DSA_sign()

2006-03-01 Thread Julien Demoor
Hello, I'm getting an error with the DSA_sign() function : "data too large for key size". I have inputed a 40-byte-long string representing a hexadecimal SHA-1 digest. I can't find what the correct digest format is, nor if anything else may lead to that error. Any help will be greatly appreciated.

Re: Trying to build OpenSSL 0.9.8a from source

2006-03-01 Thread Kyle Hamilton
If you have a completely different version of openssl on your system, that shouldn't make a difference in the test environment. Try completely removing your source tree and restarting from the pure tarball. Also, try getting the latest 0.9.8 snapshot from ftp://ftp.openssl.org/snapshot/ . and I

PKCS7_verify with CRL

2006-03-01 Thread Venkata Sairam
Hi I have the PKCS7 object signed by a certificate. The certificate is revoked and I have the corresponding CRL. I have the certificate in the certs variable and the CRL in the store variable. I am using the method below: int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store, BIO *

RE: Trying to build OpenSSL 0.9.8a from source

2006-03-01 Thread Fabro, Loic
Quick update, I did try that as well (probably forgot before posting my results :-( ): ./config --prefix=/usr/local/openssl no-idea no-asm gives me a: Doing ofb ofb_encrypt encrypt error 29 15 85 50 70 35 06 C4 29 F2 4A 24 70 EB 3D 3F Doing ofb64 ofb64_encrypt encrypt error Doing ede_ofb64

FW: error in CRYPTO_mem_leaks_fp

2006-03-01 Thread Venkata Sairam
Hi Does anyone encounter this issue stated below before? I am stuck with my development. Can any one help\p? Thanks Hi My application written (in cpp) using openssl 0.9.7e is having some memory leaks. I try the standard way to find the memory leak using //In the Beginning CRYPTO_malloc_debug_i

Re: Compiled latest version 0.9.8a but still can't get sha-256 hash working

2006-03-01 Thread Brian Candler
On Wed, Mar 01, 2006 at 12:01:52PM -0800, Carl Youngblood wrote: >Can somebody please explain to me how to compile openssl with sha-256 >support? I have built the latest version from source but still can't >seem to find a way to get it working. How *exactly* did you compile from sourc

Compiled latest version 0.9.8a but still can't get sha-256 hash working

2006-03-01 Thread Carl Youngblood
Can somebody please explain to me how to compile openssl with sha-256 support?  I have built the latest version from source but still can't seem to find a way to get it working.Thanks,Carl

Re: Compiled on windows but lacking symbols

2006-03-01 Thread William A. Rowe, Jr.
William A. Rowe, Jr. wrote: Chandi Bernier wrote: My point was... why on Linux did I need only libssl and to compile the same client on Windows/MinGW requires libssl and libeay32. Something's wrong. You either want libssl + libcrypto, or libssl32 + libeay32. Whoops - you either want libs

Re: Compiled on windows but lacking symbols

2006-03-01 Thread William A. Rowe, Jr.
Chandi Bernier wrote: My point was... why on Linux did I need only libssl and to compile the same client on Windows/MinGW requires libssl and libeay32. Something's wrong. You either want libssl + libcrypto, or libssl32 + libeay32. On Linux the reason it -probably- worked is that 1. linu

Re: Compiled on windows but lacking symbols

2006-03-01 Thread Dr. Stephen Henson
On Wed, Mar 01, 2006, Chandi Bernier wrote: > > My point was... why on Linux did I need only libssl and to compile the same > client on Windows/MinGW requires libssl and libeay32. I could not find a > lot of doc about the differences between the two. The only thing I've found > said libeay32

Re: Compiled on windows but lacking symbols

2006-03-01 Thread Chandi Bernier
My point was... why on Linux did I need only libssl and to compile the same client on Windows/MinGW requires libssl and libeay32. I could not find a lot of doc about the differences between the two. The only thing I've found said libeay32 is the predecessor of openssl. Is that right ? Dr He

Re: Extract Issuer / Subject from X509 certificate

2006-03-01 Thread Brian Candler
On Wed, Mar 01, 2006 at 06:06:22PM +0530, Ambarish Mitra wrote: > The "openssl" command line tool works fine. However, I have to use this in a > C program. Therefore I was asking the API function name which can extract > these information from within the C code. $ cd openssl-0.9.8a/apps $ less x50

Re: How to get To-Be-Signed portion of certificate with openssl api ?

2006-03-01 Thread Dr. Stephen Henson
On Wed, Mar 01, 2006, Tatsuya Tsurukawa wrote: > Hi All, > > I have a quick question. > How can I get To-Be-Signed portion of certificate with openssl api ? > In case of using JDK, X509Certificat class and getTBSCertificate() method > seem to be available for the same purpose. > > I'm not famili

RE: Extract Issuer / Subject from X509 certificate

2006-03-01 Thread Ambarish Mitra
The "openssl" command line tool works fine. However, I have to use this in a C program. Therefore I was asking the API function name which can extract these information from within the C code. -Original Message- From: Brian Candler [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 01, 20

Re: Extract Issuer / Subject from X509 certificate

2006-03-01 Thread Brian Candler
On Wed, Mar 01, 2006 at 05:38:36PM +0530, Ambarish Mitra wrote: >Given such an input, I have to extract the subject and the issuer (and >possibly serial number). Is there any API for this? If anyone can at >least give me the initial first steps, it will be helpful. Try using the openss

Re: Extract Issuer / Subject from X509 certificate

2006-03-01 Thread Kyle Hamilton
The stream is supposed to contain linefeeds. Otherwise, this is called "PEM-encoded DER" format, and the PEM functions will work to get the data quite nicely. -Kyle H On 3/1/06, Ambarish Mitra <[EMAIL PROTECTED]> wrote: > > Dear all, > > I have an application, which reads a presented certificate

Extract Issuer / Subject from X509 certificate

2006-03-01 Thread Ambarish Mitra
Dear all,   I have an application, which reads a presented certificate in stream. For example, the following is the input:     -BEGIN CERTIFICATE-MIIFUjCC. .. .. .Fk71GQ==-END CERTIFICATE-     Given such an input, I have to extract the subject and the issuer (and possibly se

Fw: problem in pkcs12_parse

2006-03-01 Thread Víctor Torres Padrosa
I would be grateful if someone could help me.   I have tried to parse the attached pkcs12 file using the code below and openssl 0.9.8a. The PKCS12 file contains a private key, a user certificate and the root CA certificate used to sign the user certificate. All of them have a localKeyID fiel

pkcs12_parse problem

2006-03-01 Thread Alicia Asín
Hi all, I've installed openssl 0.9.8a version and I'm using new features from pkcs12_create (cert maybe null). Everytime I call PKCS12_parse it transforms pkey address into 0x0, so it's impossible to recover values from pk12 object. I've searched some example codes and they seem the same as mine, b