Re: Application crashes when trying to access X509 Certificate Extension returned by X509_get_ext method

2009-11-23 Thread Kyle Hamilton
Are you checking to make sure that there *is* data in that extension? Or that the extension value even exists? if (NULL == Extension->value) assert("Extension->value NULL"); if (NULL == Extension->value->data) assert ("Extension->value->data NULL"); OrgPtr=Extension->value->data; -Kyle H On Fri,

RSA_sign issue

2009-11-23 Thread BT
Hi, I am signing a hash (40 bytes) of a file. the hash is b032e3eb51ad878c2f46700f50327eb8ee27c3e6. RSA_sign(NID_sha1,chHash,40,sigbuf,&sigSize,pPrivateKeyRSA); after signing when I verify using openssl I see few character at the beginning. openssl rsautl -verify -in test.sgn -out test.o.sha

Re: SSL_CTX_use_certificate_chain?

2009-11-23 Thread Tim Ward
Now solved. You iterate round the STACK_OF(X509) and add them one at a time with SSL_CTX_add_extra_chain_cert Tim Ward - Brett Ward Limited - 07801 703 600 www.brettward.co.uk - Original Message - From: "Tim Ward" To: Sent: Monday, November 23, 2009 11:11 AM Subject: SSL_CTX_use_cer

Re: CMS with PBE (Was Re: Decrypting a password encrypted pkcs7-envelopedData)

2009-11-23 Thread Mathieu Malaterre
Steve, >> Do you have a sample PBE blob you want to decrypt? > > Here is one: > > $ wget http://idisk.mac.com/dclunie-Public/securedicomfileset.tar.bz2 > $ openssl asn1parse -in DICOMDIR -inform DER > > It was generated using Bouncy Castle I forgot to mention, if you need help from me, do not hes

SSL_CTX_use_certificate_chain?

2009-11-23 Thread Tim Ward
How do I get an SSL server to send a certificate chain to a client in the SSL Certificate message? The certificate chain is in a PKCS#12 file, which I read with d2i_PKCS12_fp and then parse with PKCS12_parse giving me a EVP_PKEY (the private key), an X509 (the certificate) and a STACK

PEM_read_RSAPrivateKey crashing in vc++

2009-11-23 Thread BT
Hi, I am trying to read the private key (generated by Openssl) using following code. But its exiting from the last line. Do you have any idea? I have used libeay32MD.lib from the folder C:\openssl\lib\VC . RSA* pPrivateKeyRSA = NULL; FILE* pPrivateKeyFile; pPrivateKeyFile = fopen("mykey.pem",

Question concerning a small signature code

2009-11-23 Thread Lucas Clemente
Hi there, First of all, I have never used OpenSSL before. So please don't be angry if my code is complete useless ;) I am trying to do a SHA1 signature of a text using an rsa private key. This is my code so far: char data [BUFFER_SIZE]; sprintf(data, "test"); int data_len = strlen(data);

perl >5.0 required for openssl-1.0.0-beta4

2009-11-23 Thread perfry
Hi, I've successfully built OpenSSL 1.0.0-beta4 configured with solaris64-sparcv9-gcc on an old Solaris 8/Sparc box. Performance according to 'openssl speed' is better than my old 0.9.8a installation. However, I had to install a newer perl to get it through make test. With the preinstalled per