Re: Remove from mailing list

2021-05-28 Thread Matthias Apitz
El día sábado, mayo 29, 2021 a las 01:02:52a. m. -0400, Amber Shepherd escribió: > Hi, > Can you please let me know what I need to do in order to unsubscribe > from this list? Look into the header lines of the mails from the list for List-Unsubscribe: matthias -- Matthias Apitz, ✉ g...@

Remove from mailing list

2021-05-28 Thread Amber Shepherd
Hi, Can you please let me know what I need to do in order to unsubscribe from this list? Thank you Amber shepherd

Re: X509_verify_cert() rejects all trusted certs with "default" X509_VERIFY_PARAM

2021-05-28 Thread Viktor Dukhovni
On Fri, May 28, 2021 at 01:30:14PM +0200, Graham Leggett via openssl-users wrote: > While running code that calls X509_verify_cert(), the trusted root > certificates (“BEGIN TRUSTED CERTIFICATE”) loaded into the > verification are failing verification with “certificate rejected”: Typically, cert

FW: X509_verify_cert() rejects all trusted certs with "default" X509_VERIFY_PARAM

2021-05-28 Thread Michael Wojcik
Just realized I sent this directly to Graham instead of to the list. -Original Message- From: Michael Wojcik Sent: Friday, 28 May, 2021 09:37 To: 'Graham Leggett' Subject: RE: X509_verify_cert() rejects all trusted certs with "default" X509_VERIFY_PARAM > From: openssl-users On Behalf

ODP: CSR creation using pkcs11 dynamic engine

2021-05-28 Thread Piotr Lobacz
Hi Selva, i have found the cause of the problem. It is the HasNoPrivateKey function which is in dotnet OpenSsl ./src/Native/Unix/System.Security.Cryptography.Native/pal_rsa.c implementation. The crux of the problem is in these lines: // The method has descibed itself as having the private k

Re: CSR creation using pkcs11 dynamic engine

2021-05-28 Thread Selva Nair
Hi, On Fri, May 28, 2021 at 1:44 PM Piotr Lobacz wrote: > > Ok, i have found out that dotnet OpenSsl library has it's own code for > verification is key private. For this it needs the whole data of private key > from which this method: > > static int HasNoPrivateKey(RSA* rsa) > > which is in .

ODP: CSR creation using pkcs11 dynamic engine

2021-05-28 Thread Piotr Lobacz
Ok, i have found out that dotnet OpenSsl library has it's own code for verification is key private. For this it needs the whole data of private key from which this method: static int HasNoPrivateKey(RSA* rsa) which is in ./src/Native/Unix/System.Security.Cryptography.Native/pal_rsa.c of dotne

Re: X509_verify_cert() rejects all trusted certs with "default" X509_VERIFY_PARAM

2021-05-28 Thread Tomas Mraz
Hello, is this a regression when comparing with OpenSSL-1.1.1? If so, it might be a good idea to report this as an issue to the project in GitHub. Tomas On Fri, 2021-05-28 at 13:30 +0200, Graham Leggett via openssl-users wrote: > Hi all, > > While running code that calls X509_verify_cert(), th

X509_verify_cert() rejects all trusted certs with "default" X509_VERIFY_PARAM

2021-05-28 Thread Graham Leggett via openssl-users
Hi all, While running code that calls X509_verify_cert(), the trusted root certificates (“BEGIN TRUSTED CERTIFICATE”) loaded into the verification are failing verification with “certificate rejected”: 2: CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE: verify failed: certificate rejec

CSR creation using pkcs11 dynamic engine

2021-05-28 Thread Piotr Lobacz
Hi all, i'm trying to generate CSR using C# System.SecurityCryptography.Openssl library together with pkcs11 token library. The whole proces for this in command line works without any problems. For execution of this process i use command: openssl req -new -subj '/C=PL/ST=Gdansk/L=Gdansk/CN=softg