mttest crashed

2006-11-22 Thread benny yang
Hi *I wanna run the loading test using crypto/threads/mttest.c* I use the command below: mttest -threads 5000 -loops 10 After 2 or 3 hours, the mttest crashed. The environment is solaris 9.The description of core file is as followed: core 'core' of 9702:./mttest -threads 5000 -l

Re: ECC curve problem

2006-11-22 Thread Abhishek Tripathi
Hi Nils, Now you got my point but the code on which I am working uses the too much internals of those structures .That why I needed the change log.Inold OpenSSL code for the EC_KEY_METH_DATA they used some ECDSA_DATA_new() as follows EC_KEY *key ; /* some code */ key->meth_

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, Victor Duchovni <[EMAIL PROTECTED]> wrote: On Wed, Nov 22, 2006 at 09:31:35PM -0500, Chris Covington wrote: > I am most likely using the wrong terms (but I may be completely > confused, I admit). When one distributes client certificates to take > the place of usernames/passwords fo

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, Chris Covington <[EMAIL PROTECTED]> wrote: On 11/22/06, Chris Covington <[EMAIL PROTECTED]> wrote: > On 11/22/06, David Schwartz <[EMAIL PROTECTED]> wrote: > > > OK, perhaps I need to explain this more. I have a client cert > > > scenario where in order to verify the client's identi

Re: how to encrypt an existing certificate

2006-11-22 Thread Victor Duchovni
On Wed, Nov 22, 2006 at 09:31:35PM -0500, Chris Covington wrote: > I am most likely using the wrong terms (but I may be completely > confused, I admit). When one distributes client certificates to take > the place of usernames/passwords for authentication, how is that commonly > referred to? One

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, Chris Covington <[EMAIL PROTECTED]> wrote: On 11/22/06, David Schwartz <[EMAIL PROTECTED]> wrote: > > OK, perhaps I need to explain this more. I have a client cert > > scenario where in order to verify the client's identity a certificate > > is used instead of a username / password.

WIN32 winsock vs winsock2 coexistence?

2006-11-22 Thread Brown, Michael A
I'm looking at an app where the app and all libs/DLLs it uses EXCEPT openssl use ws2_32, and openssl uses wsock32. Is this a problem or can the two coexist peacefully? It makes me somewhat uneasy. If it is a problem, what does it take to rebuild OpenSSL 0.9.8d to use ws2_32? I can diddle the ma

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, David Schwartz <[EMAIL PROTECTED]> wrote: > OK, perhaps I need to explain this more. I have a client cert > scenario where in order to verify the client's identity a certificate > is used instead of a username / password. I would not like for anyone > to be able to just grab the cl

RE: how to encrypt an existing certificate

2006-11-22 Thread David Schwartz
> OK, perhaps I need to explain this more. I have a client cert > scenario where in order to verify the client's identity a certificate > is used instead of a username / password. I would not like for anyone > to be able to just grab the client certificate and impersonate, so I > would like to a

Re: Can't verify on an ASCII platform a signature generated on z/OS

2006-11-22 Thread Dr. Stephen Henson
On Thu, Nov 23, 2006, Dominique Blas wrote: > Hi, > > I have just read again the openssl archive back to 2001 but didn't find > exactly a clue to my pb. > > In fact, we installed a OpenSSL port on a z/OS. No problem with compilation, > the product works well. > It works well BUT ! > But we enc

Can't verify on an ASCII platform a signature generated on z/OS

2006-11-22 Thread Dominique Blas
Hi, I have just read again the openssl archive back to 2001 but didn't find exactly a clue to my pb. In fact, we installed a OpenSSL port on a z/OS. No problem with compilation, the product works well. It works well BUT ! But we encounter a pb with signature when we try to verify a signature ma

Re: how to encrypt an existing certificate

2006-11-22 Thread Marek Marcola
Hello, > OK, perhaps I need to explain this more. I have a client cert > scenario where in order to verify the client's identity a certificate > is used instead of a username / password. I would not like for anyone > to be able to just grab the client certificate and impersonate, so I > would lik

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > openssl.exe rsa -des -in certnew.cer -out passcert.cer > > unable to load Private Key > 3752:error:0906D06C:PEM routines:PEM_read_bio:no start > line:.\crypto\pem\pem_lib.c:644:Expecting: ANY PRIVATE KEY Are you trying to encrypt X509

Re: how to encrypt an existing certificate

2006-11-22 Thread Marek Marcola
Hello, > openssl.exe rsa -des -in certnew.cer -out passcert.cer > > unable to load Private Key > 3752:error:0906D06C:PEM routines:PEM_read_bio:no start > line:.\crypto\pem\pem_lib.c:644:Expecting: ANY PRIVATE KEY Are you trying to encrypt X509 certificate ? Why ? Certificate are public, RSA keys a

Re: how to encrypt an existing certificate

2006-11-22 Thread Marek Marcola
Hello, > hmm, tried that: > > openssl.exe rsa -des -in certnew.cer -out passcert.cer > > unable to load Private Key > 3752:error:0906D06C:PEM routines:PEM_read_bio:no start > line:.\crypto\pem\pem_lib.c:644:Expecting: ANY PRIVATE KEY Probably your RSA key has DER format (not PEM), add option "-in

Re: how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
On 11/22/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > How can I simply take an existing unencrypted client certificate and > add a password to it? In other words, do the opposite of: > > openssl rsa -in pass.pem -out nopass.pem openssl rsa -des -in nopass.pem -out pass.pem hmm, tried

Re: how to encrypt an existing certificate

2006-11-22 Thread Marek Marcola
Hello, > How can I simply take an existing unencrypted client certificate and > add a password to it? In other words, do the opposite of: > > openssl rsa -in pass.pem -out nopass.pem openssl rsa -des -in nopass.pem -out pass.pem Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __

how to encrypt an existing certificate

2006-11-22 Thread Chris Covington
Hi all, How can I simply take an existing unencrypted client certificate and add a password to it? In other words, do the opposite of: openssl rsa -in pass.pem -out nopass.pem thanks Chris __ OpenSSL Project

Re: Multiple certificate requests in one message

2006-11-22 Thread Victor B. Wagner
On 2006.11.22 at 16:40:27 +0100, Michael Str??der wrote: > Victor B. Wagner wrote: > > RFC 2511 defines ASN.1 syntax for putting multiple certificate request > > into one message: > > [..] > > Question is - how widespread is use of this syntax, is there any > > real-world CA which understand Cert

Re: ECC curve problem

2006-11-22 Thread Nils Larsch
Abhishek Tripathi wrote: Hi Nils , Thanks for your guidance but I kindly bring to your notice that 0.9.8-dev doesn't stands for 0.9.8d .It's the first version in 0.9.8 series before 0.9.8a.that's why I asked for change log because a lot of changes are made in latest version

EVP_DecryptFinal

2006-11-22 Thread k b
Hi, I'm decrypting using the EVP api and I'm encountering the following error when i do a EVP_DecryptFinal hashVerify:: ERROR error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt I have 2 questions 1) what's hashVerify got to do in the decryption process ? 2) any ideas what's

Re: Multiple certificate requests in one message

2006-11-22 Thread Michael Ströder
Victor B. Wagner wrote: > RFC 2511 defines ASN.1 syntax for putting multiple certificate request > into one message: > [..] > Question is - how widespread is use of this syntax, is there any > real-world CA which understand CertReqMessages sequence. There are several PKI implementations which sup

Multiple certificate requests in one message

2006-11-22 Thread Victor B. Wagner
RFC 2511 defines ASN.1 syntax for putting multiple certificate request into one message: CertReqMessages ::= SEQUENCE SIZE (1..MAX) OF CertReqMsg CertReqMsg ::= SEQUENCE { certReq CertRequest, pop ProofOfPossession OPTIONAL, -- content depends upon key type regIn

[no subject]

2006-11-22 Thread abhishek sinha
Hi all I am using the OpenSSL version 0.9.8d I am facing problem while using c_rehash script on powerpc(linux kernel 2.6.10-WR1.2ci_gpp). I have cross compiled Openssl for PowerPC. While creating the symbolic links for certificates by using c_rehash. I am getting following warning. c_rehash is no

Re: openssl base64 routines

2006-11-22 Thread Dr. Stephen Henson
On Wed, Nov 22, 2006, Ambarish Mitra wrote: > Hi all, > > Is there some API functions to base64 encode and decode strings? > > I saw that "base64" command is supported in openssl, (openssl base64 > [options]), but I could not find any functions that I can call in my C, C++ > application programs

openssl base64 routines

2006-11-22 Thread Ambarish Mitra
Hi all, Is there some API functions to base64 encode and decode strings? I saw that "base64" command is supported in openssl, (openssl base64 [options]), but I could not find any functions that I can call in my C, C++ application programs. Please guide. Best regards, Ambarish. _

Jesse Santana/AdminFinance/CSULB is out of the office.

2006-11-22 Thread Jesse Santana
I will be out of the office starting 11/22/2006 and will not return until 11/27/2006. I will respond to your message when I return. If you require immediate assistance, please contact the Campus Help Desk at [EMAIL PROTECTED]

Re: ECC curve problem

2006-11-22 Thread Abhishek Tripathi
Hi Nils , Thanks for your guidance but I kindly bring to your notice that 0.9.8-dev doesn't stands for 0.9.8d .It's the first version in 0.9.8 series before 0.9.8a.that's why I asked for change log because a lot of changes are made in latest version comapre to that old version .For e.g EC_

Re: ECC curve problem

2006-11-22 Thread Nils Larsch
Abhishek Tripathi wrote: Hi Friends, Presently I am working on some code which uses the Openssl 0.9.8-dev version in which ECC support was provided first time. 0.9.8d has already been released Can anybody help me out from where I can get the change log which tells me excactly

ECC curve problem

2006-11-22 Thread Abhishek Tripathi
Hi Friends, Presently I am working on some code which uses the Openssl 0.9.8-dev version in which ECC support was provided first time.Can anybody help me out from where I can get the change log which tells me excactly the changes made in that version upto latest version of OpenSSL.Ca