Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Jim Carroll
Thanks for the update. OpenSSL is a great project and I'm willing to pitch in if I can be assistance. > -Original Message- > From: openssl-users [mailto:openssl-users-boun...@openssl.org] On > Behalf Of Dr. Stephen Henson > Sent: Tuesday, July 26, 2016 3:25 PM > To: openssl-users@openssl.o

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Dr. Stephen Henson
On Tue, Jul 26, 2016, Jim Carroll wrote: > After experimenting, I can confirm this is the same issue we're seeing, > although experiencing it very differently from the MIT/Kerberos team. I can > confirm that right now PKCS7 sign/encrypt/decrypt is broken. I'd love to > help fix it, but I'm not ye

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Jim Carroll
Perfect. thanks > -Original Message- > From: openssl-users [mailto:openssl-users-boun...@openssl.org] On > Behalf Of Salz, Rich > Sent: Tuesday, July 26, 2016 2:27 PM > To: openssl-users@openssl.org > Subject: Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt? > > > > What is th

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Salz, Rich
> What is the accepted way for "the great unwashed" to follow tickets? All updates are forwarded to openssl-dev. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Jim Carroll
After experimenting, I can confirm this is the same issue we're seeing, although experiencing it very differently from the MIT/Kerberos team. I can confirm that right now PKCS7 sign/encrypt/decrypt is broken. I'd love to help fix it, but I'm not yet up to speed on bio_enc.c and evp_enc.c. For now,

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Dr. Stephen Henson
On Tue, Jul 26, 2016, Jim Carroll wrote: > Steve -- thanks, but I don't think I was clear enough. > > I am trying to get back the signed content, but when I call PKCS7_decrpyt() > I get back an empty buffer. Is this my flawed understanding of > PKCS7_sign(). Is there some other way to get back

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Jim Carroll
Steve -- thanks, but I don't think I was clear enough. I am trying to get back the signed content, but when I call PKCS7_decrpyt() I get back an empty buffer. Is this my flawed understanding of PKCS7_sign(). Is there some other way to get back the original signed content that I'm missing? >Fro

Re: [openssl-users] X509 Version changes?

2016-07-26 Thread Dr. Stephen Henson
On Thu, Jul 21, 2016, Jim Carroll wrote: > I've run into what appears to be a change to defaults between 0.9.8 and > 1.1.0, and I wanted to make sure it's not a bug we've introduced. > > While reviewing unittests, we see that calls to X509_REQ_new() generate an > X509 object with the version set

Re: [openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Dr. Stephen Henson
On Tue, Jul 26, 2016, Jim Carroll wrote: > Running into trouble -- any attempt to PKCS7_decrypt() S/MIME content that > was created with PKCS7_sign()+PKCS7_encrypt() yields an empty result set. I > have the distinct impression I'm doing something dumb -- but several days of > debugging I'm comple

[openssl-users] How to properly build OpenSSL with certificates inside certs directory

2016-07-26 Thread Piotr Panasewicz
Hi, There’s seems to be no good explanation on the website on how to build OpenSSL with CA certificates so I thought I’ll give a try here. I’ve copied all the CA certs I have to the certs folder and built, unfortunately I still get certificate validation errors with the library I uses (it links

[openssl-users] PKCS7_sign conflict with PKCS7_decrypt?

2016-07-26 Thread Jim Carroll
Running into trouble -- any attempt to PKCS7_decrypt() S/MIME content that was created with PKCS7_sign()+PKCS7_encrypt() yields an empty result set. I have the distinct impression I'm doing something dumb -- but several days of debugging I'm completely stuck. I've created an MVCE and included it