Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-02-03 Thread Kyle Hamilton
On Wed, Feb 3, 2010 at 12:06 PM, Ujwal Chinthala wrote: > -Ujwal > > > > Data: > >     Version: 3 (0x2) > >     Serial Number: 0 (0x0) Dr Henson already addressed the error in your code, but this is most likely also an error. The Internet PKI (PKIX) requires that the serial number be a p

Re: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-02-03 Thread Dr. Stephen Henson
On Wed, Feb 03, 2010, Ujwal Chinthala wrote: > Hi, > > I modified the code as you mentioned, I am just trying to verify if signing > the certificate using private key works. > > I signed the certificate using private key. > But I still get the same error from CMS_verify. It complains about "sig

Re: PKCS#12 Problems

2010-02-03 Thread Dan Letkeman
The server i'm trying to import it into is and Astaro Firewall. www.astaro.com. I have also just tried to import it into Internet Explorer on Windows XP and I get an error. The Astaro only takes PKCS12 files. Dan. On Wed, Feb 3, 2010 at 1:38 PM, Patrick Patterson wrote: > Please define "doesn'

RE: error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

2010-02-03 Thread Ujwal Chinthala
Hi, I modified the code as you mentioned, I am just trying to verify if signing the certificate using private key works. I signed the certificate using private key. But I still get the same error from CMS_verify. It complains about "signer certificate not found". Is this the right way to create

Re: PKCS#12 Problems

2010-02-03 Thread Patrick Patterson
Please define "doesn't work" - how doesn't it work? Also, most servers take the key and cert files - so can you let us know which server you are trying to make work? Have fun -- Patrick Patterson Chief PKI Architect Carillon Information Security Inc. http://www.carillon.ca This message sent

Re: Windows/I18N: Unicode characters in cert filenames

2010-02-03 Thread Dr. Stephen Henson
On Wed, Feb 03, 2010, Paul Clark wrote: > > 2) Is there a way to push a certificate into an X509_STORE from text that > I've read as PEM using my own (fixed up) file reader? Or any other way to > establish a certificate chain in memory to verify from? > You can read a PEM file from an opened f

PKCS#12 Problems

2010-02-03 Thread Dan Letkeman
Hello, I'm new the SSL certificates and I'm having trouble converting a PEM certificate into a PKCS12 certificate. Here is the process I took to get my third party certificate: Did this on a linux box that has openssl installed: openssl req -new -newkey rsa:1024 -nodes -out proxy.csr -keyout pr

Windows/I18N: Unicode characters in cert filenames

2010-02-03 Thread Paul Clark
Hi, I have ported an application which uses OpenSSL 0.9.8l to Windows, using mingw. The application requires a simple CA cert installed alongside it, for which I pass the filename to X509_STORE_load_locations() so it can verify other certs it gets given during its operation (this is all cust

Cannot build 0.9.8l on msys + mingw-w64

2010-02-03 Thread Dennis Wassel
Hi list, I am having trouble building static libcrypto on x64 Vista Home Premium SP2 using the "Proposed" 1.0.13-2 msys shell and the "mingw-w64-1.0-bin_i686-mingw_20100129" snapshot gcc 4.4.4 from mingw-w64. I tried (actually a superset of) the following steps: First, as documented: ./Configure

Re: Fwd: Cannot build 0.9.8l on msys + mingw-w64

2010-02-03 Thread Michael S. Zick
On Wed February 3 2010, Dennis Wassel wrote: > Hi list, > > (sorry, if this turns out to arrive twice - sign-up glitch by me) > > I am having trouble building static libcrypto on x64 Vista Home > Premium SP2 using the "Proposed" 1.0.13-2 msys shell and the > "mingw-w64-1.0-bin_i686-mingw_20100129

Fwd: Cannot build 0.9.8l on msys + mingw-w64

2010-02-03 Thread Dennis Wassel
Hi list, (sorry, if this turns out to arrive twice - sign-up glitch by me) I am having trouble building static libcrypto on x64 Vista Home Premium SP2 using the "Proposed" 1.0.13-2 msys shell and the "mingw-w64-1.0-bin_i686-mingw_20100129" snapshot gcc 4.4.4 from mingw-w64. I tried (actually a su