unique_subject in openssl 1.0.0

2010-11-22 Thread Davi Tozoni
Hello, I am having a problem while trying to create more than one certificate with the same DN but differente keys and usage. I read in many places that I should just use "unique_subject = no" in config file for this to work. However, I am still getting no good results and the error "TXT_DB error

Re: Question about the TLS extension vulnerability

2010-11-22 Thread Victor Duchovni
On Mon, Nov 22, 2010 at 12:30:10PM +0200, r rubin wrote: > Thank you Victor for the detailed answer. I still don't understand: Does the > vulnerability affect TLS *cliens*? > > > In the vulnerability detail, it is mentioned that: > > - Any OpenSSL based TLS *server* is vulnerable". > > Does this

Logotype encoding

2010-11-22 Thread Patrick Patterson
Hi All: Here is a question for the ASN1 encoding gods :) Given: LogotypeExtn ::= SEQUENCE { communityLogos [0] EXPLICIT SEQUENCE OF LogotypeInfo OPTIONAL, issuerLogo [1] EXPLICIT LogotypeInfo OPTIONAL, subjectLogo [2] EXPLICIT LogotypeInfo OPTIONAL, otherLogos [3] EXPL

Re: problem loading rsa public key.

2010-11-22 Thread Neil Dugan
On 22/11/10 23:48, Dr. Stephen Henson wrote: On Mon, Nov 22, 2010, Neil Dugan wrote: I have generated a rsa public and private key with. openssl genrsa -out server.pem 2048 openssl rsa -in server.pem -pubout -out server.pub When I use the PEM_read_RSAPublicKey() command to load that public ke

Fw: Encoding an appl-prim object without a duplicate V_ASN1 tag

2010-11-22 Thread john dodge
sorry, correction to previous message below Hello   I'm having a basic issue encoding a custom object.   I would like the binary output of a new object I've created to appear in DER encoded output as the following TLV 0x5F20 0x08 [8 bytes of value]   I think this is implicit,application spec

Re: Encoding an appl-prim object without a duplicate V_ASN1 tag

2010-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2010, john dodge wrote: > Hello >   > I'm having a basic issue encoding a custom object. >   > I would like the binary output of a new object I've created to appear in DER > encoded output as the following TLV > > 0x5F20 0x08 [8 bytes of value] >   > I think this is implicit,ap

Encoding an appl-prim object without a duplicate V_ASN1 tag

2010-11-22 Thread john dodge
Hello   I'm having a basic issue encoding a custom object.   I would like the binary output of a new object I've created to appear in DER encoded output as the following TLV 0x5F20 0x08 [8 bytes of value]   I think this is implicit,application specific and primitive, so I have the following ne

Re: problem loading rsa public key.

2010-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2010, Neil Dugan wrote: > I have generated a rsa public and private key with. > > openssl genrsa -out server.pem 2048 > openssl rsa -in server.pem -pubout -out server.pub > > When I use the PEM_read_RSAPublicKey() command to load that public key I > get the error "error:0906D06C:P

Re: Question about the TLS extension vulnerability

2010-11-22 Thread Dr. Stephen Henson
On Mon, Nov 22, 2010, r rubin wrote: > Thank you Victor for the detailed answer. I still don't understand: Does the > vulnerability affect TLS *cliens*? > Short answer: no it doesn't. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http

Re: Question about the TLS extension vulnerability

2010-11-22 Thread r rubin
Thank you Victor for the detailed answer. I still don't understand: Does the vulnerability affect TLS *cliens*? Thanks. On Sun, Nov 21, 2010 at 04:40:09PM +0200, r rubin wrote: > Hello, > > In the vulnerability detail, it is mentioned that: > ?Any OpenSSL based TLS *server* is vulnerable".

problem loading rsa public key.

2010-11-22 Thread Neil Dugan
I have generated a rsa public and private key with. openssl genrsa -out server.pem 2048 openssl rsa -in server.pem -pubout -out server.pub When I use the PEM_read_RSAPublicKey() command to load that public key I get the error "error:0906D06C:PEM routines:PEM_read_bio:no start line" I don't un