Re: How to create a certificate with 2 CRL distribution points?

2007-11-09 Thread Ted Zeng
I take the information from this web page: http://www.openssl.org/docs/apps/x509v3_config.html Which has the following: crlDistributionPoints=URI:http://myhost.com/myca.crl crlDistributionPoints=URI:http://my.com/my.crl,URI:http://oth.com/my.crl Ted Zeng Adobe Systems Inc. On 11/9/07 8:31 PM, "R

Re: How to create a certificate with 2 CRL distribution points?

2007-11-09 Thread Rodney Thayer
Ted Zeng wrote: > Hi, > > I use Mac OS X 10.4.10 to create a certificate with two DRL distribution > points. I have been able to create certs with one distribution point. > > Here is how I set in the conf file: > > [ certificate_extensions ] > basicConstraints = CA:false > extendedKeyUsage

ecdhp|k|b

2007-11-09 Thread Nathan Zierfuss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Does anybody knows what the letters p, k and b denote in the elliptical curve diffie-hellman abbreviations? Google has yielded nothing useful for me. Thanks, Nathan ecdhp160 ecdhp192 ecdhp224 ecdhp256 ecdhp384 ecdhp521 ecdhk163 ecdhk233 ecdh

How to create a certificate with 2 CRL distribution points?

2007-11-09 Thread Ted Zeng
Hi, I use Mac OS X 10.4.10 to create a certificate with two DRL distribution points. I have been able to create certs with one distribution point. Here is how I set in the conf file: [ certificate_extensions ] basicConstraints = CA:false extendedKeyUsage =codeSigning crlDistributionPoin

EVP_DecryptFinal_ex:bad decrypt

2007-11-09 Thread Pankaj Mathur
Hi , I am trying to encrypt and decrypt a large file using the Openssl API. I am doing this by calling EVP_EncryptUpdate / EVP_DecryptUpdate iteratively for a block size of 1024 and then calling the EVP_EncryptFinal_ex/ EVP_DecryptFinal_ex respectively in the end. It always fails to decrypt fo

Re: ASN1 questions

2007-11-09 Thread Ian Alderman
On Nov 9, 2007, at 2:48 PM, Jim Crafton wrote: Hi, I'm writing a C++ wrapper library around the OpenSSL API with the intent to not just support SSL for sockets, but as much of the other parts as possible, things like the message digests, encryption/decryption, certificates, etc. Why are you d

EVP_DecryptFinal_ex:bad decrypt

2007-11-09 Thread Pankaj Mathur
Hi , I am trying to encrypt and decrypt a large file using the Openssl API. I am doing this by calling EVP_EncryptUpdate / EVP_DecryptUpdate iteratively for a block size of 1024 and then calling the EVP_EncryptFinal_ex/ EVP_DecryptFinal_ex respectively in the end. It always fails to decrypt fo

ASN1 questions

2007-11-09 Thread Jim Crafton
Hi, I'm writing a C++ wrapper library around the OpenSSL API with the intent to not just support SSL for sockets, but as much of the other parts as possible, things like the message digests, encryption/decryption, certificates, etc. So far I have wrapped the core message digests, encryption algos,

Re: windows server 2003 cert req

2007-11-09 Thread Rodney Thayer
Are you saying you have a Microsoft Windows 2003 Server system that has already created a certificate request (PKCS-10 formatted data file) with multiple subjectaltname's, and you would like an OpenSSL-based CA to sign it and grant it "server authentication" and "client authentication" key usage?

RE : Re: 3des algorithm

2007-11-09 Thread El hallabi-Kettani Abderrahmane
See www.dis.uniroma1.it/~alberto/didattica/JCE_3DES.java as an example en mode "ede: encrypt-decrypt-encrypt" Abderrahmane, "Dr. Stephen Henson" <[EMAIL PROTECTED]> a écrit : On Thu, Nov 08, 2007, Lidia Fernndez wrote: > Hello all!! > > I have an application that interact with Linux a

Re: 3des algorithm

2007-11-09 Thread Lidia Fernández
Dr. Stephen Henson escribió: On Thu, Nov 08, 2007, Lidia Fernndez wrote: Hello all!! I have an application that interact with Linux and windows. i have to cypher a file in Linux, and windows has to decrypt it. I use openssl and 3des to cypher it. openssl enc -des3 -salt -in fil

BIO_read and base64 problems

2007-11-09 Thread Giovanni Ferrari
Goodmorning, i'm trying to write an easy program to test the base64 BIO filter but it seems it doesn't work. In particular if i push the bio64, i read a little amount of data and i pop the bio64 the read in the middle fail ( return 0 ). This doens't happen if the text to read is a lot. This is a l