Re: Custom Attributes in the Subject of X.509 Certificate

2011-01-13 Thread Christian Hohnstaedt
On Wed, Jan 12, 2011 at 10:19:59PM -0800, Scott Thomas wrote: > Bonjour All, > > First i explain the scenarion. My domain name is lets say idtech.com. Under > it i > have created an ou=certificate users. Users are created under this OU. > So my FQDN of a user is CN=scott,OU=Certificate Users,DC

Re: Trust and Key management

2011-01-13 Thread Karthik Ravikanti
On Fri, Jan 14, 2011 at 8:03 AM, Dave Thompson wrote: > > From: owner-openssl-us...@openssl.org On Behalf Of Karthik > Ravikanti > > Sent: Thursday, 13 January, 2011 05:12 > > > Thanks a LOT for the detailed reply. I was more interested in the > > SSL connection part. Please find

Re: Trust and Key management

2011-01-13 Thread Karthik Ravikanti
On Fri, Jan 14, 2011 at 8:03 AM, Dave Thompson wrote: > > From: owner-openssl-us...@openssl.org On Behalf Of Karthik > Ravikanti > > Sent: Thursday, 13 January, 2011 05:12 > > > Thanks a LOT for the detailed reply. I was more interested in the > > SSL connection part. Please find

RE: Trust and Key management

2011-01-13 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Karthik Ravikanti > Sent: Thursday, 13 January, 2011 05:12 > Thanks a LOT for the detailed reply. I was more interested in the > SSL connection part. Please find my responses inline. Just to add some > context, I'm trying to

Re: Intermediate CA

2011-01-13 Thread michel
Hi Jijo, I believe interesting information can be found here : http://www.openssl.org/docs/ssl/SSL_CTX_use_certificate.html Regards Le 13/01/2011 17:16, Jijo a écrit : Thanks for the response.. >>You have to get the IC to the client somehow. The usual method is to have the server send it. Do

Re: Intermediate CA

2011-01-13 Thread Jijo
Thanks for the response.. >>You have to get the IC to the client somehow. The usual method is to have the server send it. Does the server software provide a way to supply a certificate chain? What do you mean by server sending it? is it on TLS negotiation? What do you mean by certificate chain?

Re: [openssl-users] Re: How to disable index and serial?

2011-01-13 Thread Mark H. Wood
Ah. I did not understand that "referenced by browser vendors" meant we were talking about inclusion in their canned trust stores. Thanks, both of you. -- Mark H. Wood, Lead System Programmer mw...@iupui.edu Asking whether markets are efficient is like asking whether people are smart. pgpbxj

Way to generate RSA key pair by taking as random input string

2011-01-13 Thread Muneeswaran Raju
Hi, Is there any "Way to generate RSA key pair by taking as random input string ". Normally I understand that prime numbers "P" and "Q" will be generated randomly inside the function "RSA_generate_key" . If there is any way to generate RSA key pair from random input string, please let know. Than

Re: Intermediate CA

2011-01-13 Thread David Schwartz
On 1/12/2011 3:19 PM, Jijo wrote: Hi All, I hope this a basic question for you guys.. I'm trying to setup TLS connection between Client and Server. In the server i did following things, 1. Created a selfsigned rootCA 2. Created IntermediateCA and signed with rootCA. 3. Create a Server Certific

Re: Efficient way for storing the RSA public and private keys into buffer.

2011-01-13 Thread Muneeswaran Raju
Hi, Your suggestion much useful. Thanks a lot. Thanks Muneeswaran.R 2011/1/13 lzyzizi > My idea is to convert the rsa into buf and compress it. > > int COMP_compress_block(COMP_CTX *ctx, unsigned char *out, int olen, > unsigned char *in, int ilen); > int COMP_expand_block(COMP_CTX *ctx, un

Re:Efficient way for storing the RSA public and private keys into buffer.

2011-01-13 Thread lzyzizi
My idea is to convert the rsa into buf and compress it. int COMP_compress_block(COMP_CTX *ctx, unsigned char *out, int olen, unsigned char *in, int ilen); int COMP_expand_block(COMP_CTX *ctx, unsigned char *out, int olen, unsigned char *in, int ilen); Are these functions fit your needs?

Re: How to disable index and serial?

2011-01-13 Thread Fredrik Strömberg
On Wed, Jan 12, 2011 at 3:40 PM, Mark H. Wood wrote: > On Tue, Jan 11, 2011 at 05:39:19PM +0100, Fredrik Strömberg wrote: >> Hello Patrick, >> >> Thank you for your email. I somehow managed to miss the word >> "mandatory" in the manual. I guess there´s nothing else for me to do >> than code a file

Re: Trust and Key management

2011-01-13 Thread Karthik Ravikanti
Thanks a LOT for the detailed reply. I was more interested in the SSL connection part. Please find my responses inline. Just to add some context, I'm trying to implement SSL sockets on the iPhone and am just using Java as a reference. On Wed, Jan 12, 2011 at 9:47 AM, Dave Thompson wrote: > >

Efficient way for storing the RSA public and private keys into buffer.

2011-01-13 Thread Muneeswaran Raju
Hi, I want to generate the RSA keys and store it in a buffer and send it to other modules. What is the efficient way of getting the private keys into buffer. I need to utilise very less memory for storing the RSA keys. Thanks Muneeswaran.R

Re: Trust and key store management with OpenSSL

2011-01-13 Thread Karthik Ravikanti
Oops, I already asked this on the list... I forgot to check the reply. Please ignore. On Thu, Jan 13, 2011 at 3:16 PM, Karthik Ravikanti < karthik.ravika...@gmail.com> wrote: > Hi, > > Is there any trust store and key store API in OpenSSL? I did find a few > functions of type X509_TRUST_* in the

Trust and key store management with OpenSSL

2011-01-13 Thread Karthik Ravikanti
Hi, Is there any trust store and key store API in OpenSSL? I did find a few functions of type X509_TRUST_* in the code, but it is not clear how to use them. Is the only way to manage trusted certificates, and keys is to put them in a certs directory or a flat PEM file? Thanks, Karthik, R.

[FWD] OpenSSL error message

2011-01-13 Thread Lutz Jaenicke
Forwarded to openssl-users for discussion. Best regards, Lutz - Forwarded message from Diogo Monteiro - From: Diogo Monteiro To: "r...@openssl.org" Date: Wed, 12 Jan 2011 10:21:39 -0800 Subject: OpenSSL error message Thread-Topic: OpenSSL error message Thread-Index: AcuyhY5hD