Re: [openssl-users] SKM_ASN1_SET_OF_i2d

2016-09-13 Thread Dr. Stephen Henson
On Tue, Sep 13, 2016, Thomas Francis, Jr. wrote: > What???s the replacement for code that used SKM_ASN1_SET_OF_i2d in OpenSSL > 1.1? The code I???ve got that calls this function is getting the DER > encoding of a STACK_OF() as a sorted SET. This STACK_OF() is of a custom > ASN1 type; and is a

[openssl-users] Unable to decrypt: RSA_R_PADDING_CHECK_FAILED 1.1.0

2016-09-13 Thread M. Moore
I'm creating a simple utility to encrypt and decrypt files using a key pair. I'm on Windows and coding against the 1.1.0 version of Openssl. I can load the key pair and encrypt the file fine, but when I try to decrypt EVP_PKEY_decrypt always returns -1. I traced this to the rsa padding check fun

[openssl-users] openssl-1.0.2i?

2016-09-13 Thread Marek Svent
Hi, 1.0.2h was released four months ago and although several security issues worth for CVE number is discovered in it and there has been a lot of commits in the 1.0.2 branch fixing other important issues, there is no sign of 1.0.2i. Is it planned? Or is 1.1.x focus for development now and 1.0.2 us

[openssl-users] SKM_ASN1_SET_OF_i2d

2016-09-13 Thread Thomas Francis, Jr.
What’s the replacement for code that used SKM_ASN1_SET_OF_i2d in OpenSSL 1.1? The code I’ve got that calls this function is getting the DER encoding of a STACK_OF() as a sorted SET. This STACK_OF() is of a custom ASN1 type; and is a member of another structure that is also a custom ASN1 struct

[openssl-users] 回复: 回复: 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread zy_chongqing
thanks all! Finally I got it! the reason is that the libcrypto and libssl that I complie is not matched. oh my god! This issue took me 24 hours!  --发件人:Viktor Dukhovni 发送时间:2016年9月14日(星期三) 00:02收件人:openssl-users 主 题:Re: [openssl-use

Re: [openssl-users] 回复: 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 11:59:06PM +0800, zy_chongqing wrote: > Only this one certificate, acutually this file is used for the iOS APNs > function.the weird thing is, I use the same file and same code on other > 2 server, it work well. That is really confused me. Then perhaps the copy of the file

[openssl-users] 回复: 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread zy_chongqing
Only this one certificate, acutually this file is used for the iOS APNs function.the weird thing is, I use the same file and same code on other 2 server, it work well. That is really confused me.  --发件人:Viktor Dukhovni 发送时间:2016年9月1

Re: [openssl-users] 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread Viktor Dukhovni
On Tue, Sep 13, 2016 at 10:53:57PM +0800, zy_chongqing wrote: > thanks for your reply. please kindly find the attached to get the certificate. Firstly, you posted a 2048-bit certificate, which would not normally fail with a "key too small" error, other than by failure to parse the public key. Se

[openssl-users] 回复: 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread zy_chongqing
There is not other error information. And I try to get more error message by the method as below:if (0 == SSL_CTX_use_certificate_file(m_pCtx,  RSA_CLIENT_CERT, SSL_FILETYPE_PEM)) { ERRLOG("Cannot use Certificate File:%s", ERR_error_string(  ERR_get_error(), NULL ));ERRLOG("Can

Re: [openssl-users] Verifying RSA-SHA1 signature?

2016-09-13 Thread Nikolay Kudryavtsev
Ok, thanks the help. Extracting the digest didn't work for me. But I was finally able to contact a member of that third party who had the knowledge of the procedure they use. So after some basic questions, I've asked that person "sure you sign that data with that key you sent us"? The answer

[openssl-users] 回复: [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread zy_chongqing
Hi Matt, thanks for your reply. please kindly find the attached to get the certificate. actually after i set the security level to 0, some times the result is to get the error code you read before, but some times the programe will crash directly. I checked the stack information as below: [2016-09

Re: [openssl-users] [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread Matt Caswell
Comments inserted... On 13/09/16 14:17, zy_chongqing wrote: > Hi, > > I have a big problem about the OpenSSL usage, please help. > OS: Linux version 3.7.10-1.1-desktop (geeko@buildhost) (gcc version 4.7.2 > 20130108 [gcc-4_7-branch revision 195012] (SUSE Linux) ) #1 SMP PREEMPT Thu > Feb 28 15:

[openssl-users] [help]SSL_CTX_use_certificate_file failed!

2016-09-13 Thread zy_chongqing
Hi, I have a big problem about the OpenSSL usage, please help. OS: Linux version  3.7.10-1.1-desktop (geeko@buildhost) (gcc version 4.7.2 20130108  [gcc-4_7-branch revision 195012] (SUSE Linux) ) #1 SMP PREEMPT Thu Feb 28  15:06:29 UTC 2013 (82d3f21)OpenSSL version: OpenSSL 1.1.0  25 Aug 2016 I cre