RE: BIGNUM library

2007-04-16 Thread Edward Chan
Is there a specification on the format of a BIGNUM that someone can point me to? Is there a standard encoding/format that everyone adheres to? Or would different libraries have their own encodings? I hope not. Thanks, Ed From: [EMAIL PROTECTED] [mailto:

BIGNUM library

2007-04-16 Thread Edward Chan
How easy or difficult would it be to extract just the BIGNUM library from OpenSSL? Are there any documents on how to do this? Thanks, Ed

RE: RSA Key exchange and FIPS compliance

2007-04-16 Thread David Schwartz
> We use OpenSSL for encryption within our application. > I am now enhancing our application to become FIPS compliant. > The OpenSSL FIPS Security Policy lists RSA key wrapping and > key establishment as non-approved. But the policy states that > it is included when 80 to 150 bits of encryption st

RE: renewing certificate

2007-04-16 Thread David Schwartz
> The problem is with installing it on the server. It is a windows > 2003 server with II6, however the certificate isn't being handled > by IIS. I have no real clue how this thing was set up so I'm > grasping at straws. Gotta love clients that hire college kids to > do work, then are stuck when th

RSA Key exchange and FIPS compliance

2007-04-16 Thread Gatfield, Geoffrey
Hello, We use OpenSSL for encryption within our application. I am now enhancing our application to become FIPS compliant. The OpenSSL FIPS Security Policy lists RSA key wrapping and key establishment as non-approved. But the policy states that it is included when 80 to 150 bits of encryption stren

RE: renewing certificate

2007-04-16 Thread Bart Heller
I have the renewed cert, I just can't figure out how to get it on the server. If IIS was managing the certificate and the websites on this server I'd be fine, but that isn't the case. I'm grasping at straws trying to follow up undocumented work by a college kid for this client. Yay for me! Fr

RE: renewing certificate

2007-04-16 Thread Bart Heller
The problem is with installing it on the server. It is a windows 2003 server with II6, however the certificate isn't being handled by IIS. I have no real clue how this thing was set up so I'm grasping at straws. Gotta love clients that hire college kids to do work, then are stuck when the kid mo

Re: renewing certificate

2007-04-16 Thread Bill Angus
You might try the customer service dept. of the supplier who is providing your cert. Most are very good and will be able to help you do only what you need -- without a large number of time consuming extra steps. Bill Angus, MA - Original Message - From: Bart Heller To: openssl-u

RE: renewing certificate

2007-04-16 Thread David Schwartz
> I am trying to rewenew an expeired certificate on a windows > server 2003 machine. None of the steps in the RenewCert.txt > document seem to apply. I did not set this server up originally > and I need lots of help trying to figure this thing out. Is your problem obtaining the renewed certificat

Clent certificates & MSIE

2007-04-16 Thread Roehl, Dan
We have noticed that there is some coupling between a user's profile and his/her installed client certificates (which sort of makes sense). The client certificates are stored under the "personal" certificate store by default. Where/what in the users win profile does the reference to the personal ce

renewing certificate

2007-04-16 Thread Bart Heller
Hey everyone. I'm still not so into this so here I go again. I am trying to rewenew an expeired certificate on a windows server 2003 machine. None of the steps in the RenewCert.txt document seem to apply. I did not set this server up originally and I need lots of help trying to figure this thin

Re: openssl smime -enc speed question

2007-04-16 Thread Harald Latzko
Hello, Am 14.04.2007 um 00:04 schrieb Dr. Stephen Henson: 'tis done. I found a quiet period to look into it and test it a little. Check out the new -stream option in the smime utility for OpenSSL 0.9.9. Support in the API is quite simple too, just include the PKCS7_STREAM flag in the call

Re: openssl smime -enc speed question

2007-04-16 Thread Harald Latzko
Hello, Am 14.04.2007 um 00:04 schrieb Dr. Stephen Henson: Sorry to have given you false hopes. The issue that all the data has to be in working memory to be encrypted is indeed starting to become a real annoyance in some practical circumstances. So perhaps if Stephen Henson should develop

Re: PKCS7_encrypt leads to a segfault

2007-04-16 Thread Florian MANACH
According to an argument of the command line : cipher=EVP_aes_256_cbc() or cipher=EVP_des_ede3_cbc() Florian Manach NUMLOG [EMAIL PROTECTED] (+33)0130791616 Dr. Stephen Henson a écrit : On Fri, Apr 13, 2007, Florian MANACH wrote: Hello Steve and thank you for the answer. You were right. I wa