RE: CSR generation using pkcs11 token engine from C# code

2021-05-24 Thread Michael McKenney
Usually I reserve C# for Windows servers. I use PHP on Ubuntu other Linux Distros.Most web servers that need OpenSSL are Linux. Glad you got it working. From: Piotr Lobacz Sent: Monday, May 24, 2021 8:10 AM To: Michael McKenney ; openssl-users@openssl.org Subject: ODP: CSR generation

ODP: CSR generation using pkcs11 token engine from C# code

2021-05-24 Thread Piotr Lobacz
Hi Michael, thx for your quick reply. Unfortunately i can't use your script because i need to use native code not bash implementation. For the first question about loading token module i have found a solution on github https://github.com/tkil/openssl-pkcs11-samples . This code is a C/C++ code b

RE: I installed Openssl 1.1.1k and Ubuntu 20.04 did an upgrade and reverted it back to 1.1.1f. Usually Ubuntu upgrades don’t break it.

2021-05-24 Thread Michael McKenney
Jakob, Thanks for all the help over the weekend. I really appreciated the help. I did a reply all to your first email to add openssl-users. These two servers for at my home. They host many web sites. These are some of them: https://wp.scsiraidguru.com https://wp.michaelmckenney.com http

RE: CSR generation using pkcs11 token engine from C# code

2021-05-24 Thread Michael McKenney
I wrote this script years ago when I switched to Godaddy 10 site certificates. I don't use it from C# You could easily put it into C# or PHP. < > would be variables at the top. I have it filled in so I just modify the alt_names. I just cut and paste the all of it into Ubuntu and run

CSR generation using pkcs11 token engine from C# code

2021-05-24 Thread Piotr Lobacz
Hi all, i am currently trying to generate CSR with the usage of tpm2-pkcs11 module together with pkcs11 engine from opensc and the whole thing running with openssl api from C# code. I have checked that my solution works from command line. I have added these lines: openssl_conf = openssl_init

Re: Support for ECDH One-pass in "openssl cms enc"

2021-05-24 Thread Henning Krause via openssl-users
Hi, after studying the different key generator functions more closely I came to the conclusion that, since the Prime256 curve has a cofactor of 1, both KDF should produce the same value and so everything has cleared up. Kind regards, Henning From: openssl-users