RE: Verisign client requirements

2010-04-05 Thread David Schwartz
Piper.guy1 wrote: > Hi, > > Please understand I'm a newbie to security if my question sounds > rather elementary. > > The embedded product I'm working on requires a secure connection to > our server that uses a Verisign certificate to authenticate. I've been > porting the OpenSSL examples from

any way to delete a cert from store

2010-04-05 Thread sean wang
is there a conterpart for X509_STORE_add_cert? basically how do I remove a cert from a store. I saw someone posted the question before but got no answers... thanks, _ Hotmail h

RE: pkcs7 cert loading, why this code doesn't work?

2010-04-05 Thread sean wang
thanks Mounir! yes the 'write' thing was a typo. the second issue was the problem. sean your are right the pass in type should be a > Date: Sun, 4 Apr 2010 02:22:29 +0200 > From: mounir.idra...@idrix.net > To: openssl-users@openssl.org > Subject: Re: pkcs7 cert loading, why this

Verisign client requirements

2010-04-05 Thread piper.guy1
Hi, Please understand I'm a newbie to security if my question sounds rather elementary. The embedded product I'm working on requires a secure connection to our server that uses a Verisign certificate to authenticate. I've been porting the OpenSSL examples from the O'Reilly publication so far and

Re: OpenSSL, relative paths of configuration file

2010-04-05 Thread Michael S. Zick
On Sat April 3 2010, Thomas Steinbach wrote: > Hello, > > in the openssl.cnf file are three path settings wich can be > set relative. But relative to what? > > My problem is, that I don't know and dont't find > an answer from which point this relative paths are starting > > 1.) The active direct

OpenSSL, relative paths of configuration file

2010-04-05 Thread Thomas Steinbach
Hello, in the openssl.cnf file are three path settings wich can be set relative. But relative to what? My problem is, that I don't know and dont't find an answer from which point this relative paths are starting 1.) The active directory? 2.) The directory where openssl (executable) resides or 3

OpenSSL, relative paths of configuration file

2010-04-05 Thread Thomas Steinbach
Hello, in the openssl.cnf file are three path settings wich can be set relative. But relative to what? My problem is, that I don't know and dont't find an answer from which point this relative paths are starting 1.) The active directory? 2.) The directory where openssl (executable) resides or 3

RE: Pre Master Secret Regarding

2010-04-05 Thread Bob Bell (rtbell)
Aravind Actually, there is more than one key that is derived from the pre-master key. There is both an encryption and HMAC keys for both transmission and reception. That translates to 4 separate keys. Bob From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org]

Re: OpenSSL on IBMi

2010-04-05 Thread Pankaj Aggarwal
Got it working ! Stuck in another error in openssl/crypto :-( icc -I. -I.. -I../include -DOPENSSL_THREADS -D_MULTI_THREADED -v -O4 -DB_ENDI AN -DCHARSET_EBCDIC -DNO_SYS_PARAM_H -D_ALL_SOURCE -DNO_SYSLOG -qTGTRLS=*CURR ENT -qTGTCCSID=37 -c cryptlib.c -o cryptlib.o command

Re: OpenSSL on IBMi

2010-04-05 Thread Pankaj Aggarwal
Hi Shaw, I do have the qsh porting tools installed (which include icc, gmake etc.). I checked the CCSID for these tools. it's 1200. Now since my openssl files have been extracted from tar in qsh environment, they have the CCSID of 37. Should I get the IBM tools for CCSID 37? I tried to set the Q

Re: Decrypting with key and initialization vector don't decrypt the first 8 bytes?

2010-04-05 Thread Alfredo Belmonti
> I hope this will help. Immensely: you enlightened me! Thank you very much. I just wonder if it could make sense for the sake of completeness for OpenSSL to offer the chance to specify a flag in the command line options; to specify whether to search for the salt or not in the encrypted source, t