Re: Extracting Public Key from .CER file

2007-02-12 Thread Ravi Bhatt
Hello, I want to use the Open SSL function call to extract the Public Key from the Manufacturers X.509 Certificate, which is in the .CER format. Could someone please advise me? Thanks & Regards - Need Mail bonding? Go to the Yahoo! Mail Q&A for great tips from

RE: BIO_read(), SSL_read(), return values

2007-02-12 Thread David Schwartz
> Hi, I have a question. I have multithread system, with non > blocking I/O and perhaps 100 connections to servers. I have a > special thread, that waits on select(). When it returns me, that > I have some data for reading, I start the reading for every > connection. That's not particularly effic

BIO_read(), SSL_read(), return values

2007-02-12 Thread Milan Křápek
Hi, I have a question. I have multithread system, with non blocking I/O and perhaps 100 connections to servers. I have a special thread, that waits on select(). When it returns me, that I have some data for reading, I start the reading for every connection. When the select throws me timeout, I s

Re: OpenSSL crashes in verify with this specific file.

2007-02-12 Thread Nils Larsch
Steffen Lips wrote: Hi Kyle, I am using version 0.9.8c. I know that the verifying is ok when using -inform DER, because the format is DER. But when using -inform SMIME, OpenSSL normally exits normally with some error messages. But with this file openssl crashes. This happens in PKCS7_read_S

VeriSign Payflow Pro Configuration

2007-02-12 Thread Vandegrift, Ken
I am a new user to OpenSSL and I am trying to get our Payflow Pro account to accept transaction using XMLPay. I keep getting a certificate error: "Could not verify the first certificate" I am trying to send the transaction from X-Cart Shopping Cart Software with the following command: C:\OpenS

Re: BMPSTRING in extensions

2007-02-12 Thread Dr. Stephen Henson
On Mon, Feb 12, 2007, Michael Leuchtner wrote: > Seems I do something wrong when I create/ convert my BMPSTRING. When I create > my certificate reqeust I always get an octet string value (FD FD FD FD AB AB > AB AB AB AB AB AB ) but no embedded bmpstring. Strange thing is, when I > alternate the

Re: Library loading issue on multi processor Windows 2003

2007-02-12 Thread Luc Perthuis
Marek Marcola wrote: Hello, Mark wrote: I'm not an expert in OpenSSL but AFAIK OpenSSL uses threads internally and the locking callbacks are necessary to synchronise its internal data. Perhaps someone else can clarify this? OpenSSL does not use threads internally and if you don

AW: BMPSTRING in extensions

2007-02-12 Thread Michael Leuchtner
Seems I do something wrong when I create/ convert my BMPSTRING. When I create my certificate reqeust I always get an octet string value (FD FD FD FD AB AB AB AB AB AB AB AB ) but no embedded bmpstring. Strange thing is, when I alternate the string ("myTemplate") to an other string (of the same l

RE: Library loading issue on multi processor Windows 2003

2007-02-12 Thread Marek Marcola
Hello, > > Mark wrote: > > > Have you implemented the CRYPTO locking callbacks? > > > > Well, my sample code is such simple that i did not think to > > implement them. > > Nevertheless, it works really fine on ANY platform it has > > been tested, BUT under quadri Xeon Windows 2003. > > As a matte

RE: Library loading issue on multi processor Windows 2003

2007-02-12 Thread Mark
Hi Luc, > Mark wrote: > > Have you implemented the CRYPTO locking callbacks? > > Well, my sample code is such simple that i did not think to > implement them. > Nevertheless, it works really fine on ANY platform it has > been tested, BUT under quadri Xeon Windows 2003. > As a matter of fact, th

Re: Verify a Certificate

2007-02-12 Thread Dr. Stephen Henson
On Mon, Feb 12, 2007, Marek Marcola wrote: > Hello, > > I have a secure connection with a buffered BIO, and after the connection > > is established, I want to verify (on th eClient) the Servers > > certificate with a Root-CA. > > How can I do this with openssl? > With functions like: > > cert

Re: Library loading issue on multi processor Windows 2003

2007-02-12 Thread Luc Perthuis
Mark wrote: Luc, Have you implemented the CRYPTO locking callbacks? Mark __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automate

Re: Verify a Certificate

2007-02-12 Thread Marek Marcola
Hello, > I have a secure connection with a buffered BIO, and after the connection > is established, I want to verify (on th eClient) the Servers > certificate with a Root-CA. > How can I do this with openssl? With functions like: cert = SSL_get_peer_certificate(ssl); X509_STORE_load_locations(C

RE: Library loading issue on multi processor Windows 2003

2007-02-12 Thread Mark
Luc, Have you implemented the CRYPTO locking callbacks? Mark __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager

Re: BMPSTRING in extensions

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 13:24:25 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> 362:d=6 hl=2 l= 51 cons: SEQUENCE mleuchtner> 364:d=7 hl=2 l= 9 prim: OBJECT:1.3.6.1.4.1.311.20.2 mleuchtner> 375:d=7 hl=2 l= 38 prim: OCTET STRING

Re: BMPSTRING in extensions

2007-02-12 Thread Dr. Stephen Henson
On Mon, Feb 12, 2007, Michael Leuchtner wrote: > Ok, I think I know the structure of the value. When I look at a "microsoft > style" request samle with the openssl command line tool, I get the following > output: > > ... > 362:d=6 hl=2 l= 51 cons: SEQUENCE > 364:d=7 hl=2 l= 9 prim: OBJ

Verify a Certificate

2007-02-12 Thread Markus Wenke
Hello, I have a secure connection with a buffered BIO, and after the connection is established, I want to verify (on th eClient) the Servers certificate with a Root-CA. How can I do this with openssl? thanks in advance Markus _

BMPSTRING in extensions

2007-02-12 Thread Michael Leuchtner
Ok, I think I know the structure of the value. When I look at a "microsoft style" request samle with the openssl command line tool, I get the following output: ... 362:d=6 hl=2 l= 51 cons: SEQUENCE 364:d=7 hl=2 l= 9 prim: OBJECT:1.3.6.1.4.1.311.20.2 375:d=7 hl=2 l= 38 pr

[no subject]

2007-02-12 Thread Richard Levitte - VMS Whacker
In message <[EMAIL PROTECTED]> on Mon, 12 Feb 2007 11:34:22 +0100, "Michael Leuchtner" <[EMAIL PROTECTED]> said: mleuchtner> The request to the MS CA needs the "enroll certtype extension" (OID mleuchtner> 1.3.6.1.4.1.311.20.2) where I put the name of the certificate template mleuchtner> in. mleu

[no subject]

2007-02-12 Thread Michael Leuchtner
Hello! I'm developing an application for requesting certificates at a Microsoft CA. I use the openssl libraries to bulid my certificate request. The request to the MS CA needs the "enroll certtype extension" (OID 1.3.6.1.4.1.311.20.2) where I put the name of the certificate template in. I've alre