Re: OpenSSL vs SPKI

2020-04-06 Thread Viktor Dukhovni
On Mon, Apr 06, 2020 at 07:16:23PM -0700, Jason Proctor wrote: > However, the d2i_NETSCAPE_SPKI() function errors out trying to deal > with them. That's not the droid you're looking for. > Question -- is there a supported way of importing SPKI encoded public > keys into the OpenSSL world? Yes.

Re: OpenSSL vs SPKI

2020-04-06 Thread William Roberts
On Mon, Apr 6, 2020, 11:59 PM Jason Proctor wrote: > On Mon, Apr 6, 2020 at 9:44 PM William Roberts > wrote: > > > > > > There's setter functions now. See: > > https://www.openssl.org/docs/man1.1.0/man3/RSA_set0_key.html > > Thanks, yes it does look like that replaces direct access to "n" and >

Re: OpenSSL vs SPKI

2020-04-06 Thread Jason Proctor
On Mon, Apr 6, 2020 at 9:44 PM William Roberts wrote: > > > There's setter functions now. See: > https://www.openssl.org/docs/man1.1.0/man3/RSA_set0_key.html Thanks, yes it does look like that replaces direct access to "n" and "e". It's a hack, but it might work for the moment. Ideally though I

Re: OpenSSL vs SPKI

2020-04-06 Thread William Roberts
On Mon, Apr 6, 2020, 9:16 PM Jason Proctor wrote: > Distinguished crypto community, > > I have the requirement to import RSA keypairs generated by the Amazon > Key Management System into my environment. These keypairs arrive in > the de facto standard of SPKI for the public component and PKCS8 fo

OpenSSL vs SPKI

2020-04-06 Thread Jason Proctor
Distinguished crypto community, I have the requirement to import RSA keypairs generated by the Amazon Key Management System into my environment. These keypairs arrive in the de facto standard of SPKI for the public component and PKCS8 for the private component. I have no problem with the PKCS8 en

Re: Help with certificatePolicies section

2020-04-06 Thread Libor Chocholaty
Hi, could you share commands that led to this error? It looks to me referenced non existent section in config file like as param "-extensions" option. Regards, Libor On 2020-04-06 19:43, Richard Simard wrote: > Hi! > > Anybody can help me whit this error? > > Error Loading extension se

Help with certificatePolicies section

2020-04-06 Thread Richard Simard
Hi! Anybody can help me whit this error? Error Loading extension section server_cert 140091048477824:error:0E06D06C:configuration file routines:NCONF_get_string:no value:../crypto/conf/conf_lib.c:273:group=CA_default name=email_in_dn 140091048477824:error:0E06D06C:configuration file routines:NCON

RE: building openssl 1.1.1 for Solaris 10

2020-04-06 Thread Michael Wojcik
> From: tim.j.culh...@gmail.com [mailto:tim.j.culh...@gmail.com] > Sent: Monday, April 06, 2020 09:15 > > I'm using gcc 4.9.2 > > > So, should I just ignore that warning and let the gmake continue? Yes, that's what I would recommend. If it bugs you, you could always experiment with changing it,

RE: building openssl 1.1.1 for Solaris 10

2020-04-06 Thread tim.j.culhane
Hi, I'm using gcc 4.9.2 So, should I just ignore that warning and let the gmake continue? Tim -Original Message- From: openssl-users On Behalf Of Michael Wojcik Sent: Monday 6 April 2020 15:31 To: openssl-users@openssl.org Subject: RE: building openssl 1.1.1 for Solaris 10 > From:

RE: building openssl 1.1.1 for Solaris 10

2020-04-06 Thread Michael Wojcik
> From: tim.j.culh...@gmail.com [mailto:tim.j.culh...@gmail.com] > Sent: Monday, April 06, 2020 06:35 > To: Michael Wojcik; openssl-users@openssl.org > Subject: RE: building openssl 1.1.1 for Solaris 10 > > Ok, attempting to build openssl 1.1.1e now. > > As prompted by the config script I'm runn

RE: building openssl 1.1.1 for Solaris 10

2020-04-06 Thread tim.j.culhane
Hi, Ok, attempting to build openssl 1.1.1e now. As prompted by the config script I'm running Configure as follows: ./Configure solaris64-sparcv9-cc --prefix=/opt/openssl/1.1.1 --openssldir=/opt/openssl/1.1.1 That completes successfully. However, when I then run gmake I see warnings like t