Verify with RSA Public Key Fails

2010-02-26 Thread Paul Suhler
Hi, everyone. In Openssl 0.9.8i, I'm trying to take an RSA public exponent and public modulus, assemble them into an RSA key, and use that to verify a signature for a message. However, EVP_VerifyFinal() always fails, apparently because of the wrong use of padding. My code: RSA * RsaKey

RE: Crash in BIO_set_fp()

2010-02-26 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Michael Boman > Sent: Thursday, 25 February, 2010 15:26 > if (options->xmlOutput != 0) > { > fileBIO = BIO_new(BIO_s_file()); > BIO_set_fp(fileBIO, options->xmlOutput, BIO_NOCLOSE); // <- Crashing here >

RE: Need help on creating certs

2010-02-26 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of prasad kasthuri > Sent: Thursday, 25 February, 2010 14:44 > To: openssl-users@openssl.org > Subject: Need help on creating certs > I am getting the following error while creating certs using openssl > command. Plea

Re: Error copiling ssl: undefined reference

2010-02-26 Thread John R Pierce
xabi esteban wrote: I am using in a shell in Ubuntu Linux try adding -lssl to your link options. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-u

RE: Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
I am using in a shell in Ubuntu Linux thanks Date: Fri, 26 Feb 2010 14:47:22 -0500 Subject: Re: Error copiling ssl: undefined reference From: anand.apa...@gmail.com To: openssl-users@openssl.org Those are the header you included. But you need to link against libs after compilation. What plat

Re: Error copiling ssl: undefined reference

2010-02-26 Thread John R Pierce
xabi esteban wrote: I don't understand you. I put the libreries in the includes #include #include <> but i'din't put nothing more. How i could link with this libreries? I didn't found any example. you're confusing include files with libraries. you need to tell the linker the appropri

Re: Error copiling ssl: undefined reference

2010-02-26 Thread Anand Patel
Those are the header you included. But you need to link against libs after compilation. What platform(win/linux) and What tool(studio/shell)? -Anand On Fri, Feb 26, 2010 at 1:59 PM, xabi esteban wrote: > I don't understand you. I put the libreries in the includes #include > #include <> >

RE: Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
I don't understand you. I put the libreries in the includes #include #include <> but i'din't put nothing more. How i could link with this libreries? I didn't found any example. Thanks Date: Fri, 26 Feb 2010 12:39:57 -0500 Subject: Re: Error copiling ssl: undefined reference From: anand.apa

Re: Need help on creating certs

2010-02-26 Thread Anand Patel
You are not using any valid command. Error clearly explains that command '-incommand' is not valid command, and gives you output of valid commands. Look at, http://openssl.org/docs/apps/ca.html# openssl x509 openssl ca openssl req simple expample to get you started. >openssl genrsa -out private_k

Re: Error copiling ssl: undefined reference

2010-02-26 Thread Anand Patel
Do you link against correct libraries? Try linking with ssleay and libeay. -Anand On Fri, Feb 26, 2010 at 12:08 PM, xabi esteban wrote: > Hello: > I'm trying to use the SSL libreries. When I try to comipile my code y > always obtain the same error: > > cli.c:(.text+0x20): undefined reference

Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
Hello: I'm trying to use the SSL libreries. When I try to comipile my code y always obtain the same error: cli.c:(.text+0x20): undefined reference to `SSL_library_init' cli.c:(.text+0x25): undefined reference to `SSLv2_client_method' cli.c:(.text+0x30): undefined reference to `SSL_load_error_str

Re: Another "memory growing" on AIX

2010-02-26 Thread David
I was working with 128 SSL connections at the time. On Solaris, the memory size when it stopped growing was bigger than AIX. However, on Solaris, the memory stopped growing after about 2 or 3 iterations of stopping and starting the SSL connections (maybe within half an hour). -David

Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
Hello: I'm trying to use the SSL libreries. When I try to comipile my code y always obtain the same error: cli.c:(.text+0x20): undefined reference to `SSL_library_init' cli.c:(.text+0x25): undefined reference to `SSLv2_client_method' cli.c:(.text+0x30): undefined reference to `SSL_load_error_st

Re: CFB change

2010-02-26 Thread Bruce Stephens
"Dr. Stephen Henson" writes: [...] > Didn't realise anyone was using CFB for that. Is that some default or does it > have to be specifically requested? It was explicitly requested, though I'm not sure for any positive reason in this case (more because we'd used that cipher and mode elsewhere, I

Re: CFB change (was Re: OpenSSL version 0.9.8m release)

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Bruce Stephens wrote: > With 0.9.8m I'm getting some failures to read PEM files (and do some > other thnigs, I think) that 0.9.8l is happy with. > > The PEM files are created by BouncyCastle, I think (though I imagine > 0.9.8l could be persuaded to write similarly failing fi

CFB change (was Re: OpenSSL version 0.9.8m release)

2010-02-26 Thread Bruce Stephens
With 0.9.8m I'm getting some failures to read PEM files (and do some other thnigs, I think) that 0.9.8l is happy with. The PEM files are created by BouncyCastle, I think (though I imagine 0.9.8l could be persuaded to write similarly failing files). they begin something like: -BEGIN RSA PRIVA

Re: Problem with verifying of PKCS7-structure signed with ECDSA-certificate

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Alexei Soloview wrote: > Hello! > > > > I try to check signature on PKCS7-structure(see attached file pkcs7.bin). > > The following sequence of commands is performed: > > openssl pkcs7 -in pkcs7.bin -inform DER -outform PEM -out pkcs7.PEM > > openssl smime -verify -in

Re: OpenSSL 0.9.8m renegotiation alerts?

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Victor Duchovni wrote: > On Fri, Feb 26, 2010 at 02:45:19AM +0100, Dr. Stephen Henson wrote: > > > On Thu, Feb 25, 2010, Victor Duchovni wrote: > > > > > > > > If I field a patched server, and sufficiently many unpatched pre-0.9.8m > > > OpenSSL clients attempt re-negotiat

Problem with verifying of PKCS7-structure signed with ECDSA-certificate

2010-02-26 Thread Alexei Soloview
Hello! I try to check signature on PKCS7-structure(see attached file pkcs7.bin). The following sequence of commands is performed: openssl pkcs7 -in pkcs7.bin -inform DER -outform PEM -out pkcs7.PEM openssl smime -verify -in pkcs7.PEM -inform pem -noverify 1>pkcs7.data Verification failur

SSL "Wrong version number" OpenSSL 0.9.8g

2010-02-26 Thread P0DB
Hi, I'm trying to connect to an epp server via sslv3 in php. OpenSSL version is OpenSSL 0.9.8g. I have got correct certificates. I'm able to establish new connection, but server only sends to me "hello" and after it does not anwser any posts. Instead it returns to me these warnings: SSL operation

Re: Need help on creating certs

2010-02-26 Thread Chaitra
I think it should be just -key. Thanks & Regards Chaitra Shankar prasad kasthuri wrote: Hi Team, I am getting the following error while creating certs using openssl command. Please help me to create a cert using openssl. C:\OpenSSL\bin>openssl -inkey mykeyfile.pem -in -mycertfile.pem -out

problems building on mingw

2010-02-26 Thread Maneki Neko
I'm running Windows 7, with MSys 1.0.11 and MinGW 5.1.6. I'm attempting to build OpenSSL 0.9.8m, but it's failing. I started by untarring openssl-0.9.8m.tar.gz: tar -xzf openssl-0.9.8m.tar.gz This causes a ton of warnings about inability to create symlinks. Trying anyway, I enter the new direct

Need help on creating certs

2010-02-26 Thread prasad kasthuri
Hi Team, I am getting the following error while creating certs using openssl command. Please help me to create a cert using openssl. C:\OpenSSL\bin>openssl -inkey mykeyfile.pem -in -mycertfile.pem -out myCert.p1 -export openssl:Error: '-inkey' is an invalid command. Standard commands asn1parse