Re: Problems with SSL_shutdown() and non blocking socket

On Fri, Mar 12, 2010, Darryl Miles wrote: > int rc = SSL_shutdown(ssl); > /* BEGIN - INSERT THIS CODE AFTER EVERY SSL_shutdown() > INVOCATION IN YOUR CODE */ > if(rc == -1) { > int ssl_errno; > SSL_get_error(ssl, ssl_errno); > if(ssl_errno == SSL_ERROR_WANT_READ || ssl_er

Re: Need help on: openssl pkcs12 --- avoid or in batch mode

Hi John, I have already answered your question on the list two days ago. Here is what I wrote : To avoid the password prompt, you can add the argument "-password pass:" to the command line. This will use an empty password for the PKCS12 file. For a non empty value, for example 1234, use "-pass

Need help on: openssl pkcs12 --- avoid or in batch mode

Hi Dr Stephen Henson, I really could not solve this issue and need your help. When I run openssl pkcs12 -in new.crt -inkey new.key -certfile .CA/cacert.pem -out new.p12 -export -name "xx" It will prompt user for: Enter Export Password: Verifying - Enter Export Password: Is anyway I can manipu

Re: How to create SSLv3 certs

On 21-Mar-10, at 9:12 PM, Bejjam, Praveen wrote: Hi, Can you please let me know how to create SSLv3 certs using openSSL? I am able to create v2 certs but not v3 certs. The version of the SSL protocol is completely independent from the version of X.509 of the certificates used during the e

Re: PKCS7 - SubjectKeyIdentifier CHOICE in SignerIdentifier fails?

On Mon, Mar 22, 2010, Stef Hoeben wrote: > Hello, > > subjectKeyIdentifier [0] SubjectKeyIdentifier } > > Could it be that the SubjectKeyIdentifier CHOICE isn't supported here, > that the parser expects a IssuerAndSerialNumber only? > Yes the SKID option is not part of the PKCS#7 stand

Re: extract components from public key

I think I've found the answer myself: openssl rsa -text -noout -modulus -pubin -in public_key.pem or openssl rsa -noout -modulus -pubin -in public_key.pem On Mon, Mar 22, 2010 at 12:59 PM, Valerio Schiavoni wrote: > Hello, > what kind of informations can be extracted from the public_key ? > In pa

extract components from public key

Hello, what kind of informations can be extracted from the public_key ? In particular, i generate it like this: openssl rsa -pubout -in private_key.pem -out public_key.pem I know that from a private_key it's possible to extract many informations (as the modulus, or any other info (doing openssl r

PKCS7 - SubjectKeyIdentifier CHOICE in SignerIdentifier fails?

Hello, We're having a pkcs7 file that gives the following error when being parsed: 9872:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1320 (openssl-1.0.0-beta3, but same prob in openssl 0.9.8g) Here's part of the file dump, the prob seems to occur a

Problem using SSL_CTX_use_certificate_file(); Throws Illegal instruction

Hi All, I am new to OPenssl programming. I have searched the previous posts in the forum before posting my problem. I am trying to execute some sample applications given with Openssl code (openssl-0.9.8) to get basic understanding of how Openssl works. Below is the code sample that I have use

How to create SSLv3 certs

Hi, Can you please let me know how to create SSLv3 certs using openSSL? I am able to create v2 certs but not v3 certs. Thanks Praveen