Opaque signed data

2008-02-15 Thread rfx
I use with success "pkcs7 -in signdata.txt -inform DER -print_certs -outform PEM -out Cert.cer" to extract certificats. But how to extract message from a pkcs7 opaque signed data ? Thanks Dr Franck ROUSSIA __ OpenSSL Proje

Re: Why EVP_get_digestbynid(NID_md5_sha1) returns NULL ?

2008-02-15 Thread Victor Duchovni
On Fri, Feb 15, 2008 at 07:26:04PM -0800, Volkan Civelek wrote: > i'm trying to understand how to make > EVP_get_digestbynid(NID_md5_sha1) work? > it always returns NULL? any ideas? There is no such digest algorithm. This is a sentinel value. -- Viktor. _

Why EVP_get_digestbynid(NID_md5_sha1) returns NULL ?

2008-02-15 Thread Volkan Civelek
hi, i'm trying to understand how to make EVP_get_digestbynid(NID_md5_sha1) work? it always returns NULL? any ideas? -v __ OpenSSL Project http://www.openssl.org User Support Mailing List

Why EVP_get_digestbynid(NID_md5_sha1) returns NULL ?

2008-02-15 Thread Volkan Civelek
hi, i'm trying to understand how to make EVP_get_digestbynid(NID_md5_sha1) work? it always returns NULL? any ideas? -v __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: Emptying the buffer

2008-02-15 Thread Joel Christner
Hi DS, I corrected the strings issue (a mistake I shouldn't have missed, also thanks to Jimmy's earlier email). I've leveled it down to a simple, small piece of code that does nothing more than take data from stdin, encrypt it, display the ciphertext, decrypt it, display the cleartext. Problem i

RE: Emptying the buffer

2008-02-15 Thread David Schwartz
Joel Christner wrote: > dataRead=recvfrom(connfd,readBuffer,sizeof(readBuffer),0,NULL,NULL); > for (i=0;i readBufferClear=decrypt(&context,readBuffer+i,1); You are passing characters one-at-a-time to your decryption function. Depending on exactly what this function does, this may indicate that yo

Debug assertion in EVP_PKEY_free()

2008-02-15 Thread Blomen Stefan
Hi, I have debug assertions in EVP_PKEY_free() using the following code: - #include #include #include #include "openssl/ssl.h" #include "openssl/conf.h" #include "openssl/engine.h" #include "openssl/pkcs12.h" using namespace std; int main() { ENGINE

Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread Dr. Stephen Henson
On Fri, Feb 15, 2008, Anri Lau wrote: > Hello guys, > > I setting the CRL path for SSL by SSL_context, but it is not useful. > > In manual page SSL_connection and SSL_accept are used to inited a handshake > and SSL_do_handshake() perform a handshake > > SSL_do_handshake should be called explici

Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread Anri Lau
I have do some work on pkcs11 engine but not on 9.8g just 9.8f. what i want to know is after retCode = SSL_accept(ssl); if the SSL_do_handshake() should be invoked explicitly. Does the SSL_accept/SSL_connect has done the work of SSL_do_handshake(). thanks a lot for you quickly response! On 15/0

Re: How use the puzzle of CRL in ssl connection

2008-02-15 Thread David Hostetter
After the accept do the following... BTW...are you using the pkcs11 engine? I am trying to find out the patch for 9.8g version. sbio=BIO_new_socket(socketFd, BIO_NOCLOSE); // Create a new SSL structure ssl=SSL_new(ctx); // Connect the read and write BIOs

How use the puzzle of CRL in ssl connection

2008-02-15 Thread Anri Lau
Hello guys, I setting the CRL path for SSL by SSL_context, but it is not useful. In manual page SSL_connection and SSL_accept are used to inited a handshake and SSL_do_handshake() perform a handshake SSL_do_handshake should be called explicitly after SSL_accept/SSL_connection is called? does SS

Re: Where is openssl_root on OS X?

2008-02-15 Thread zpayton
Sorry, find / -name "*ssl*" --Original Message-- From: [EMAIL PROTECTED] To: openssl-users@openssl.org ReplyTo: [EMAIL PROTECTED] Subject: Re: Where is openssl_root on OS X? Sent: Feb 14, 2008 8:52 PM U from a command window try: find / -name "ssl" ? Sent from my Verizon Wireless Bla

OPENSSL_Uplink(00509010,07): no OPENSSL_Applink

2008-02-15 Thread learning openssl
hello, I use the functions: r=RSA_generate_key(bits,e,NULL,NULL) oFile = fopen("MyKey.txt","w"); if (oFile!=0) { RSA_print_fp(oFile, r, 0); fclose(oFile); } to create one RSA key. But I got the error: OPENSSL_Uplink(00509010,07): no OPENSSL_Applink How can I handle this pr

Re: Error while execution of ERR_print_errors_fp()

2008-02-15 Thread jimmy bahuleyan
Parag Jhavery wrote: Hi Group, I am trying to create a SSL server with the following code. I am using the function ERR_print_errors_fp to get the last error in case of any failure. I want to divert the output to standard output stdout. For e.g. if(!SSL_CTX_use_PrivateKey_file(ctx, "privatee.k

pkcs11 engine

2008-02-15 Thread David Hostetter
I am using the latest 9.8g openssl on Solaris 10 update 3. The ssl handshake is working fine. I want to use the Niagra 2 chip to do my encryping but I need the pkcs11 engine. The 9.8g ENGINE_load_builtin_engines() does not have pkcs11. How do I get it and if there is a way then how do I instal

Re: Emptying the buffer

2008-02-15 Thread Jimmy B
On 2/15/08, Joel Christner <[EMAIL PROTECTED]> wrote: > Anyone have any ideas? > > Thanks > does it still happen after you changed your code? -jb __ OpenSSL Project http://www.openssl.org User Supp