Re: matching keys

2008-06-11 Thread jimmy bahuleyan
Brian Smith wrote: I'm attempting to write a C function to match a private key to either it's corresponding public key or certificate for both RSA and DSA algorithms. At this point, I have the keys loaded into their corresponding RSA and DSA structures. From here, what parameter checks are nec

Re: duplicating an SSL struct

2008-06-11 Thread Victor Duchovni
On Wed, Jun 11, 2008 at 09:08:48PM -0700, David Schwartz wrote: > > > I am wrapping an ssl socket using c++ and use a third party library > > steam implementation. the library I use requires an implementation of a > > copy constructor. I managed to dup and initialize a simple BIO and then > > fre

RE: duplicating an SSL struct

2008-06-11 Thread David Schwartz
> I am wrapping an ssl socket using c++ and use a third party library > steam implementation. the library I use requires an implementation of a > copy constructor. I managed to dup and initialize a simple BIO and then > free it as required, but when it comes to SSL struct, thing don't seem > to wo

matching keys

2008-06-11 Thread Brian Smith
I'm attempting to write a C function to match a private key to either it's corresponding public key or certificate for both RSA and DSA algorithms. At this point, I have the keys loaded into their corresponding RSA and DSA structures. From here, what parameter checks are necesary to verify that the

Re: RAND_load_file takes a long time to load 1K bytes from /dev/random

2008-06-11 Thread Bruce Keats
I noticed that this parameter is reported on these systems as 4096, but the man page (man 4 random) says it should normally be 512 (bytes). It also goes on to say it can be changed to 32, 64, 128, 256, 512, 1024, 2048 which I assume is bytes. 4096 bits = 512 byes, so it kinda makes sense. When I

Re: RAND_load_file takes a long time to load 1K bytes from /dev/random

2008-06-11 Thread Glenn
The entropy pool size is configurable on some systems. For Linux see /proc/sys/kernel/random/poolsize Glenn On Wed, Jun 11, 2008 at 7:52 AM, Bruce Keats <[EMAIL PROTECTED]> wrote: > I forgot to mention that the systems in question are severs that do not > have the keyboard or mouse as sources o

Re: Unable to resolve the OpenSSL functions while linking

2008-06-11 Thread jimmy bahuleyan
[EMAIL PROTECTED] wrote: Hi, I am using the OpenSSL 0.9.7g 11 Apr 2005 on solaris machine for one appliacation.We are porting the same application to the Redhat Linux (Linux tam1 2.4.21-27.ELsmp #1 SMP ). We successfully deployed the above openssl version in the linux box.And we successfully

problem with certificates

2008-06-11 Thread lakshmi prasanna
Hi, The below error is obtained when no CA is setup in the machine, ie., cacert.pem and cakey.pem file are not present and the root certificate is not signed by the CA. The root certificate is signed by the root key generated while creating the certificate using command: *openssl x509

Re: RAND_load_file takes a long time to load 1K bytes from /dev/random

2008-06-11 Thread Bruce Keats
I forgot to mention that the systems in question are severs that do not have the keyboard or mouse as sources of entropy. Yes indeed, the problem seems a lack of entropy. What I find surprising is that on these systems, I seem to be able to get approx 400 bytes from /dev/random and it doesn't mat

duplicating an SSL struct

2008-06-11 Thread Lior Greenblatt
Hello, I am wrapping an ssl socket using c++ and use a third party library steam implementation. the library I use requires an implementation of a copy constructor. I managed to dup and initialize a simple BIO and then free it as required, but when it comes to SSL struct, thing don't seem to work

Unable to resolve the OpenSSL functions while linking

2008-06-11 Thread sunil.kumarvvn
Hi, I am using the OpenSSL 0.9.7g 11 Apr 2005 on solaris machine for one appliacation.We are porting the same application to the Redhat Linux (Linux tam1 2.4.21-27.ELsmp #1 SMP ). We successfully deployed the above openssl version in the linux box.And we successfully compiled the application. I

X509_dup bug ?

2008-06-11 Thread delcour.pierre
Hello, I wrote this code : X509* CA = X509_new(); X509* cert = X509_dup ( CA ); Each time i got a segmentation fault when i use cert (cert == NULL is true). For me, X509_dup duplicate the given X509 certificate, so i don't think that cert == NULL is a good behavior. . I'm using openssl 0.9.8g

duplicating an SSL struct

2008-06-11 Thread Lior Greenblatt
Hello, I am wrapping an ssl socket using c++ and use a third party library steam implementation. the library I use requires an implementation of a copy constructor. I managed to dup and initialize a simple BIO and then free it as required, but when it comes to SSL struct, thing don't seem to work

problem with certificates

2008-06-11 Thread lakshmi prasanna
Hi All, I am new to openssl, and having trouble with certificates. I have setup a local CA and issued a self signed trusted certificate for this, say root.pem. >From this trusted certificate, generated a client certificate from the root.pem CA certificate. Created a ServerCA certificate from roo

Re: OPENSSL Problem

2008-06-11 Thread Marek . Marcola
Hello, [EMAIL PROTECTED] wrote on 06/11/2008 08:51:45 AM: > Hi All, > > I have install the open ssl from the http://www.slproweb.com/products/Win32OpenSSL.html > now when i check it with the link point api then it giving me the following error “ > Unable to load/validate private_key ERRs: wsa

RE: SSL Problem

2008-06-11 Thread Saju
IMO the public-key of the signer of the server certificate CN=www.ws-onramp1.wholesale.bt.com should be in the CAfile (c:\curl\ca\ca.pem) -HTH _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Karia Ravi Sent: Wednesday, June 11, 2008 5:23 AM To: openssl-users@openssl.o

SSL Problem

2008-06-11 Thread Karia Ravi
Hello, I hope you can help me. I have been looking on the Internet and testing for a week now and have not had much luck. I am currently trying to automate a few manual activities within our organisation and I am trying to connect to our supplier to submit XML to them. Please see below, ope

Re: how to add an extension to a X509 certificate ? the answer

2008-06-11 Thread delcour.pierre
HEllo, here is the solution of my problem : I want to have this extension in my X509v3 certificate : X509v3 Authority Key Identifier: keyid:6B:FC:14:20:72:EE:15:6E:D1:29:7A:4D:40:69:90:F7:AE:B1:3A:FF DirName:/O=o/OU=ou/CN=vn/dnQualifier=a/wUIHLuFW7RKXpNQGmQ966xOv8= serial:01 To made this possib

Using Openssl with ECC

2008-06-11 Thread priya . kubher
Hi, I am using OpenSSL 0.9.8d 28 Sep 2006 (Library: OpenSSL 0.9.8g 19 Oct 2007) with ECC certificates, and Free Radius server, During the authentication process I get the error ciphersuite is not supported (ECDH with EDCSA). I am using a third party client to perform the authentication. How do