffer my code now reads: One more question, how do you

RE: X509 Cert dates

2005-05-25 Thread Pj
Thanks Tan! that worked, I'm wondering if there is a way of reading the dates directly to a string buffer my code now reads: One more question, how do you read the certificate authority from the cert? // Read in certificate dates // there must be a better way of doing this!

Re: X509 Cert dates

2005-05-25 Thread Tan Eng Ten
Hi, U could try: BIO *bio = BIO_new_fp(stdout, BIO_NOCLOSE); ASN1_TIME_print(bio, X509_get_notBefore(cert)); BIO_free(bio); Tell me if it works. Pj wrote: Hi All, How can I print localised, human readable certificate dates into a null terminated string buffer?

X509 Cert dates

2005-05-25 Thread Pj
Hi All, How can I print localised, human readable certificate dates into a null terminated string buffer? I wish to present the cert dates to the user as well as the fact that the dates are valid or invalid. Can someone point me to a good source for X509 manipulation? At the moment my funct

X509_set_issuer_name() problem

2005-05-25 Thread Tom Reader
Hello, I am trying to write some code to sign a request, and save the resulting certificate. I am having a number of problems, but have "distilled" this down to the sample code shown below. I have tried loading an existing request (as in the code below), as well as creating a request in mem

Re: Using OpenSSL to verify a FireFox signed form

2005-05-25 Thread M.E. Post
Are you exchanging messages between a windows client and a linux server? if so have you considered the difference in linebreaks? UNIX and WINDOWS interpret the "enter to the next line" ascii code in a different way. You might want to replace the /\r\n|\r|\n/" sequence (in regex) with "\r\n".

Re: Using OpenSSL to verify a FireFox signed form

2005-05-25 Thread Dr. Stephen Henson
On Wed, May 25, 2005, Chris Covell wrote: > Victor, > > > > $ openssl smime -verify -inform PEM -in signature.pk7 -CAfile > > > development_cm.pem -content content.txt > > > Yes, CR/LF can be a problem. Many MTA feel free to convert eol from > > CR/LF to LF and vice versa. > > Yeah, but I am n

Re: mini-ASN.1 compiler 0.9.8-dev

2005-05-25 Thread pana
The error exists also using openssl 0.9.8 beta2 version. I launch the command from my home, where I've installed the OpenSSL. Any suggestion? bye pana 2005/5/24, Dr. Stephen Henson <[EMAIL PROTECTED]>: > On Tue, May 24, 2005, pana wrote: > > > I found the manual page but when I try to use the c

Certificate verify failed on big-endian (Intel IXP425)

2005-05-25 Thread Cesc
Hi, A few days ago I posted to openssl.users the message i attach below. I have done some more research and after seeing that the ssl code works on a little endian pc with 0.9.6, the problem is: - with the big-endian Intel IXP425 ARM running 0.9.6 - the code of the application (SER, voip proxy, w

Re: Using OpenSSL to verify a FireFox signed form

2005-05-25 Thread Chris Covell
Victor, > > $ openssl smime -verify -inform PEM -in signature.pk7 -CAfile > > development_cm.pem -content content.txt > Yes, CR/LF can be a problem. Many MTA feel free to convert eol from > CR/LF to LF and vice versa. Yeah, but I am not using an MTA, I am signing the data in FireFox browser and

Re: Doubt regarding EMSA-PKCS1-v1_5

2005-05-25 Thread Dr. Stephen Henson
On Wed, May 25, 2005, Suram Chandra Sekhar wrote: > Hi all, > Thank you very much for the reply. I was going through the man page of > RSA_sign(). It is indicating as follows... > If type is NID_md5_sha1, an SSL signature (MD5 and SHA1 message digests > with PKCS #1 padding and no algorithm id

Re: Doubt regarding EMSA-PKCS1-v1_5

2005-05-25 Thread Suram Chandra Sekhar
Hi all, Thank you very much for the reply. I was going through the man page of RSA_sign(). It is indicating as follows... If type is NID_md5_sha1, an SSL signature (MD5 and SHA1 message digests with PKCS #1 padding and no algorithm identifier) is created. It means that Signature Algorithm is

Re: RFC2630 support

2005-05-25 Thread Dr. Stephen Henson
On Wed, May 25, 2005, Madhu Sudhan Reddy wrote: > Hello Dr Stephen, Thank you very much for your kind response. > > Below I am explaining the actual problem I am facing. > > I am presently developing JAVA wrapper for the signature functionality, > the JAVA sign() function returns signature in CM

RE: RFC2630 support

2005-05-25 Thread Madhu Sudhan Reddy
Hello Dr Stephen, Thank you very much for your kind response. Below I am explaining the actual problem I am facing. I am presently developing JAVA wrapper for the signature functionality, the JAVA sign() function returns signature in CMS format. But inside JAVA sign() function I used OpenSSL to

Re: evp_cipherfinal_ex problem in apache module

2005-05-25 Thread Peter Martin
I've added some more info. I have written an app that encrypts pages on a web server, and a module to decrypt them. The cipher routines are in a number of c++ classes compiled into a library used by other apps, and they appear to work correctly when invoked from the command line. However, whe