Re: How to configure DES ECB encryption without the "no padding" mode?

Hi Ali, Thus wrote Ali Sydney (asyd...@k-state.edu): > Thanks for the speedy response. I have been attempting to use the EVP > interface, but the cipher text produced is wrong (and I am fairly new > to this). As a simple test, I have hard-coded an 8 byte block for the > key (in hexadecimal), and

Re: Extracting RSA public key from private key

Thank you very much ! It worked ;) Dr. Stephen Henson wrote: On Sat, Apr 10, 2010, Julien Kauffmann wrote: Hello, I need to extract the RSA public key from a RSA private key using OpenSSL. I'm currently using |RSAPublicKey_dup()| passing the |RSA*| private key to get the public key. How

Re: openLDAP with CRL

Hi there: One other thing to keep in mind is that the DN for the CRLDP *SHOULD* be the same as that for the CA that signs the CRL. I believe this is a "Best Practice", and not completely normative, but it is well enough enshrined (USFBCA CP and all cross-certified CA's, Canadian Govn't, etc.), tha

Re: Extracting RSA public key from private key

On Sat, Apr 10, 2010, Julien Kauffmann wrote: > Hello, > > I need to extract the RSA public key from a RSA private key using OpenSSL. > > I'm currently using |RSAPublicKey_dup()| passing the |RSA*| private key to > get the public key. However, while the call seems to work, I cannot load > (or us

Re: Problems with DSA 2048-bit keys

On Sat, 10 Apr 2010 15:55:38 +0100 Sad Clouds wrote: > On the server side I set up a callback function for DH parameters: Could someone explain to me the relationship between DH parameters and DSA key lengths? For example, with larger keys, do I need to load larger DH parameters? ___

Re: Problems with DSA 2048-bit keys

On Sat, 10 Apr 2010 15:55:38 +0100 Sad Clouds wrote: > I'm testing a very simple SSL web server. Everything seems to work OK > with RSA and DSA 1024-bit keys. > > I tried using DSA 2048-bit key and now I'm getting errors: Maybe it's just the Firefox issue, trying 'openssl s_clien ...' results i

Extracting RSA public key from private key

Hello, I need to extract the RSA public key from a RSA private key using OpenSSL. I'm currently using |RSAPublicKey_dup()| passing the |RSA*| private key to get the public key. However, while the call seems to work, I cannot load (or use) this public key using the openssl command-line tool.

Re: OpenSSL 0.9.8n released - it doesn't compile

This version also doesn't compile on both Suse and RedHat on the s390 z-series platform: gcc -I.. -I../.. -I../../include -DDSO_DLFCN -DHAVE_DLFCN_H -fPIC -mbackchain -DB_ENDIAN -DTERMIO -O1 -Wall -c -o md4_dgst.o md4_dgst.c md4_dgst.c: In function 'md4_block_data_order': md4_dgst.c:115: error:

Problems with DSA 2048-bit keys

I'm testing a very simple SSL web server. Everything seems to work OK with RSA and DSA 1024-bit keys. I tried using DSA 2048-bit key and now I'm getting errors: # Generate DSA parameters openssl dsaparam -out dsa_param.pem -outform PEM 2048 # Generate a certificate request openssl req -newkey d

Re: openLDAP with CRL

shake kvc wrote: > > I want to be able to store CRLs in the openldap repository so that I can > retrieve them using a LDAP client. > > Basically, the client would be given a LDAP URL as follows: > > ldap://xxx.yyy.com/CN=Challenger(1),CN=xxx,CN=C > DP,CN=Public%20Key%20Services,CN=Services,CN=C

Openssl tarball SHA1 checksum

This is an openssl security meta-question. I notice that the tarballs also include a SHA1 digest. What's the point? 1 - If anyone has authority to update the tarball with a counterfeit, can't they also update the SHA1. 2 - The web site isn't protected by ssl (ironic). A MIM altering the tarbal

Decrypting the String using openssl

Hi All, I am new to the openssl. Well, let me explain you the problem what I am facing. Server will send a string which I need to decrypt it. Plane text is first encrypted using AES algorithm, then it is base64 converted and sent. I have to receive the string then do a base64 decode and then I

openLDAP with CRL

Hi, I want to be able to store CRLs in the openldap repository so that I can retrieve them using a LDAP client. Basically, the client would be given a LDAP URL as follows: ldap://xxx.yyy.com/CN=Challenger(1),CN=xxx,CN=C DP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=yyy,DC=com?c

How to configure DES ECB encryption without the "no padding" mode?

All, I am attempting to implement DES (in C++ with the OpenSSL libraries) in ECB mode without padding. I am using the following function for encryption: void DES_ecb_encrypt(const_DES_cblock *input, DES_cblock *output, DES_key_schedule *ks, int enc); However, this function does not

Windows Binary Distribution

Hi, How do I get the windows binary distribution for the most recent release version 0.9.8.n or 1.0 ? Thanks, Jim OSD CAPE 703-601-4860 Ext. 105 james.a.williams@osd.mil