RE: hardware device to sign CSR using openssl -e

2012-06-22 Thread alexis _
> From: jb-open...@wisemo.com > I seem to recall there was/is an engine to use an device with a > PKCS#11 ("p11") driver dll, on any OS. If this is so, you may > be able to use many kinds of existing devices, including Gemalto > or Oberthur smartcards (if those are safe enough). > > However my la

RE: OpenSSL Library: Only BIGNUM functions

2012-06-22 Thread Erik Tkal
If you build the OpenSSL crypto as a static library you should be able to utilize it without including everything else in your app, depending on your compiler/linker options. Erik Tkal Juniper OAC/UAC/Pulse Development -Original Message- From: owne

Re: OpenSSL Library: Only BIGNUM functions

2012-06-22 Thread chipler
Thank you, that sounds interesting. I'll look at it. But is there really no possibilty to get OpenSSL library smaller, only with BIGNUMs. I ask that because I did very much with these functions. Thank you. Original-Nachricht > Datum: Fri, 22 Jun 2012 13:04:02 +0100 > Von: "Mat

Re: OpenSSL Library: Only BIGNUM functions

2012-06-22 Thread Matt Caswell (fr...@baggins.org)
As an alternative have you considered using the GMP library? That library is much more focussed on providing multi-precision arithmetic as opposed to crypto , so I would expect it to be a lot smaller. http://gmplib.org/ Matt On 22 June 2012 12:57, wrote: > Hi, > > I have to create a program, w

OpenSSL Library: Only BIGNUM functions

2012-06-22 Thread chipler
Hi, I have to create a program, which has to be as small as possible, but it should use the BIGNUM functions from the OpenSSL library, because it has to work with large numbers. Is there a possibilty to compile a library, which just contains the BIGNUMs functions. I don't need any special featu

Re: hardware device to sign CSR using openssl -e

2012-06-22 Thread Jakob Bohm
On 6/21/2012 11:54 PM, alexis _ wrote: hello, this question is somehow related to openssl, i'm guessing openssl users community might point me in the right direction. Today i'm generating digital identities (key + cert) using openssl and CA key/cert files. basically it boils down to a classi

Re: How to use ocsp in openssl

2012-06-22 Thread Alexander Komyagin
Thank you for the feedback, JT. I'm glad that you've found my patch useful. Good if it works for 1.0.1c, because I only tested it with 1.0.1a. On Thu, 2012-06-21 at 17:28 +0400, JT Rosin wrote: > After hours of desperately trying to implement some kind of working ocsp > check (using the code from