Re: hardware device to sign CSR using openssl -e

On Thu, Jun 21, 2012, alexis _ wrote: > > > I have seen in openssl sources (engine folder) references to >  * Broadcom uBSec SDK >  * Baltimore Technologie SureWare >  * Rainbow CryptoSwift >  * nCipher CryptoHook >  * Atalla cards > that i am currently digging further > > Do > you guys have

hardware device to sign CSR using openssl -e

hello, this question is somehow related to openssl, i'm guessing openssl users community might point me in the right direction. Today i'm generating digital identities (key + cert) using openssl and CA key/cert files. basically it boils down to a classic : (1) rsa key generation, (2) csr gen

RE: Question on openssl dgst: which private key?

Dave, Thanks for the info. If I have a private key in hex string , e.g, 23d9f4ea6d87b7d6163d64256e3449255db14786401a51daa7847161bf56d494325ad2ac8ba928394e01061d882c3528, how can I convert it into an ECDSA private key in PEM and use it in openssl dgst? I am thinking about the following steps

Re: Building and installing gost engine

Howdie! That’s where get a little bit fuzzy and confused - when I build OpenSSL with the ms\nt.bat & ms\ntdll.bat the only dlls I get is the libeay32 & ssleay32 libraries.. Not sure how they are related with the crypto.dll & ssl.dll files... Anyhoe.. thanks for the Linux-first-then-Linux tip ..

Re: Can not enable via padlock

On 2012-05-31 12:01, Salatiel Filho wrote: > On Thu, May 31, 2012 at 12:37 PM, Michael S. Zick wrote: > >> On Thu May 31 2012, Salatiel Filho wrote: >> >>> Any other ideas ? >> Yes, wrong or incomplete Debian package installed. > > I dont think thats the problem. I tried build the package

RE: Question on openssl dgst: which private key?

>From: owner-openssl-us...@openssl.org On Behalf Of Li, David >Sent: Thursday, 21 June, 2012 11:48 >How does openssl dgst know which signing algorithm it's supposed >to use in openssl dgst? For example how does it figure out >if this signing private key is a ECDSA key or RSA key? >Is this info

Re: [openssl-users] Bound check on RSA public exponent

Le 21/06/2012 18:18, Sukalp Bhople a écrit : Thank you very much for the helpful response, I searched for the terms you used in your reply and I found them in one of the function. This function is /static int RSA_eay_public_encrypt(int flen, const unsigned char *from,/ /unsigned char *to

Re: [openssl-users] Bound check on RSA public exponent

Thank you very much for the helpful response, I searched for the terms you used in your reply and I found them in one of the function. This function is *static int RSA_eay_public_encrypt(int flen, const unsigned char *from,* * unsigned char *to, RSA *rsa, int padding)* * * I was wondering, if

Question on openssl dgst: which private key?

Hi, How does openssl dgst know which signing algorithm it's supposed to use in openssl dgst? For example how does it figure out if this signing private key is a ECDSA key or RSA key? Is this information hidden in the "priv_key.pem" of the option -sign ? David

Re: [openssl-users] Bound check on RSA public exponent

The only limit check that I know is performed is if the modulus is strictly larger than OPENSSL_RSA_SMALL_MODULUS_BITS bits (3072 by default), then the public exponent must be less then or equal to OPENSSL_RSA_MAX_PUBEXP_BITS bits (64 by default). You can then have a 3072bits RSA key with a pu

RE: OpenSSL linking question; handling 1.0.0 vs 0.9.8

Christian- Thanks very much for your response. That information is definitely helpful. I'll take some time to process this and work towards your solution. > Date: Thu, 21 Jun 2012 07:25:24 +0200 > From: christ...@hohnstaedt.de > To: openssl-users@openssl.org > Subject: Re: OpenSSL linking ques

problem moving from 0.9.8w to 1.0.1c on Windows CE

Hi- I use OpenSSL with nPOPuk, an open-source mail client. I had been using the 0.9.8 releases, through 0.9.8w; I compiled static libs and linked them in. This worked fine, and I could connect with SSL to Gmail and Hotmail POP3 servers. I decided it was time to try the "latest version" and down

Re: How to use ocsp in openssl

After hours of desperately trying to implement some kind of working ocsp check (using the code from apps/ocsp.c) in the verification callback i finally gave up and applied Alexander Konyagin's patch (found a new message from him with updated one) to 1.0.1c sources that i previously downloaded. I j

Отв.: OpenSSL and GOST engine issue (statically linked library )

I am in doubt about possibility of using engine (any engine) with statically linked openssl. Does anybody have real experience with gost engine and statically linked openssl or expirience with using any engine and  statically linked openssl ? Best Regards Vladislav _