Generation of Public Key using exponent and modulus

2006-08-07 Thread James Richard van den Berg
Hi All   I just want to find out if there is a function in openssl c++ libraries that can be used to create a public key object from a modulus and public exponent. I looked but couldn't find one.   Thanks James van den Berg Yahoo! Music Unlimited - Access over 1 million songs. Try it free.

RE: Putting just SSL_read() and SSL_write() inside the non-blocking regions

2006-08-07 Thread David Schwartz
> Is it "safe" to put just SSL_read() and SSL_write() inside the > non-blocking BIO regions and leaving SSL_accept(), SSL_connect(), > SSL_shutdown(), accept(), socket(), bind(), listen(), connect(), > shutdown(), close(), SSL_CTX_new(meth), SSL_new(ctx), > SSL_CTX_free(ctx), etc. in the blocking

Putting just SSL_read() and SSL_write() inside the non-blocking regions

2006-08-07 Thread Joe Flowers
Is it "safe" to put just SSL_read() and SSL_write() inside the non-blocking BIO regions and leaving SSL_accept(), SSL_connect(), SSL_shutdown(), accept(), socket(), bind(), listen(), connect(), shutdown(), close(), SSL_CTX_new(meth), SSL_new(ctx), SSL_CTX_free(ctx), etc. in the blocking BIO re

Re: can repository reliably convert between PEM and DER?

2006-08-07 Thread bgiles
>> Can a certificate repository freely convert between PEM and DER formats? > > Yes, they are simple transcriptions, so something else is going on. IIRC the 'trusted' tag on some certs were getting lost when converted back to PEM. But it's been awhile and could easily have been a problem between

Re: can repository reliably convert between PEM and DER?

2006-08-07 Thread Richard Salz
> Can a certificate repository freely convert between PEM and DER formats? Yes, they are simple transcriptions, so something else is going on. /r$ -- SOA Appliances Application Integration Middleware __ OpenSSL Projec

can repository reliably convert between PEM and DER?

2006-08-07 Thread bgiles
[I'm not sure if this goes into -users or -dev since the implementation uses the openssl library, not the command-line tools.] Can a certificate repository freely convert between PEM and DER formats? I thought they were simple transcriptions, but I'm not sure since I'm having problems with a trus

Re: Trusting a server certificate

2006-08-07 Thread Marek Marcola
Hello, > Wouldn't it be sufficient use SSL_CTX_set_verify_locations to point to > the server's certificate itself ? > > I thought the verification process would accept the certificate as long > as one of the certificates in the chain is trusted, even if it is the > last one. Or first, depending

RE: extending a PKCS12 certificate

2006-08-07 Thread Mouse
No, I didn't think of using Attribute Certificate not for "authentication" per se - but to ascertain certain properties of the authenticated entities. Your visa example is excellent - it illustrates my point very well. As for who manages AC - that's a different question, because AT THIS TIME CA's

Re: Trusting a server certificate

2006-08-07 Thread Alain Damiral
Wouldn't it be sufficient use SSL_CTX_set_verify_locations to point to the server's certificate itself ? I thought the verification process would accept the certificate as long as one of the certificates in the chain is trusted, even if it is the last one. Or first, depending on how you see it

Re: Trusting a server certificate

2006-08-07 Thread Marek Marcola
Hello, > Can anyone please help me on the below question? > > Thanks, > Ravi. > > On 8/3/06, ravi shankar <[EMAIL PROTECTED]> wrote: > Hi, > > I am new to openssl. How do we tell the SSL client to trust > the server certificate in advance using openssl APIs. For >

Re: Trusting a server certificate

2006-08-07 Thread ravi shankar
Hi,Can anyone please help me on the below question?Thanks,Ravi.On 8/3/06, ravi shankar <[EMAIL PROTECTED] > wrote:Hi,I am new to openssl. How do we tell the SSL client to trust the server certificate in advance using openssl APIs. For example, when we have the trusted root from the webserver, we ca