Re: how to extract signature from public key using openssl?

2007-05-03 Thread Dmitrij Mironov
Hi Janet, For that moment I doesn't have access to openssl to test it, but try this one: $ openssl rsa -in certificate.pem -pubout -noout -text Unfortunately, -pubout command can't write output to a file (i.e. with -out). Regards, Dmitrij Janet N wrote: Hi Kyle, Thanks for the prompt

Re: how to extract signature from public key using openssl?

2007-05-03 Thread Kyle Hamilton
On 5/3/07, Janet N <[EMAIL PROTECTED]> wrote: Hi Kyle, Thanks for the prompt response. But I think my problem is my project doesn't want to produce the public key from openssl rsa command, because we need to get the public key in the rsa PEM format at the time when we issued the certificate and

RE: how to extract signature from public key using openssl?

2007-05-03 Thread David Schwartz
Hi David, I've tried the following command, but it failed to load cert: $ openssl x509 -outform PEM -inform usercert.pem -pubkey bad input format specified for Certificate unable to load certificate Thanks, Janet You didn't specify the input format. Try: openssl x509 -ou

Re: how to extract signature from public key using openssl?

2007-05-03 Thread Janet N
Hi David, I've tried the following command, but it failed to load cert: $ openssl x509 -outform PEM -inform usercert.pem -pubkey bad input format specified for Certificate unable to load certificate Thanks, Janet On 5/3/07, David Schwartz <[EMAIL PROTECTED]> wrote: Hi Kyle, Thanks for

RE: how to extract signature from public key using openssl?

2007-05-03 Thread David Schwartz
Hi Kyle, Thanks for the prompt response. But I think my problem is my project doesn't want to produce the public key from openssl rsa command, because we need to get the public key in the rsa PEM format at the time when we issued the certificate and upload it to our production database.

Re: how to extract signature from public key using openssl?

2007-05-03 Thread Janet N
Hi Kyle, Thanks for the prompt response. But I think my problem is my project doesn't want to produce the public key from openssl rsa command, because we need to get the public key in the rsa PEM format at the time when we issued the certificate and upload it to our production database. And the

Re: how to extract signature from public key using openssl?

2007-05-03 Thread Kyle Hamilton
My apologies: $ openssl rsa -pubin -in rsa.public -noout -text -Kyle H On 5/3/07, Kyle Hamilton <[EMAIL PROTECTED]> wrote: The CA doesn't generate the public key in your certificate. You generate it, and you send it to the CA to be bound to your identity -- the CA uses its private key to sign

Re: how to extract signature from public key using openssl?

2007-05-03 Thread Kyle Hamilton
The CA doesn't generate the public key in your certificate. You generate it, and you send it to the CA to be bound to your identity -- the CA uses its private key to sign the certificate, and the verifier already has the CA's public key to verify with. Without the public key in your certificate

how to extract signature from public key using openssl?

2007-05-03 Thread Janet N
Hi, I have a certificate in pem format issued to me by a CA, and a private key which I generated. Since I need to do domain key signing (dkim), I was asked to use the followng openssl command to generate the public key: $ openssl rsa -in rsa.private -out rsa.public -pubout -outform PEM Since I

Re: smime stream support; was: openssl smime -enc speed question

2007-05-03 Thread Harald Latzko
Hello! Am 14.04.2007 um 00:04 schrieb Dr. Stephen Henson: Sorry to have given you false hopes. The issue that all the data has to be in working memory to be encrypted is indeed starting to become a real annoyance in some practical circumstances. So perhaps if Stephen Henson should develop

Re: Private Key problem

2007-05-03 Thread alois74
Steve, THANK YOU!!! :-D openssl pkcs8 -inform DER -nocrypt -in file.der on the binary i got from xxd did the trick! Yaiii! You made my day! What a relieve. I can now load the privatekey just fine. i can finally move on, to the next problem that will probably arise soon:) thanks again, alois --

Re: Private Key problem

2007-05-03 Thread Dr. Stephen Henson
On Thu, May 03, 2007, [EMAIL PROTECTED] wrote: > Thanks! > I currently dont have access to the key generator, so cant post an example. > However, the key actually DOES start with 30. > The first chars are: > 30820 > the last ones are: > F750 > > then theres a newline at the end. i tried removing

SHA-1 of Subject Name

2007-05-03 Thread Amedeo VENEROSO
Hello, is it possible by using OpenSSL to generate a SHA-1 hash of the DER-encoded subject name ?? I've seen the option "-hash" but it doesn't use SHA-1. Some security systems (such as PKCS #15 and Java MIDP) require using SHA-1 hashing. Thanks, Amedeo

Re: RE: Private Key problem

2007-05-03 Thread alois74
thanks for your answer. xxd -r -p does work, and leaves me with a binary file. i tried converting that to PEM, which leaves me with something indeed quite looking like a private key, when comparing to one i created with openssl, but still no luck. some weird chars in there:S now if only i knew wh

Re: Private Key problem

2007-05-03 Thread alois74
Thanks! I currently dont have access to the key generator, so cant post an example. However, the key actually DOES start with 30. The first chars are: 30820 the last ones are: F750 then theres a newline at the end. i tried removing that, ..same. anyway, im pretty confused. No idea what else i coul