Re: problem about "value optimized out"

2010-07-01 Thread 翔芦
Dear Dave, Thank you for your detailed explanation. However, I still confused with those "optimized" line, which also occurs in the verification process. Here is the code to get a public key from the corresponding certificate, which follows your suggestions about EVP. OpenSSL_add_all_algorith

RE: problem about "value optimized out"

2010-07-01 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of ?? > Sent: Thursday, 01 July, 2010 18:13 > My code segment is to get a private key from a pem file for the data signing. > The code is as the following: > 1BIO *priv_pem; > 2OpenSSL_ad

RE: Skipping the OID and BIT string prefix in DER formatted RSA keys

2010-07-01 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Nick Kelsey > Sent: Thursday, 01 July, 2010 02:00 > I am using the following command to output the public key for a given > RSA private key: > openssl rsa -in keyfile.private.pem -pubout -outform DER > > The output includes a SEQ with an OID, f

openssl 1.0.0.a OCSP responder problem

2010-07-01 Thread Glenn, William
Hi, Is there a way to make the version 1.0.0a ocsp responder to sign responses using SHA256? The rsigner certificate is SHA256 and the requests are signed with SHA256 but responses are always SHA1. I saw a reference in a thread from 5/13/10 to "draft-ietf-pkix-ocspagility" that seems to impl

problem about "value optimized out"

2010-07-01 Thread 翔芦
Dear all, My code segment is to get a private key from a pem file for the data signing. The code is as the following: 1BIO *priv_pem; 2OpenSSL_add_all_algorithms(); 3priv_pem = BIO_new_file("privkey.pem", "rb"); 4 pKey_priv = RSA_new(); 5 pKey_priv = PEM_read_bio_RSAPrivateK

Re: byte order portability of message digests?

2010-07-01 Thread Dr. Stephen Henson
On Thu, Jul 01, 2010, David Mathog wrote: > When making a message digest using the EVP_DigestInit_ex, > EVP_DigestUpdate, EVP_DigestFinal_ex functions one ends up with a 20 > byte (for instance, with sha1) data structure stored in the md array. > > What I would like to know is if the order of tho

byte order portability of message digests?

2010-07-01 Thread David Mathog
When making a message digest using the EVP_DigestInit_ex, EVP_DigestUpdate, EVP_DigestFinal_ex functions one ends up with a 20 byte (for instance, with sha1) data structure stored in the md array. What I would like to know is if the order of those bytes is affected by underlying architecture of th

Password (passin/passout) parameters for openssl x509

2010-07-01 Thread Jon Kristensen
Looking at the man page for openssl x509* I can't find any password (passin/passout) arguments. However, when I run the command, I get prompted for the certificate pass phrase. How am I supposed to provide the certificate pass phrase? Thank you in advance! Warm regards, Jon Kristensen *) ht

Re: Slow crypto initialization.

2010-07-01 Thread Jean-Marc Desperrier
Ger Hobbelt wrote: a symptom I have learned to associate with the Rand_poll() heap walking issue. AFAIR some time ago there was a problem that *just the first call* to the heap walking function would, under 64 bits Windows, take second in some circumstances. That's clearly a bug, and only Mic

PKCS#7 and CMS Signed-And-Enveloped-Data command line

2010-07-01 Thread Federico Berton
Hi guys, I have to create a program following the PKCS#7 standard with Signed-And-Enveloped-Data datatype: SignedAndEnvelopedData ::= SEQUENCE { version Version, recipientInfos RecipientInfos, digestAlgorithms DigestAlgorithmIdentifiers, encryptedContentInfo EncryptedContentInfo, certificates [

Skipping the OID and BIT string prefix in DER formatted RSA keys

2010-07-01 Thread Nick Kelsey
Hi guys, I am using the following command to output the public key for a given RSA private key: openssl rsa -in keyfile.private.pem -pubout -outform DER The output includes a SEQ with an OID, followed by a BIT string containing the DER formatted public key I need. Deleting the first 22 bytes (lea

[no subject]

2010-07-01 Thread YU WU
dear all, i am using openssl 0.9.8.e in M$ and compile in MSYS. i just want to encrypt a string and then decrypt later. for the encryption, it is always ok. but for decryption, it failed randomly. the word "randomly" means that for some cases, the decryption is ok, but for other cases, it fail

Re: RFC 3436 (tls-over-sctp) support?

2010-07-01 Thread Michael Tüxen
On Jun 30, 2010, at 1:03 PM, Byron Campen wrote: > I am looking into the possibility of using openssl on an sctp > association (for SIP, specifically), and the standardized way of doing it is > non-trivial (although not terribly complex; I call it non-trivial because it > is doing somethi