Complete implementation for CTR mode

2009-07-08 Thread rakesh aggarwal
Hi, Can somebody tell me why CTR mode for AES algorithm has not implemented completely in OpenSSL? I saw the source code of OpenSSL and found that it is in partial implementation stage from many past releases of OpenSSL.  Even though I have implemented the remaining interface for it, I

Re: Issue with Private key with FIPS enabled openssl

2009-07-08 Thread tensy joseph
when i am generating the key in Non fips mode using this command openssl genrsa -out ./server/keys/fresh.key 1024 I was able to use this key in Fips Mode as well as in Non Fips mode . Thanks in advance Rajan On Wed, Jul 8, 2009 at 9:01 PM, Dr. Stephen Henson wrote: > On Wed, Jul 08, 2009,

Re: Need help please: calculate SHA256.

2009-07-08 Thread Dr. Stephen Henson
On Wed, Jul 08, 2009, Bizhan Gholikhamseh (bgholikh) wrote: > > > > > I have a text file, let us call it test.tx, which I need to send it > > > through a secure mechanism to a remote site. > > > I have already created a pair of public and private rsa key using > > > openssl. > > > I want to use

RE: Need help please: calculate SHA256.

2009-07-08 Thread Bizhan Gholikhamseh (bgholikh)
> > > I have a text file, let us call it test.tx, which I need to send it > > through a secure mechanism to a remote site. > > I have already created a pair of public and private rsa key using > > openssl. > > I want to use openssl to generate a sha256 hash digest of the text > > file, i.e. tes

RE: Need help please: calculate SHA256.

2009-07-08 Thread David Schwartz
> I have a text file, let us call it test.tx, which I need to send it > through a secure mechanism to a remote site. > I have already created a pair of public and private rsa key using > openssl. > I want to use openssl to generate a sha256 hash digest of the text file, > i.e. test.tx --> test.has

RE: Need help please: calculate SHA256.

2009-07-08 Thread Bizhan Gholikhamseh (bgholikh)
> -Original Message- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of David Schwartz > Sent: Wednesday, July 08, 2009 3:05 PM > To: openssl-users@openssl.org > Subject: RE: Need help please: calculate SHA256. > > > Bizhan Gholikhamseh wro

RE: Need help please: calculate SHA256.

2009-07-08 Thread David Schwartz
Bizhan Gholikhamseh wrote: > Hi all, > I have an image that I need to calculate SHA256 has digest of image and > encrypt the hash digest using my private key to generate image > signature. > > Could someone please let me know how to use openssl to do this? 1) Calculate the SHA256 hash. 2) Sign

Need help please: calculate SHA256.

2009-07-08 Thread Bizhan Gholikhamseh (bgholikh)
Hi all, I have an image that I need to calculate SHA256 has digest of image and encrypt the hash digest using my private key to generate image signature. Could someone please let me know how to use openssl to do this? Many thanks in advance, Biz ___

Re: Self Signed CA

2009-07-08 Thread Kyle Hamilton
On Tue, Jul 7, 2009 at 2:38 AM, ad...@gg-lab.net wrote: > Hi All, > > i have, hope, a very simple question (but no reply found on Google): > > using CA.pl i created a sefls signed certificate. And this is ok. > > Reading manpage of CA.pl i noticed that i can also create a Local CA. > > So, what's t

Re: Issue with Private key with FIPS enabled openssl

2009-07-08 Thread Dr. Stephen Henson
On Wed, Jul 08, 2009, tensy joseph wrote: > Thanks Stephan.. > > Was using key generated outside the FIPS mode . Is there any way , i can use > digest as sha1 when generating the key outside the FIPS mode so that same > key can be used in FIPS mode and non FIPS mode ? > A key generated inside

Re: Issue with Private key with FIPS enabled openssl

2009-07-08 Thread tensy joseph
Thanks Stephan.. Was using key generated outside the FIPS mode . Is there any way , i can use digest as sha1 when generating the key outside the FIPS mode so that same key can be used in FIPS mode and non FIPS mode ? Thanks In advance Rajan On Wed, Jul 8, 2009 at 8:45 PM, Dr. Stephen Hen

Re: Issue with Private key with FIPS enabled openssl

2009-07-08 Thread Dr. Stephen Henson
On Wed, Jul 08, 2009, rajanchittil wrote: > > I am also having the same problem .Is any one got the solution for this ... > > > My configure file has this entry > > > [ req ] > default_bits = 2048 > default_keyfile = $HOME/exampleca/private/cakey.pem > default_md = sha1 > prompt = no > distin

Re: how to get CMS contents

2009-07-08 Thread Dr. Stephen Henson
On Wed, Jul 08, 2009, Chris Bare wrote: > What is the proper way to access this data: > > data = cms->d.signedData->encapContentInfo->eContent->data; > length = cms->d.signedData->encapContentInfo->eContent->length; > > The above only works if I include a private head

how to get CMS contents

2009-07-08 Thread Chris Bare
What is the proper way to access this data: data = cms->d.signedData->encapContentInfo->eContent->data; length = cms->d.signedData->encapContentInfo->eContent->length; The above only works if I include a private header: crypto/cms/cms_lcl.h -- Chris Bare ch...@bar

Re: Certificate Verification: Error (7): certificate signature failure

2009-07-08 Thread Jon Schmidt
Further information: I have disabled the ssl session cache and keepalives and am now able to trigger this issue within a few page calls. I have also set the apache log to debug and this is what is recorded from the server side. At this point, considering I am seeing this across multiple type

Re: Issue with Private key with FIPS enabled openssl

2009-07-08 Thread rajanchittil
I am also having the same problem .Is any one got the solution for this ... My configure file has this entry [ req ] default_bits = 2048 default_keyfile = $HOME/exampleca/private/cakey.pem default_md = sha1 prompt = no distinguished_name = root_ca_distinguished_name x509_extensions = root_ca_e

Newbie question: how could I sign an image

2009-07-08 Thread Bizhan Gholikhamseh (bgholikh)
HI All, How could I sign an image using SHA256 or RSA? Thanks, B __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manag

Certificate Verification: Error (7): certificate signature failure

2009-07-08 Thread Jon Schmidt
This is what my Apache log says. Note the "SSL Library Error": [Tue Jul 07 15:12:27 2009] [info] [client 10.10.10.4] Connection to child 14 established (server 10.10.10.4:443) [Tue Jul 07 15:12:27 2009] [info] Seeding PRNG with 656 bytes of entropy [Tue Jul 07 15:12:27 2009] [error] Certificate