RE: pkcs7_sign() / cms_sign() : using SHA256 hash

2014-09-23 Thread Salz, Rich
RT is sometimes slow. If you sent email to rt, give it a couple of days and resend. -- Principal Security Engineer, Akamai Technologies IM: rs...@jabber.me Twitter: RichSalz __ OpenSSL Project

Re: Problem with Certificate Chains on Windows

2014-09-23 Thread Kyle Hamilton
Check the digests used for signing. Windows (after updates) may refuse MD5 signatures on certificates; I would recommend regenerating new certs with at least SHA256. -Kyle H On September 22, 2014 9:34:59 AM PST, "Vellore-Arumugam, Jagdish (Svr Automation)" wrote: >Hi, > >I am getting a 'Cert

Problem with Certificate Chains on Windows

2014-09-23 Thread Vellore-Arumugam, Jagdish (Svr Automation)
Hi, I am getting a 'Certificate Signature Failure' (verify error:num=7:certificate signature failure) on Windows Server 2008 R2 Enterprise during certificate verification on the client side. I used the 'openssl s_client' command to check this behavior after seeing SSL handshake failure in my ap

Re: pkcs7_sign() / cms_sign() : using SHA256 hash

2014-09-23 Thread f . gaschet
Thank you Stephen. I'll try to do that and then I'll tell the others OFTP2 editors how to do ! BTW: Rich told me : "open a ticket". I tried to do by writing to r...@openssl.org but I got nothing back. Best regards, -- Francis Le 20/09/2014 01:36, Dr. Stephen Henson a écrit : On Fri, Sep 1

RE: Apache SSL proxy to Weblogic fails

2014-09-23 Thread Stromas, Aaron
I suspected that Apache and Weblogic fail to agree on the ciphers. The Weblogic logs shows its ciphers: I’ve been trying to match them using the SSLCipherSuite directive, for example, setting it to AES:RC4+RSA:!TLSv1.2:!ECDH:!SPR:!DSS:!PSK:!EXP but none of the values wor

Re: Verifying authenticode signature using openssl API

2014-09-23 Thread Prasad Dabak
For the primary signature it is "rsaEncryption" (OID 1.2.840.113549.1.1.1) and for the counter signature it is "RSA-SHA1" (OID 1.2.840.113549.1.1.5). Thanks. -Prasad On Sep 22, 2014, at 09:13 AM, Jakob Bohm wrote: Ok, look in the SignerInfo structure of the secondary signature. There is a

Re: Apache SSL proxy to Weblogic fails

2014-09-23 Thread Thulasi Goriparthi
On 19 September 2014 22:34, Stromas, Aaron wrote: > Greetings, > > > > I am looking for help with a problem I've ran into a using > mod_proxy/mod_ssl. The Apache HTTP server on SLES 11 SP3 64 bit, OpenSSL > 1.0.1.f acts as SSL proxy to the Weblogic 10.3 running on Redhat. The > mod_ssl is confi