RE: Using openssl commandline tool from script

2010-09-14 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Gary > Sent: Tuesday, 14 September, 2010 11:20 > I am trying to call the openssl tool from a script, and I am > having some > problems. What I am currently doing is: > > , > | echo -n | openssl enc -e -aes-256-cbc -k > ` > > and the

Re: Intermediate root CA's -- lost and confused :(

2010-09-14 Thread aerowolf
Remember that you need to include -showcerts in the s_client line to get it to dump certificates. -Kyle H On Mon, Sep 13, 2010 at 6:04 PM, Tim Hudson wrote:  > Also, gnutls-client works correctly and lists the entire CA chain, which would also seem to indicate the server is supplying them. C

Re: alpine/cacert problem

2010-09-14 Thread Victor Duchovni
On Tue, Sep 14, 2010 at 11:27:09AM -0400, Allan E. Johannesen wrote: > I noticed that our CA store (/usr/local/ssl/cacert.pem) was pretty old, with > some expired certificates in it, etc. > > I exported the certificate list out of a Windows firefox and put that in place > and I thought things wer

alpine/cacert problem

2010-09-14 Thread Allan E. Johannesen
I noticed that our CA store (/usr/local/ssl/cacert.pem) was pretty old, with some expired certificates in it, etc. I exported the certificate list out of a Windows firefox and put that in place and I thought things were fine. I did 'openssl verify' on a few of our certificates from different vend

Re: cms sign with md5

2010-09-14 Thread ch
hi! my command is: ./openssl cms -sign -md5 -signer cert.cer -inkey priv.key -in file.txt and i get this usage-error-message with the parameter-description. think I use the md5 parameter wrong. any ideas?? without -md5 it delivers a correct signed output but it is sha1. thanks, chris kar

[FWD] install openssl on a ox 10.6.x

2010-09-14 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from jsl - From: jsl Subject: install openssl on a ox 10.6.x Date: Tue, 14 Sep 2010 11:27:57 +0100 To: openssl-b...@openssl.org Dear Sirs Can you help us to install the app openssl ona

Unstable output

2010-09-14 Thread Wim Meganck
Hi, I've made a test program. I have an unstable output with keys/data in the magic option. With other data/keys the output is stable (doc option). Does someone has a reason for it? The source has been made for an linux environment. Best regards, Wim /* ** Include files */ #incl

Re: cms sign with md5

2010-09-14 Thread kartik rustagi
Which error? On Tue, Sep 14, 2010 at 3:34 PM, ch wrote: > hi all! > > how can I tell > openssl cms > to sign not with sha1 but with md5? > > i tried the -md5 option but got an error. > > thanks! > > br, > chris > __ > OpenSSL Pr

cms sign with md5

2010-09-14 Thread ch
hi all! how can I tell openssl cms to sign not with sha1 but with md5? i tried the -md5 option but got an error. thanks! br, chris __ OpenSSL Project http://www.openssl.org User Support Mailing

Re: Intermediate root CA's -- lost and confused :(

2010-09-14 Thread Tim Hudson
> Also, gnutls-client works correctly and lists the entire CA chain, which would also seem to indicate the server is supplying them. Connecting with openssl s_client as per the command you provided is not showing the certificate chain. openssl s_client -verify 10 -CAfile /etc/ssl/certs/Thawt

SSL_WRITING Problem

2010-09-14 Thread Loevinger, Peter (N-COMSYS)
Platform: AIX 5.3 Compiler: xlc_r SSL: openssl-0.9.7d Problem Description: C++ code using non-blocking sockets. SSL_CTX_new(TLSv1_client_method()); SSL_CTX_set_mode(m_ctx, SSL_MODE_AUTO_RETRY); We are seeing instances where SSL_connect() returns -1, which is normal for non-blocking sockets. A

Re: C library verification of Key Usage

2010-09-14 Thread Paul Douglas
This worked... Thank you very much... -P> On 09/08/2010 02:27 PM, Dr. Stephen Henson wrote: On Tue, Sep 07, 2010, Paul Douglas wrote: Hi Everyone, I'm trying to figure out the required openssl c library calls to check/verify if a certificate supports Web Server Authentication. From t

[ANNOUNCE] Engine_cudamrg for OpenSSL - A cryptographic engine for CUDA supported devices

2010-09-14 Thread Paolo Margara
Engine_cudamrg for OpenSSL - A cryptographic engine for CUDA supported devices http://code.google.com/p/engine-cuda/ I'm pleased to announce the release of version 0.1.0 of Engine_cudamrg for OpenSSL. Engine_cudamrg is a cryptographic engine that can accelerate some operation using a CUDA su

rsaEncryption vs sha1WithRSAEncryption: the same???

2010-09-14 Thread RList
Dear all, I have been digging a bit into the OpenSSL code to answer because I have a doubt. Using keys on file and, also, using smart cards via the OpenSC engine, I am almost sure that by producing a PKCS7 the signature is of type "sha1WithRSAEncryption" (at least without any special options