Re: [openssl-users] May I ask you about the master-key in openssl s_client command result?

2018-09-26 Thread Stiju Easo
Hi, Just an Info, may not be relevant. If extended master secret is enabled,(by default on all browsers now a days) the computation of master secret is different. https://tools.ietf.org/html/rfc7627#section-4 On Thu, Sep 27, 2018 at 7:25 AM Viktor Dukhovni wrote: > > > > On Sep 26, 2018,

Re: [openssl-users] May I ask you about the master-key in openssl s_client command result?

2018-09-26 Thread Viktor Dukhovni
> On Sep 26, 2018, at 9:19 PM, 이영주 wrote: > > I wonder why master-key is revealed in plaintext in the results below. > (used command : Openssl s_client -connect host:port) Because s_client is a debugging tool, and a source of example code that demonstrates many elaborate features of the API fr

[openssl-users] May I ask you about the master-key in openssl s_client command result?

2018-09-26 Thread 이영주
Hello. I am a person working in Korea. I have a question. I wonder why master-key is revealed in plaintext in the results below. (used command : Openssl s_client -connect host:port) (skip) SSL-Session

Re: [openssl-users] Need help for porting RSA_verify

2018-09-26 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf Of > Prajapati, Amit > Sent: Wednesday, September 26, 2018 02:03 > For one of my application I am trying to port > “RSA_verify()”(crypto/rsa/rsa_sign.c) function from > openssl for verification of the signature. What do

Re: [openssl-users] An example issuing an intermediate CA with policy mappings?

2018-09-26 Thread Dave Coombs
> On Sep 25, 2018, at 14:34, Krehbiel, Richard wrote: > > For my testing I want to explore the behaviors of policies, policy > constraints, and policy mappings. I have figured out how to request and > issue certs with custom policy OIDs, but I haven't yet seen a method of > granting an interm

Re: [openssl-users] Certificate format question?

2018-09-26 Thread Dr. Matthias St. Pierre
> -Ursprüngliche Nachricht- > In the meantime: > >$ perl -ne 'print if (/^-BEGIN/../^-END/);' foo.pem | >openssl asn1parse > > > On Sep 25, 2018, at 1:15 PM, Hubert Kario wrote: > > > > then it looks like the parser used in asn1parse -inform pem is non- > > complia