RE: Custom attribute identifier for stateOrProvinceName

> From: owner-openssl-us...@openssl.org On Behalf Of SilverThunder > Sent: Monday, 05 January, 2009 14:41 > I need to create CSRs to be processed by a CA running on Windows 2003. The > problem that I have is that the CA do not use the standard "ST" attribute > for stateOrProvinceName, they use "S"

Re: openssl 0.9.8j

Blasdel, Jerry wrote: Would anyone have an update on the status of 0.9.8j and when it will be officially released? Our customer would like us to go back to using fips now that fips 1.2 has been certified. Is this version of OpenSSL going through a similar certification process? Any blurb t

Re: pkcs8 question

On Tue, Jan 06, 2009, Nate wrote: > I'm using openssl to create an encrypted key in pkcs8 format. Specifically > I'm using triple des. An example of the asn1parse output is below. > > My goal is to take the "rather long hexadecimal value", which I assume is > the encrypted key, and decrypt it u

Re: AES key generation

On Tue, Jan 06, 2009 at 07:02:44AM -0800, Cyanure wrote: > I have another question concerning the salt. Are there any recommendation > about the salt length or how the salt is generated ? ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-5v2/pkcs5v2_1.pdf 4.1 Salt [ ... lots of text about multi-use

openssl 0.9.8j

Would anyone have an update on the status of 0.9.8j and when it will be officially released? Our customer would like us to go back to using fips now that fips 1.2 has been certified. Is this version of OpenSSL going through a similar certification process? Any blurb that could be provided on the

Newbie Questions

A newbieto OpenSSL here. (Mainly used to using 3rd party authorities.) Not very good at command line stuff either. 1. Cert request generated from IIS 6 but it is against the default website with .txt extension. Can a cert be generated using this request? 2. Used the example in CA.p

pkcs8 question

I'm using openssl to create an encrypted key in pkcs8 format. Specifically I'm using triple des. An example of the asn1parse output is below. My goal is to take the "rather long hexadecimal value", which I assume is the encrypted key, and decrypt it using a separate triple des decryption library

Re: AES key generation

Thank you for your quick answer. I have another question concerning the salt. Are there any recommendation about the salt length or how the salt is generated ? And for the iteration number, you said that it is recommended to have more that 1000 iterations. In wich magnitude ? 5000, 10 000, 100 0

MODULE_PATH

Hi, I am trying to implement a new smartcard for a project I am working on. I am using M2Crypto as a python wrapper for openSSL. I am able to communicate with the smartcard using openssl on the command line just fine. The problem I have is with the python side of things. I can get all the setup e

Build error: /usr/local/ssl/lib/libcrypto.a: could not read symbols: Bad value

Hi All, I'm trying to get ssl support for my server running SLES 10 and python 2.4.5 and I'd like to send emails automatically. I just installed openssl 0.9.8i with no problems. It installed to the usual /usr/local/ssl. I then ran python setup.py build_ext -I/usr/local/ssl/include -L/usr/local/

help about ssl access with openssl cert.

I use openssl to sign the cert. and I've setuped a ca req a cert for my webserver, and sign with this ca, name with server.crt(cert file) and server.key(key file) configured the apache to use ssl, and the cert file. now I can access this ssl web site with firefox 3.0 but I can't access this ssl w

Custom attribute identifier for stateOrProvinceName

Hi everyone, I need to create CSRs to be processed by a CA running on Windows 2003. The problem that I have is that the CA do not use the standard "ST" attribute for stateOrProvinceName, they use "S" instead. I have researched this but can't find anything... can it be done without modifying the c

bntest BN_sqr Test Fails on Linux ( SUSE and REDHAT ) Z Series 64bit ..

hi, bntest BN_sqr Test Fails on Linux ( SUSE and REDHAT ) Z Series 64bit .. it works fine on 32bit. openssl version: openssl 0.9.8g platform : Linux ( SUSE and REDHAT ) Z Series 64bit . <> Please let me know if anybody have come across the issue or has insight into it ...