Openssl 1.0.1x build using VS 2012

2013-08-29 Thread Pravesh Rai
Hi, Even though I'm successful in getting the OpenSSL build using VS 2012, but getting following error message: OPENSSL_Uplink(07FED5A31000,08): no OPENSSL_Applink while trying to 'load' libeay32.dll. The problem is solved, if we use another libeay32.dll, which is built using VS 2005. Except

Re: Add SubjAltName to openssl command line?

2013-08-29 Thread Viktor Dukhovni
On Thu, Aug 29, 2013 at 04:38:17PM -0700, Erich Weiler wrote: > I was wondering if there was also a way to quickly create a certificate and > key file in a similar fashion while also designating SubjAltName options on > the openssl command line? The bash script below uses inline command file desc

RE: Add SubjAltName to openssl command line?

2013-08-29 Thread Salz, Rich
You can use the $ENV:xxx construct. It's a bit of a hack, but you only need one config file and change the env var each time... -- Principal Security Engineer Akamai Technology Cambridge, MA __ OpenSSL Project

ECDSA_do_verify error?

2013-08-29 Thread shixin
Hi, all: I want to verify signature that the data are from NIST test vectors. But the result awalys error! The source is as follow: #include #include #include #include #include #include #include #include #pragma comment(lib, "libeay32.lib") #pragma comment(lib, "ssleay32

Add SubjAltName to openssl command line?

2013-08-29 Thread Erich Weiler
Hi Y'all, I've RTFM'd a bunch on this and can't find a clear answer, so to the lists I go... ;) I can now create a cert/key pair quickly as such: # openssl req -newkey rsa:2048 -x509 -nodes -out test.pem -keyout test.pem -days 3650 And after answering the questions, I get a certificate and key

RE: Is it Possible to revoke cert by Serial

2013-08-29 Thread redpath
Well what I was going to do is simply use the serial number for finding the file int the newscerts directory for the pem and issue the CA command with PEM. Since the backup of the signed certs is in the newcerts directory. I guess that would be appropriate. -- View this message in context: ht

RE: Is it Possible to revoke cert by Serial

2013-08-29 Thread Salz, Rich
> Is it possible to revoke a cert by serial number? Using the ca command? The answer is no. > I searched the form and this question is not answered. Use the source, Luke :) I can't see a good reason why the crl txt_db needs the subject name. It should be reasonable to modify ca.c to take the

Is it Possible to revoke cert by Serial

2013-08-29 Thread redpath
Is it possible to revoke a cert by serial number? I see all revoke commands you must have the cert? I searched the form and this question is not answered. -- View this message in context: http://openssl.6102.n7.nabble.com/Is-it-Possible-to-revoke-cert-by-Serial-tp46381.html Sent from the OpenS

Openssl 1.0.1x build using VS 2012

2013-08-29 Thread Pravesh Rai
Hi, Even though I'm successful in getting the OpenSSL build using VS 2012, but getting following error message: OPENSSL_Uplink(07FED5A31000,08): no OPENSSL_Applink while trying to 'load' libeay32.dll. The problem is solved, if we use another libeay32.dll, which is built using VS 2005. Except