What meams first byte '04' in EC public key?

Hello everybody I created EC keypair via JAVA with secp160r2 template. When I looked at text form of public key, I saw there this: "04666d59b1fb53c1c998c12c71731d3a36a37cd995cadeee96c156c8d7c7852b39b5fefd1fa3ce18c7" I know that last 40 bytes present x and y number of ec point but I don't know

Openssl backward compatibility

Hi Listers, I'm having a problem shipping my (xml security)library, which is based on openssl crypto implementation. I have statically linked it with the ssl and crypto libraries (-lssl -lcrypto). And my openssl version is OpenSSL 0.9.8c 05 Sep 2006 (Library: OpenSSL 0.9.8e 23 Feb 2007) When I

Re: question on ca/certificate signing, importing

You need to import the CA certificate into your web client. To do that, you may need to convert it to PKCS7/12 format (I don't use IE so can't say what certificate format it will accept). david chinn wrote: > I set up a CA and used it to sign a server certificate for an apache > webserver. > Whe

RE: Safe signed certificate generation during server installation ?

Hello, > > > Now you *are* saying that if you just use something to validate the > > > certificate, you are safe. > > > > > > You and I are in violent agreement, you just don't see it. You > > > also suggest > > > setting up an SSL connection that provides everything except > > > MITM detection. >

Re: Safe signed certificate generation during server installation ?

On Thu, Sep 27, 2007 at 11:38:39AM -0700, David Schwartz wrote: > > considered as proposition to discussion. Real, secure programming should > > be based on existing, well checked protocols (which is possible in this > > case). > > The OP was going to embed his CA's private key in his installer.

RE: Safe signed certificate generation during server installation ?

> Hello, > > Now you *are* saying that if you just use something to validate the > > certificate, you are safe. > > > > You and I are in violent agreement, you just don't see it. You > > also suggest > > setting up an SSL connection that provides everything except > > MITM detection. > > You then

question on ca/certificate signing, importing

Hello all: I set up a CA and used it to sign a server certificate for an apache webserver. The server is called gorsky. When I access the site with IE7, the certificate isn't trusted; I'd like to import the CA's certificate. However, when I view the certificate in IE7 and go to the cer

Re: ASN1_item_sign() / ASN1_item_verify()

Hello, thanks :) That was the problem.. I was initializing the library on the server but not on the client. Thanks again! Later, Max Marek Marcola wrote: Do you have OpenSSL library initialized ? Look at man page for SSL_library_init. smime.p7s Description: S/MIME Cryptographic Signatur

TinyCA Signing Certificates with DSA Key Problem

I created a CA using TinyCA. The Certificate has an RSA Key included. I created a Server-Certificate with an RSA key and signed the Certificate with the key of the CA. Works .. good. But the signing fails if I try to sign a Server Cert with a DSA Key included. Error message: digital envelope rout

Re: Unsigned CRL

BSC schrieb: Hello I need to generate unsigned (not signed by any certificate) CRL How can I do this? Maybe it is possible to crack signed CRL and eraze a signature? Please help Regards, BSC I cannot imagine any use for an unsigned CRL, since everyone could forge such a CRL. So I doubt it

Re: Question about an error: "decryption failed or bad record mac"

My SSL application recently began throwing the following error whenever I try to connect: SSL error (-1, 1, 336130329) (error:1408F119:SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac) The strange thing is that the same application, running on a different machine, does not have

Unsigned CRL

Hello I need to generate unsigned (not signed by any certificate) CRL How can I do this? Maybe it is possible to crack signed CRL and eraze a signature? Please help Regards, BSC -- View this message in context: http://www.nabble.com/Unsigned-CRL-tf4510330.html#a12863760 Sent from the OpenSSL

Re: RSA key conversion

On 9/27/07, Marek Marcola <[EMAIL PROTECTED]> wrote: > Hello, > > Hi, I'm developing a client-server architecture to encrypt/decrypt > > data which works like this: the client asks the server for the key > > using a ssl connection, the server transmits the key to the client that > > then encrypts/

Re: openssl support TLS 1.0 (RFC 2246) and TLS 1.1 (RFC 4346) ?

On 9/27/07, Manish Jain <[EMAIL PROTECTED]> wrote: > Hi, > > With reference to openssl's README, it supports TLS v1; does it mean > that it supports TLS 1.0 (RFC 2246) and TLS 1.1 (RFC 4346) ? > I think it generally means TLSv1.0 (haven't looked at any of the latest snapshots). you can take a look