RE: A question about mal-formed private keys

2009-04-22 Thread Bob Barnes
Steve, Just so I'm clear, what I hear you saying is that when I re-encrypt the RSA private key with the new password, that the error is not propagated to the new private key file and that corresponds to what I see when I subsequently decrypt the new encrypted private key because I no longer get

Re: A question about mal-formed private keys

2009-04-22 Thread Dr. Stephen Henson
On Wed, Apr 22, 2009, Bob Barnes wrote: > Steve, > > Just so I'm clear, what I hear you saying is that when I re-encrypt the > RSA private key with the new password, that the error is not propagated to > the new private key file and that corresponds to what I see when I > subsequently decrypt

Re: A question about mal-formed private keys

2009-04-22 Thread Dr. Stephen Henson
On Wed, Apr 22, 2009, Bob Barnes wrote: > I've been working with OpenSSL to try and convert an existing private key > generated by an old SSL software package and during the process of using > PKCS8 to decrypt from the "Encrypted Private Key" to the "RSA Private Key" I > get an error "No Octet S

A question about mal-formed private keys

2009-04-22 Thread Bob Barnes
I've been working with OpenSSL to try and convert an existing private key generated by an old SSL software package and during the process of using PKCS8 to decrypt from the "Encrypted Private Key" to the "RSA Private Key" I get an error "No Octet String in PrivateKey". My understanding is that th

Re: Reading DER format public Key Using JSAFE ToolKit

2009-04-22 Thread Kyle Hamilton
No, we are only experts in OpenSSL. We can tell you how to create the public key, and/or the certificate which contains it, using openssl tools -- but most of us don't have any experience with JSAFE. -Kyle H On Tue, Apr 21, 2009 at 5:26 PM, Dineshkumar C wrote: > Hello Experts, > > i am impleme

Re: OpenSSL 1.0.0 beta 2 released

2009-04-22 Thread tensy joseph
Can the future version of openssl support aix-xlc_r compiler .Presently it has the support for only aix-cc . Is this possible to support the aix-xlc_r and aix64-xlc_r Thanks Rajan On Tue, Apr 21, 2009 at 9:59 PM, OpenSSL wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > > Open

RE: Sanity check regarding conversion of pem to cer & distributionof cer

2009-04-22 Thread Andrew Greig
> openssl x509 -in cacert.pem -inform PEM -out cakey.der -outform DER > > I then renamed the cakey.der to cakey.cer and added it to > Acrobats trust just fine. However, I want to make sure that it > is OK to freely distribute the cakey.cer file to all of the users > that need to ad our CA to thei

RE: Sanity check regarding conversion of pem to cer & distributionof cer

2009-04-22 Thread David Schwartz
> openssl x509 -in cacert.pem -inform PEM -out cakey.der -outform DER > > I then renamed the cakey.der to cakey.cer and added it to > Acrobats trust just fine. However, I want to make sure that it > is OK to freely distribute the cakey.cer file to all of the users > that need to ad our CA to thei

Re: Sanity check regarding conversion of pem to cer & distribution of cer

2009-04-22 Thread Tomas Gustavsson
Yes that is ok. It's even easier with: openssl x509 -in cacert.pem -inform PEM -out cakey.cer -outform DER no need to rename... Cheers, Tomas Andrew Greig skrev: I am using openssl to generate pk12 user certs to be used for signing Adobe Acrobat PDF documents. In order to get Acrobat to

Sanity check regarding conversion of pem to cer & distribution of cer

2009-04-22 Thread Andrew Greig
I am using openssl to generate pk12 user certs to be used for signing Adobe Acrobat PDF documents. In order to get Acrobat to validate the signature I had to add our CA cert to the trust in my installation of the Acrobat program. When doing so, the Acrobat program expects a .cer file. I used

Re: 'RSA_verify' and 'RSA_padding_check_PKCS1_type_1:block type is not 01' error

2009-04-22 Thread Rodrigo Canellas
Em Friday 17 April 2009 18:05:35 Dr. Stephen Henson escreveu: > On Fri, Apr 17, 2009, Rodrigo Canellas wrote: > > > Hi! > > > > > > > > I am trying to use 'RSA_verify' to verify a signature, but I am getting the > > error "67567722", which is translated to: "error:0407006A:rsa > > routines:

Openssl 1.0.0

2009-04-22 Thread The Doctor
Now we are on to Beta 2 , Great News. When should expecting: BetaX RCX and the release? Also what errors or issues are we looking for in this beta? -- Member - Liberal International This is doc...@nl2k.ab.ca Ici doc...@nl2k.ab.ca God, Queen and country! Beware Anti-Christ rising! Never Satan

RE: unable to get local issuer certificate

2009-04-22 Thread Duncan Berriman
> How about serialnumber? Is it possible that the server is clustered > as you hypothesized, and different instances have different certs -- > both/all for the same subject=server (as would make sense), > but one of them > invalid? Serial number is the same. > I don't think there's any easy w

Re: hmac digest wrong?

2009-04-22 Thread Ronald Hatcher
Of course! - thank you On 21 Apr 2009, at 17:42, Victor Duchovni wrote: On Tue, Apr 21, 2009 at 04:36:34PM +0100, Ronald Hatcher wrote: Hi there - I'm trying to create an hmac digest which works OK from php as: $signature = hash_hmac('sha1', "ronald" , $apikey); However, I get a different