RE: CA certificate question

2005-12-05 Thread Han Jun Li
Darren, After you created the CSR, you are asking the company(X) you're working with to sign the CSR so anyone trusting X would also trust your certificate. Since X signed your CSR, it is acting in the Certificate Authority(CA) capacity. In order for your SSL communication to work,

Re: Microsoft CryptoAPI and OpenSSL

2005-12-04 Thread Han Jun Li
Steve, Thanks for your comment.  I will take a look at OpenSSL 0.9.9-dev.  In the mean time, in the plug-in I wrote using OpenSSL 0.9.7i, I get a rsa_priv_dec call from OpenSSL when the Java client sends a change_cipher message.  If I call CryptoAPI to decode this data using the handle t

Microsoft CryptoAPI and OpenSSL

2005-12-03 Thread Han Jun Li
Hi, I have created a plugin for OpenSSL which reads a certificate through Microsoft's CryptoAPI. The problem is that the private key is not returned and I just have a handle to it. During the handshake with a Java JSSE client, I get an error of BAD_MAC. If the certificate was stored as a PEM