Distributing newly generated certificates via socket?

Hello: I used the example 10-6 in book *Network Security with OpenSSL* to generate x509 certificates. However, my program (server) want to send newly generated certificates to all other servers and clients via socket. After reading the book, I have two options to copy them into std::string certi

Peek data

Hello, I would like to know whether it is possible to peek a message that was received after successful handshake? I am looking for similar behavior to python socket.MSG_PEEK flag which examine the data without consuming it and subsequent recv will read the data again. Thanks, Piotr _

Re: Getting error for libcrypto.a file in openssl-1.0.1g when making php

Thanks. I did that and it worked fine. Sent from my iPhone > On Apr 17, 2014, at 8:06 PM, Michael Wojcik > wrote: > > [Apologies for the top-post. Outlook does not properly handle bottom-posting > when replying to HTML email, and doesn't properly convert HTML email to plain > text, either. A

RE: Getting error for libcrypto.a file in openssl-1.0.1g when making php

[Apologies for the top-post. Outlook does not properly handle bottom-posting when replying to HTML email, and doesn't properly convert HTML email to plain text, either. A pox on HTML email and Outlook and MIME and all their ilk.] You've built OpenSSL as a static library, and now you're trying to

Re: Peek data

On Thu, Apr 17, 2014 at 7:04 PM, wrote: > On Thu, Apr 17, 2014 at 12:48:11PM -0400, Jeffrey Walton wrote: > >> > This would be the job of a buffering layer above the SSL connection. >> > In Postfix, for example, there is a buffering "vstream" layer above >> > SSL. Peeking at plaintext data witho

unacknowledged donations

I have accumulated unread notifications of 179 donations dating back several days. Usually I try to send an acknowledgment promptly; a little click-and-drag, a little cut-and-paste to get it in the electronic ledger, and done. With some recent distractions I've fallen behind on either processing th

Re: Peek data

On Thu, Apr 17, 2014 at 12:48:11PM -0400, Jeffrey Walton wrote: > > This would be the job of a buffering layer above the SSL connection. > > In Postfix, for example, there is a buffering "vstream" layer above > > SSL. Peeking at plaintext data without consuming it is a vstream > > layer feature.

Re: Peek data

On Thu, Apr 17, 2014 at 04:39:29PM +0200, Piotr Kliczewski wrote: > I would like to know whether it is possible to peek a message that was > received after successful handshake? I am looking for similar behavior > to python socket.MSG_PEEK flag which examine the data without > consuming it and sub

Peek data

Hello, I would like to know whether it is possible to peek a message that was received after successful handshake? I am looking for similar behavior to python socket.MSG_PEEK flag which examine the data without consuming it and subsequent recv will read the data again. Thanks, Piotr _

Getting error for libcrypto.a file in openssl-1.0.1g when making php

I am getting this error from an openssl-1.0.1g file when trying to make php-5.4.23 /usr/bin/ld: /opt/openssl-1.0.1g/lib/libcrypto.a(cversion.o): relocation R_X86_64_32 against `.rodata.str1.1' can not be used when making a shared object; recompile with -fPIC /opt/openssl-1.0.1g/lib/libcrypto.a: co

Re: [1.0.1f] Building a certificate request with RSA-OAEP as Public Key Algorithm

tl;dr: is it worth using OpenSSL to build a CMS EnvelopedData message when the key transport algorithm is RSA-OAEP? If so, how? Long version: After some more digging, I'll try to make my request more precise. Some context: I am generating a RSA key pair with an external engine (say a HSM with

Re: RSASSA-PSS command

On Thu, 17 Apr 2014 19:54:27 +0800 (CST) shixin wrote: > I implement X.509 certificates with RSASSA-PSS signatures by openssl > function, is it possible? It is possible, however most browsers won't like it. (my code for nss is unfortunately bitrotting in bugzilla) But we have two things here: a

Re:Re: RSASSA-PSS command

At 2014-04-17 19:29:34,"Hanno Böck" wrote: >On Thu, 17 Apr 2014 19:20:49 +0800 (CST) >shixin wrote: > >> >> Oh, my purpose is generate x509 certificate that the Subject Public >> Key Information is id-RSASA-PSS 2058. > >I think openssl is not able to do that. At least it wasn't when I >wrote m

Re: RSASSA-PSS command

On Thu, 17 Apr 2014 19:20:49 +0800 (CST) shixin wrote: > > Oh, my purpose is generate x509 certificate that the Subject Public > Key Information is id-RSASA-PSS 2058. I think openssl is not able to do that. At least it wasn't when I wrote my thesis on RSA-PSS [1]. The only software out there c

Re: Fwd: Application simply comes out in the function PEM_write_RSAPrivateKey.The private key file is simply 0KB.

Did you get solution? I am having same problem -- View this message in context: http://openssl.6102.n7.nabble.com/Application-simply-comes-out-in-the-function-PEM-write-RSAPrivateKey-The-private-key-file-is-simply--tp2033p49530.html Sent from the OpenSSL - User mailing list archive at Nabble.co

Re:RSASSA-PSS command

Oh, my purpose is generate x509 certificate that the Subject Public Key Information is id-RSASA-PSS 2058. Thanks At 2014-04-17 18:51:50,shixin wrote: Hi all, I want to sign with RSASSA-PSS, but I don't know how use openssl in command. Best Wishes, Thanks!

RSASSA-PSS command

Hi all, I want to sign with RSASSA-PSS, but I don't know how use openssl in command. Best Wishes, Thanks!

Re: [1.0.1f] Building a certificate request with RSA-OAEP as Public Key Algorithm

Hello all, Trying to build a Certificate Signing Request using external means for crypto operations (eg key pair generation, signing). I'm relying on demos/x509/mkreq.c and the code in crypto/x509/. What I want to do is: - use external engine to generate RSA key pair - build X509_REQ as per mk