Re: RSA/DSA key bit strength

2009-08-15 Thread sandeep kiran p
openssl rsa -in key.pem -des3 -out keyout.pem This indicates a command to store the RSA private key read from key.pem file in an encrypted form in keyout.pem. The encryption algorithm used would be des3. It doesnt mean RSA works in modes like CBC etc. On Thu, Aug 13, 2009 at 3:49 AM, Sudarshan S

Re: subjectAltNam

2009-08-15 Thread Serge Fonville
Hi Goetz. > Did the request contain the subjectAltName extension ? > Did the openssl.cnf file contain the copy_extensions entry ? > No it did not. Thanks! That completely solved my problem Regards, Serge Fonville

Certificate chain which key to sign what

2009-08-15 Thread Serge Fonville
Hi, I built a certificate chain and I was wondering. I use the key of a higher certificate to sign a certificate. Since all the examples I've seen do this. But now, I sign a server certificate with an CA certificate. Is this really necessary, since that means it would need to be unencrypted. I'd ra

Re: RSA_print_fp still crashes using Windows MD library

2009-08-15 Thread Marcus Carey
It works! I was compiling the application with header files from an earlier distribution. Marcus - Original Message - From: Marcus Carey To: openssl-users@openssl.org Sent: Friday, August 14, 2009 10:03 PM Subject: Re: RSA_print_fp still crashes using Windows MD library

Re: subjectAltNam

2009-08-15 Thread Goetz Babin-Ebell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge Fonville schrieb: | Hi, Hello Serge, | I am trying to setup subjectAlNames in openssl.cnf | I created a copy of usr_cert and named it srv_cert | in this section I added the subjectAltNam. | With the req I specified -reqopts srv_cert the resulti

Re: OpenSSL FIPS Module version 1.2

2009-08-15 Thread Dr. Stephen Henson
On Fri, Aug 14, 2009, Pandit Panburana wrote: > Hello, > > I have a few questions about the FIPS module. > >1) The current version of OpenSSL FIPS Module is 1.2. It is based on >0.9.8e and 0.9.8f of standard OpenSSL. The latest stable version is >0.9.8k. How are fixes get into v

Re: subjectAltNam

2009-08-15 Thread Serge Fonville
Hi, I figured out what I did wrong, after a lot of googling I found that I needed to add copy_extensions = copy to the ca_default section After this, it woiks as expected. Thanks for the help. Regards, Serge Fonville On Sat, Aug 15, 2009 at 4:10 AM, Klarth wrote: > What command are you using