Re: question about des_ede3_cbc_encrypt()

2011-07-05 Thread Prashant Batra
2011/7/6 ZhouTony > Hi all, > > I am new to this mail list. Have some questions about the API: > DES_ede3_cbc_encrypt() > > void DES_ede3_cbc_encrypt(const unsigned char *input, > unsigned char *output, long length, DES_key_schedule *ks1, > DES_key_schedule *ks2, DES_key_schedule *ks3, DES_cblo

question about des_ede3_cbc_encrypt()

2011-07-05 Thread ZhouTony
Hi all, I am new to this mail list. Have some questions about the API: DES_ede3_cbc_encrypt() void DES_ede3_cbc_encrypt(const unsigned char *input,unsigned char *output, long length, DES_key_schedule *ks1, DES_key_schedule *ks2, DES_key_schedule *ks3, DES_cblock *ivec, int enc); 1. For

RE: Extracting and verifying encrypted certificate digest

2011-07-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of DarkMike > Sent: Tuesday, 05 July, 2011 03:34 > I have already tried signing and verifying the message and it > works great [with dgst -sign/verify] > Now I want to focus on the certificate verification, > limit it to x509v3, sha1, rsa encrypti

Re: Need to extract the checksum from a signature

2011-07-05 Thread Wim Lewis
On 4 Jul 2011, at 7:47 AM, Roland Flury wrote: > At the moment I use the PHP function openssl_pkcs7_verify() to verify > the signature (I also could use the openssl command line tool with a > system command). But verify is not enough, because I need to send back > the digest. > > Is there any

Please help: OpenSSL + OpenVPN Elliptic Curves (SHA512, ECDSA, ECDH, Linux, Debian)

2011-07-05 Thread Gaglia
Hi, first of all please accept my apologizes, I know this is a question more related to OpenVPN, but I think that the problem lies in the cert authority and client/server certificate generation step with OpenSSL, so I'm also posting it here, hoping for a solution. I'm trying to make an OpenVPN set

RE: Extracting and verifying encrypted certificate digest

2011-07-05 Thread DarkMike
Hi Dave, I have already tried signing and verifying the message and it works great for me with the following commands: openssl dgst -sha1 -sign rsa_client_priv_key.pem -out rsa_signature.bin msg.txt openssl dgst -sha1 -verify rsa_client_pub_key.pem -signature rsa_signature.bin msg.txt Now I wan