Re: Convert pem key to ssh-rsa format

2009-06-19 Thread Adriana Rodean
Hi Dave, Thank you so much for reply... To answer your question why i need to do this: - i have a WCF Client program that generates pair of keys, with these keys a java service is called, this java service calls a CA authority and gives me a certificate that contain only public key i sent - on cl

Re: Convert pem key to ssh-rsa format

2009-06-19 Thread Mounir IDRASSI
Hi, I have already posted to this list a C code of a program that converts from an OpenSSL public key to an OpenSSH public key. You can grab the code from the following link and compile it yourself : http://www.idrix.fr/Root/Samples/pubkey2ssh.c Cheers, -- Mounir IDRASSI IDRIX http://www.idri

RE: Convert pem key to ssh-rsa format

2009-06-19 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Adriana Rodean > Sent: Friday, 19 June, 2009 00:55 > I have a certificate in der format, from it with this command > i generate a public key: > How can i obtain a public key like the following? Either from > certificate or from this public k

Re: policy checking in openssl

2009-06-19 Thread Peter Sylvester
Hi, Note that policy procesing has to be specifically enabled with the appropriate verification arguments, it isn't by default. Yes "openssl verify" is usable for testing. Steve. thanks for the answer. Works like a charme when using -explicit_policy -policy anyPolicy for example. _

Re: policy checking in openssl

2009-06-19 Thread Kyle Hamilton
On Fri, Jun 19, 2009 at 10:07 AM, Dr. Stephen Henson wrote: > > This needs one of those box diagrams ;-) > > The simplest cases have policys as the intersection of the sets of all > policies. With the trust anchor policies being ignored. > > Say you have root->CA1(OID1, OID2) > > [i.e. CA1 has cert

Re: Newbie questions: generating RSA PGP private & Public key pair

2009-06-19 Thread Kyle Hamilton
If you need to create a PGP key, OpenSSL does not do this. The package you're looking for is GNU Privacy Guard, or gnupg, available from http://gnupg.org/. -Kyle H On Fri, Jun 19, 2009 at 11:08 AM, Bizhan Gholikhamseh (bgholikh) wrote: > Hi, > Thanks for yor help. >> Are you doing this for a cer

Re: length vs EOC

2009-06-19 Thread Chris Bare
> > > > > > The CMS_STREAM flag is ignored for OpenSSL < 1.0.0. For supported > > > versions of > > > OpenSSL it will produce an output with EOCs. > > > > > > Steve. > > > -- > > > > I'm using openssl-1.0.0-beta2 and I've tried setting CMS_STREAM as well as > > CMS_STREAM|CMS_PARTIAL, but I hav

RE: Newbie questions: generating RSA PGP private & Public key pair

2009-06-19 Thread Bizhan Gholikhamseh (bgholikh)
Hi, Thanks for yor help. > Are you doing this for a certificate request? No this is part of creating public and private key to exchange secure information on line. > > openssl genrsa -des3 2048 > mykey.key > openssl req -new -key mykey.key -sha256 I have more questions: 1- After issuing above com

Re: policy checking in openssl

2009-06-19 Thread Dr. Stephen Henson
On Fri, Jun 19, 2009, Peter Sylvester wrote: > Hello, > > some recent changes in openssl (1.0.0) done by Stephen Henson > are about an addition to have policy checking in path validation. > > I am trying to find out how to configure a small hierarchy with > one root and one operational CA, i.e. on

Re: length vs EOC

2009-06-19 Thread Dr. Stephen Henson
On Fri, Jun 19, 2009, Chris Bare wrote: > > On Wed, Jun 17, 2009, Chris Bare wrote: > > > > > I'm trying to use openssl to generate a signed CMS that matches the > > > output of > > > a windows program written with the BouncyCastle library. One of the > > > differences I've noticed is that my op

Re: length vs EOC

2009-06-19 Thread Chris Bare
> On Wed, Jun 17, 2009, Chris Bare wrote: > > > I'm trying to use openssl to generate a signed CMS that matches the output > > of > > a windows program written with the BouncyCastle library. One of the > > differences I've noticed is that my openssl output has the length set for > > each > > str

policy checking in openssl

2009-06-19 Thread Peter Sylvester
Hello, some recent changes in openssl (1.0.0) done by Stephen Henson are about an addition to have policy checking in path validation. I am trying to find out how to configure a small hierarchy with one root and one operational CA, i.e. one that issues certs to end entities, in the following way

OpenSSL FIPS Runtime Module

2009-06-19 Thread Patrik Slouk
Hi, I do not understand, what means "runtime module" in FIPS certificate #? Are anywhere available these runtime modules, i.e. compiled libosslfips.dll and libfips.so ? Security policy - Installation instructions: 1. Copy the shared library file to the appropriate location on the host system.

CMS Verify end Decrypt with Stream

2009-06-19 Thread Marco Monacelli
Hi, i have a simple question, it'is in development plan add this functionality to openssl. good work __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-us