Re: RSA_generate_key

2010-08-10 Thread Dr. Stephen Henson
On Wed, Aug 11, 2010, krishnamurthy santhanam wrote: > > I am able to generate key. how to do seed PRNG before generating key? > The PRNG is seeded automatically using platform specific entropy. If it wasn't they key would not be generated and you'd get a PRNG not seeded error. Steve. -- Dr S

Help on chain certification verify: unable to get local issuer certificate

2010-08-10 Thread ZhangHongdi
Hi guys, I know it is really a frequently asked question but after a long time attempt I still cannot solve it, so any suggestion will be appreciated My Chain Structure is like this: hongdiz-root-ca --> hongdiz-ca1 --> hongdiz-router-1 Upon verifying cert, it always failed between hongdiz-c

Re: RSA_generate_key

2010-08-10 Thread krishnamurthy santhanam
Hi, I am able to generate key. how to do seed PRNG before generating key? is it enough to add rand_load_file("dev/random",1024) before generating key? it would be helpful if u explain with one example? #include #include #include int main() { char *plain="Sample text"; //Sample text (plain

Re: [openssl-users] Re: Support of SHA-2

2010-08-10 Thread Erwann ABALEA
Hodie IV Id. Aug. MMX, Alex Chen scripsit: > I am only a end user and not familiar with SSL internal. If I > understand the replies correctly, OpenSSL 1.0.x currently supports > SHA-2 in certificates but not in the cipher suites used in network > communication protocol. Is that a correct statemen

Re: Support of SHA-2

2010-08-10 Thread Alex Chen
I am only a end user and not familiar with SSL internal. If I understand the replies correctly, OpenSSL 1.0.x currently supports SHA-2 in certificates but not in the cipher suites used in network communication protocol. Is that a correct statement? Alex On Aug 9, 2010, at 6:44 AM, Jakob Bohm

openssl_pkey_new in PHP

2010-08-10 Thread Thomas York
I'm trying to use openssl_pkey_new in PHP, but am getting the following error about my openssl configuration file ERROR on 213 line (openssl_pkey_new): error:0E065068:configuration file routines:STR_COPY:variable has no value I get these kind of errors all the time with OpenSSL (Mostly with OpenV

Re: [openssl-users] Re: Support of SHA-2

2010-08-10 Thread Jakob Bohm
On 09-08-2010 19:09, Erwann ABALEA wrote: Hodie V Id. Aug. MMX, Erwann ABALEA scripsit: [...] This is not possible, as the ciphersuites defined by RFC5246 all use P_SHA256 as the PRF (paragraph 1.2). In paragraph 5, it is said "New cipher suites MUST explicitely specify a PRF and, in general, SH

Re: SSL_CTX_set_verify issue

2010-08-10 Thread Manjunath1847
Great...Thanks a lot Peter Sylvester-3. Setting X509_STORE_CTX_set_error(ctx, X509_V_OK) worked. Thanks a lot again. Regards, Manjunath Peter Sylvester-3 wrote: > > On 08/06/2010 10:54 AM, Manjunath1847 wrote: >> I am using SSL_CTX_set_verify() function to set my static C callback >> verify >