Re: Seg fault from d2i_RSAPrivateKey_fp

2013-02-20 Thread Nick
On Mon, 2013-02-18 at 08:56 -0500, Jeffrey Walton wrote: > > g++-4.7.2 -g -Wall -Wextra -Weffc++ -Wno-missing-field-initializers > > -Wctor-dtor-privacy -Wnon-virtual-dtor -Wreorder -Wold-style-cast > > -Woverloaded-virtual -Werror -std=c++11 > -Wno-missing-field-initializers :) Firstly, -Wno-miss

RE: application/x-x509-ca-ra-cert (SCEP Enrollment)

2013-02-20 Thread Santhosh Kokala
I get this error when I try to convert it to PEM format. [~]$ openssl pkcs7 -in ca_ra_cert.bin -print_certs unable to load PKCS7 object 140065214732104:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:698:Expecting: PKCS7 [~]$ openssl asn1parse -in ca_ra_cert.bin -inform der -s

Re: application/x-x509-ca-ra-cert (SCEP Enrollment)

2013-02-20 Thread Matthew Hall
On Wed, Feb 20, 2013 at 06:51:12PM -0500, Dave Thompson wrote: > Or openssl asn1parse, likely available to anyone asking here > even on non-Linux; with -inform der if applicable which it is > here (easily determinable with any kind of octal or hex dump > or a good guess for anything that doesn't

Re: Sometimes openssl won't validate a well signed PKCS#7 data

2013-02-20 Thread Dr. Stephen Henson
On Tue, Feb 19, 2013, Ulises S. wrote: > There is this odd behavior in which one in many signed files with PKCS#7 on > JAVA won't > pass the validation with Openssl, all Openssl signed data is correctly > verified in JAVA though. > > Currently I have not a test case but according to certain ppl t

RE: application/x-x509-ca-ra-cert (SCEP Enrollment)

2013-02-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Matthew Hall > Sent: Wednesday, 20 February, 2013 15:05 > Use the dumpasn1 utility on it, it's in almost every Linux > distro, or from its > website: > > http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c > Or openssl asn1parse, likely availab

Re: FIPS_selftest fails under windows dynamic linking

2013-02-20 Thread Dr. Stephen Henson
On Wed, Feb 20, 2013, Rickard Binnare wrote: > > > So FIPS_mode_set() cannot succeed if FIPS_selftest() fails, for static > > or dynamic linking. > No this is not the case on the windows platform. > Tested on a Windows 7 machine using Visual Studio 2010 with OpenSSL.1.0.1.c > and OpenSSL-Fips-2.0

application/x-x509-ca-ra-cert (SCEP Enrollment)

2013-02-20 Thread Santhosh Kokala
Hi All, I am unable to identify the certificate format that I received during SCEP enrollment. I am attaching a copy of the cert chain that I received. Can someone please let me know how to convert the above attached certificate to PEM format? Santhosh ca_ra_cert.bin Description: ca_ra_cert.bi

Re: FIPS_selftest fails under windows dynamic linking

2013-02-20 Thread Steve Marquess
On 02/20/2013 09:10 AM, Rickard Binnare wrote: > ... > > Here is a minimalistic test program that displays this anomaly. Dynamic > linked. It could easily be modified to show > OpenSSL error msgs. ... I think the detailed error messages are relevant there. Perhaps you're seeing a DRBG seeding pro

Re: FIPS_selftest fails under windows dynamic linking

2013-02-20 Thread Rickard Binnare
Thanks, Steve, for a quick response. >FIPS_selftest() is called from FIPS_mode_set() (which is actually a > wrapper in the "FIPS capable" OpenSSL for FIPS_module_mode_set() which > calls FIPS_selftest()). I am well aware of this. It is all there in the source code, thank god for open source and

Re: application/x-x509-ca-ra-cert (SCEP Enrollment)

2013-02-20 Thread Matthew Hall
Use the dumpasn1 utility on it, it's in almost every Linux distro, or from its website: http://www.cs.auckland.ac.nz/~pgut001/dumpasn1.c Matthew. On Wed, Feb 20, 2013 at 07:54:00PM +, Santhosh Kokala wrote: > Hi All, > I am unable to identify the certificate format that I received during SC