Questions on using openssl dgst to sign a msg.

Hi Experts, I am new to openssl. Here is what I 'd like to do: I need to use ECDSA to sign a message. To start with I 'd like run some tests using NIST ECDSA SigGen vectors. They look like this example: Msg = 6b45d88037392e1371d9fd1cd174e9c1838d11c3d6133dc17e65fa0c485dcca9f52d41b60161246039e42e

openssl 1.1 timeline

Hi, Just wonder what is the planned or expected date for the Openssl 1.1 release with the new SP 800-90 random number algorithms? Thank you. Ying __ OpenSSL Project http://www.openssl.org User S

How to use "openssl verify -crl_check ..." command

Hello All, I have a Linux system running openssl 0.9.8r. I have scripts that automatically download the latest CRL (crl.pem) every 24 hours. I also have several certificates on the system that's actively being used by various applications. EXACTLY HOW can I use the "openssl ver

Re: Reading digest algorithm from x509

Thank you Steve! Bye Jens On 18.06.2012 19:42, Dr. Stephen Henson wrote: > On Mon, Jun 18, 2012, Dirk Menstermann wrote: > >> Thanks, >> >> unfortunately I forget to include the information that I need to know it >> from a >> c programm, not from the shell. Do you also know the solution here?

CAPI engine PKCS#7 decrypt error

Hello, I have an application that decrypts an encrypted PKCS#7 structure. When I run it with keys loaded from disk, it runs perfectly, but as soon as I use engine keys from CAPI it fails with: 8244:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\crypto\evp\evp_enc.c:5

Re: Issue when verifying an expired certificate

Hello Dave, If you suppose I use the directory hashed in 0.9.8 : no. The directory is re-hashed each time we verify a certificate. And CRLs are explicitly read and loaded one by one with X509_STORE_add_crl. So, either i misunderstood your comment or I fear this is not the cause of my problem..