RE: Nested ASN1 strings and OPENSSL_ALLOW_NESTED_ASN1_STRINGS

2007-06-29 Thread Williams Bryn-R40716
Hi, Thanks a lot for the prompt and clear response - much appreciated. It turned out that the apparent nested string was caused by a mismatch between the ASN.1 definition in the parser and the actual ASN.1 structure being parsed. Thanks again, Bryn -Original Message- From: Dr. Steph

Re: Proper way to use BIO_f_cipher with socket BIOs

2007-06-29 Thread Jernej Kos
Hi, well there is a specific reason I am not using SSL :-). Anyway, I have already solved the problem without using the BIOs. Best regards, Jernej Kos. On Friday 29 of June 2007, David Schwartz wrote: > > i am trying to use the BIO_f_cipher to encrypt/decrypt data > > coming/going over > > a so

Re: d2i_DSA_PUBKEY wrong tag

2007-06-29 Thread Marek Marcola
Hello, > So I am the part where I have to do the verify, currently now I have > the private key as base64 pem format, does it has to be DER format as > well? If you use any of d2i_* then source buffer should be in DER format. This means "der" to "internal" format conversion. If you use any of i2d_*

Re: d2i_DSA_PUBKEY wrong tag

2007-06-29 Thread Janet N
Hi Marek, So I am the part where I have to do the verify, currently now I have the private key as base64 pem format, does it has to be DER format as well? Thanks. On 6/28/07, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > Yes, my public key now is base64 pem format, how do I make it a DER

RE: Proper way to use BIO_f_cipher with socket BIOs

2007-06-29 Thread David Schwartz
> i am trying to use the BIO_f_cipher to encrypt/decrypt data > coming/going over > a socket BIO. Everything works fine, just the last message that is sent > blocks the receiving side until a socket timeout ocurrs - at that > time the > last block is properly decrypted. Is there something tha

Re: Question about subjectAltName

2007-06-29 Thread Chaz.
Steve, Thanks so much for the guidance. I was going to build openssl and use the command openssl -in client.pem -text and debug my way to that knowledge! Chuck Wegrzyn Dr. Stephen Henson wrote: > On Fri, Jun 29, 2007, Chaz. wrote: > >> Thanks for the information. How do I go about getting the

Re: Question about subjectAltName

2007-06-29 Thread Dr. Stephen Henson
On Fri, Jun 29, 2007, Chaz. wrote: > Thanks for the information. How do I go about getting the field > programmatically? I saw how to get the data in...I just don't see > how to get it out. > You find and decode the extension using X509_get_ext_d2i(). That will give you a STACK_OF(GENERAL_NAME).

Re: Question about subjectAltName

2007-06-29 Thread Chaz.
Thanks for the information. How do I go about getting the field programmatically? I saw how to get the data in...I just don't see how to get it out. Chaz. Dr. Stephen Henson wrote: > On Fri, Jun 29, 2007, Chaz. wrote: > >> I need to store an alternate string that will identify the subject. I >>

Proper way to use BIO_f_cipher with socket BIOs

2007-06-29 Thread Jernej Kos
Hi, i am trying to use the BIO_f_cipher to encrypt/decrypt data coming/going over a socket BIO. Everything works fine, just the last message that is sent blocks the receiving side until a socket timeout ocurrs - at that time the last block is properly decrypted. Is there something that should b

Re: Question about subjectAltName

2007-06-29 Thread Dr. Stephen Henson
On Fri, Jun 29, 2007, Chaz. wrote: > I need to store an alternate string that will identify the subject. I > had originally thought I would be able to use 'othername' as the way to > store it. When I ask for the extension back what I get is the string: > > othername: > > Which really isn't usefu

Question about subjectAltName

2007-06-29 Thread Chaz.
I need to store an alternate string that will identify the subject. I had originally thought I would be able to use 'othername' as the way to store it. When I ask for the extension back what I get is the string: othername: Which really isn't useful (I would like to get back my original string).