Re: Need help with certs for Cisco "EasyVPN"

2006-09-14 Thread Ted Mittelstaedt
John, Please provide the openSSL invocations with complete command line options you are using to generate the certificates. I hope to God you aren't using some front end script to run openSSL or we won't ever get anywhere. Ted - Original Message - From: "John A. Kilpatrick" <[EMAIL P

Support for octet (file) import by the built-in ASN.1 compiler, from openssl.cnf?

2006-09-14 Thread Ken Johanson
Hello, Does anyone know if there is some syntactical sugar that will allow us to import binary data from a file, from within openssl.cnf? Specifically, I want to experiment with importing photo-ids (jpegs) into the a cert/req. I found, and am able to use, the new arbitrary-oid/built-in compiler

Re: Importing RSA Public Key generated by JRE

2006-09-14 Thread Marek Marcola
Hello, > I am attempting to import a RSA Public Key file generated by JRE 5.0 using > OpenSSL. > > As I understand it, JRE's RSA Public Key is in X.509's SubjectPublicKeyInfo > structure. Then you should try d2i_RSA_PUBKEY(). Best regards, -- Marek Marcola <[EMAIL PROTECTED]>

Any UK-like PKI laws in Canda?

2006-09-14 Thread Phil Dibowitz
This is sorta tangentially off-topc, but I'm not sure where else to ask. As many of you probably heard, the UK is activating a portion of a 6-year-old law that allows them to sieze private keys: http://news.zdnet.com/2100-1009_22-6073654.html?tag=nl http://news.zdnet.com/2100-1009_22-6105680.

problem with openssl 0.9.8c

2006-09-14 Thread Hong Ye
I installed openssl 0.9.8c on Solais sparcv9. Then I built Apache 2.0.59 using openSSL 0.9.8c. When I start Apache, I saw errors in Apache's error log: [Thu Sep 14 14:19:44 2006] [notice] Apache/2.0.59 (Unix) mod_ssl/2.0.59 OpenSSL/0.9.8c config ured -- resuming normal operations [Thu Sep 14 14:

RE: Attribute Certificate with OpenSSL?

2006-09-14 Thread Mouse
Your API looks good - perhaps your code combined with x509AT from Univ. of Malaga can provide the complete coverage? And yes - I'd like to take a look at your code (assuming it's under GPL, or OpenSSL license). I'll check with my bosses to see if they'd approve "more active" participation. Thank

Re: Attribute Certificate with OpenSSL?

2006-09-14 Thread Saurabh Arora
On 9/14/06, Mouse <[EMAIL PROTECTED]> wrote: First - thank you! At least it was something. I went through the Web sit and the code distro itself. Web site shows how to use their command x509AT. Great. There's no AT-related README though, no documentation, no edits or patch-format changes. Thus

RE: Attribute Certificate with OpenSSL?

2006-09-14 Thread Daniel Diaz Sanchez
Hello, I developed a beta API code for OpenSSL that may help you. Find enclosed a pdf document with the description. Tell me if you are interested or anybody wants to help me to improve it. Take into account that is a very very beta code. Apart from that, Jose Antonio Montenegro and Javier Lopez

RV: Attribute Certificate with OpenSSL?

2006-09-14 Thread Daniel Diaz Sanchez
Hello, I developed a beta API code for OpenSSL that may help you. Find a description. Tell me if you are interested or anybody wants to help me to improve it. Take into account that is a very very beta code. Apart from that, Jose Antonio Montenegro and Javier Lopez from Malaga University have be

RE: Attribute Certificate with OpenSSL?

2006-09-14 Thread Mouse
First - thank you! At least it was something. I went through the Web sit and the code distro itself. Web site shows how to use their command x509AT. Great. There's no AT-related README though, no documentation, no edits or patch-format changes. Thus hard to figure out the scope of changes involv

Re: What's the difference between openssl 0.9.8c and 0.9.7k

2006-09-14 Thread Bernhard Froehlich
Hong Ye wrote: I need to install openSSL so I can build Apache_2.0.59 with SSL enabled. I saw Openssl 0.9.8c and 0.9.7k were released on the same day. What's the difference between this two versions? Which one should I choose for building Apache 2? This would probably be more appropriate on an

What's the difference between openssl 0.9.8c and 0.9.7k

2006-09-14 Thread Hong Ye
I need to install openSSL so I can build Apache_2.0.59 with SSL enabled. I saw Openssl 0.9.8c and 0.9.7k were released on the same day. What's the difference between this two versions? Which one should I choose for building Apache 2? _

Re: errors in DTLS implementation in openssl0.9.8a

2006-09-14 Thread Rob Dugal
There seems to be some confusion on the version number for DTLS.   Here is what RFC4347 says:  version        The version of the protocol being employed.  This document        describes DTLS Version 1.0, which uses the version { 254, 255        }.  The version value of 254.255 is the 1's compleme

RE: Warning in sha.h not able to use on HP-UX.

2006-09-14 Thread Marek Marcola
Hello, > First I would like to thank you very much. > I just tested if I can use uint64_. I think I can use it. So Instead of > unsigned long long can I use uint64_t? Yes, sha512 requires unsigned 64-bit integer. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __

RE: Warning in sha.h not able to use on HP-UX.

2006-09-14 Thread Bhat, Jayalakshmi Manjunath
Hi All, First I would like to thank you very much. I just tested if I can use uint64_. I think I can use it. So Instead of unsigned long long can I use uint64_t? Regards, Jaya. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marek Marcola Sent: Thursday

Re: Warning in sha.h not able to use on HP-UX.

2006-09-14 Thread Marek Marcola
Hello, > I have ported OPENSSL on VxWorks (host is HP-UX and target is VxWorks) > I want to use SHA-512, When I compile I am getting the following > warnings > > h/openssl/sha.h:179: warning: ANSI C does not support `long long' > h/openssl/sha.h:180: warning: ANSI C does not support `long long' >

Warning in sha.h not able to use on HP-UX.

2006-09-14 Thread Bhat, Jayalakshmi Manjunath
Hi All, I have ported OPENSSL on VxWorks (host is HP-UX and target is VxWorks) I want to use SHA-512, When I compile I am getting the following warnings h/openssl/sha.h:179: warning: ANSI C does not support `long long' h/openssl/sha.h:180: warning: ANSI C does not support `long long' h/openssl/s

Re: Reading in memory DER using BIO

2006-09-14 Thread Marek Marcola
Hello, > Is there a way that i can get an X509 cert from an array holding a cert in > DER format. > So my question is How do i read a DER using a BIO cause the cert in is > memory and not in a file (for file i know there are d2i functions that > return X509). You may use something like that:

Re: Reading in memory DER using BIO

2006-09-14 Thread Marek Marcola
Hello, > Is there a way that i can get an X509 cert from an array holding a cert in > DER format. > So my question is How do i read a DER using a BIO cause the cert in is > memory and not in a file (for file i know there are d2i functions that > return X509). You may use something like that: /