Re: Blowfish issues with somewhat big files

On 7/28/10 10:50 AM, Sergio Belkin wrote: > Hi, > > I've encrypted some database dumps with > > openssl bf -d -in $1 -out $FILE -k $KEY > > bad decrypt > 14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt:evp_enc.c:325: > > The weird thing is if I do the same with sma

Re: Simulating Mac keychain CSR with OpenSSL

Yes, and as long as we're on the that's-the-least-of-your-lockin-worries thread, you may want to be aware of this bit of news, just today: Significant Ruling by The Library of Congress: In Ruling on iPhones, Apple Loses a Bit of Its Grip Lou - Original Message - From: "Todd Oberly

Re: Simulating Mac keychain CSR with OpenSSL

On Wed, Jul 28, 2010, Wim Lewis wrote: > > On Jul 28, 2010, at 2:38 PM, Todd Oberly wrote: > > It's obviously asking for just a subset of what would typically go into a > > CSR. I tried generating several different CSR's with OpenSSL, containing > > various information (and then converting the

Re: Simulating Mac keychain CSR with OpenSSL

-Original Message- >From: Wim Lewis >Sent: Jul 28, 2010 6:33 PM >To: openssl-users@openssl.org >Subject: Re: Simulating Mac keychain CSR with OpenSSL >Well, I haven't tried submitting an OpenSSL-generated CSR to Apple, but the >CertificateAssistant-generated CSR looks pretty normal. I ha

Re: Simulating Mac keychain CSR with OpenSSL

On Jul 28, 2010, at 2:38 PM, Todd Oberly wrote: > It's obviously asking for just a subset of what would typically go into a > CSR. I tried generating several different CSR's with OpenSSL, containing > various information (and then converting the files to Mac line endings), but > the instructio

Simulating Mac keychain CSR with OpenSSL

Hi, I am setting up a demo iPhone management server for my company, and to operate with the Apple Push Notification Service, need to generate a CSR for a certificate, to interoperate with Apple's servers. The instructions say that I must use a Mac, and Apple's web page lists these exact instru

RE: Signing using PSS padding programmatically

Oh dear. I guess I'd better pass the news up the line to those who write requirements! Thanks very much for your help Rob > Date: Wed, 28 Jul 2010 18:49:51 +0200 > From: st...@openssl.org > To: openssl-users@openssl.org > Subject: Re: Signing using PSS padding programmatically > > On Wed, Jul

Blowfish issues with somewhat big files

Hi, I've encrypted some database dumps with openssl bf -d -in $1 -out $FILE -k $KEY bad decrypt 14142:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:325: The weird thing is if I do the same with smaller files it can decrypt with no problem. I use openssl-0.9.

Re: Signing using PSS padding programmatically

On Wed, Jul 28, 2010, Bob Smith wrote: > > Hello, > > I'm working on some code that uses the PKCS7 routines to sign some data. The > code so far is (lots of return values cut out for brevity)... > > int flags = 0x00 | PKCS7_NOSMIMECAP | PKCS7_BINARY; > p7 = PKCS7_sign( cert, pkey, NULL, datain

Signing using PSS padding programmatically

Hello, I'm working on some code that uses the PKCS7 routines to sign some data. The code so far is (lots of return values cut out for brevity)... int flags = 0x00 | PKCS7_NOSMIMECAP | PKCS7_BINARY; p7 = PKCS7_sign( cert, pkey, NULL, datain, flags ); PKCS7_final( p7, datain, flags ); dataout = B

end users managing trust databases (was: Re: Wildcard certs?)

* Kyle Hamilton wrote on Fri, Jul 23, 2010 at 20:06 -0700: > There's a company called StartCom (http://www.startssl.com/) who will > do 2-year validity wildcard certs, upon verification of your identity > and verification that you have control of the domain for which you are > requesting certificat