[openssl-users] pkcs11 engine private key loading

I've already post this to opensc mailing list but I'm not really sure where the problem is. So I also try my luck here. I'm writing application which decrypts SMIME messages using smart card. I used source code of openssl cms command as reference. I'm able to decrypt already however I face the fol

Re: [openssl-users] External hardware for SSL handshake (overriding PreMasterSecret decrypt)

thanks! Unfortunately there is no pkcs11 wrapper for this device. There are a few commands implementing RSA operations (generate keyPair, PreMaster decrypt) and I have to use them to perform server-side SSL handshake. OpenSC looks very interesting for my task. Pavel - "op

[openssl-users] External hardware for SSL handshake (overriding PreMasterSecret decrypt)

ons to perform using hardware: - RSA key generation (private component will be saved in hardware module) - PreMaster decrypt from client during SSL handshake How to override only these 2 functions? Thanks in advance! Pavel ___ openssl-users mailing

Re: [openssl-users] ChaCha20/Poly1305 in OpenSSL?

Following github repo has 1.0.2a with chacha20poly1305 patch from CloudFlare applied to it: https://github.com/eakraly/openssl And this one has chacha20poly1305 implementation from different source (1.0.2-aead branch in openssl) https://github.com/PeterMosmans/openssl Pavel Punsky

Re: Issues with Creating a Certificate With Multiple Hostnames

You can give it a try with wildcard CN=*.example.com Ciprian Sent from Vodafone BlackBerry -Original Message- From: pradyumna dash Sender: owner-openssl-us...@openssl.org Date: Tue, 13 Sep 2011 23:26:52 To: Reply-To: openssl-users@openssl.org Subject: Issues with Creating a Certificate

Re: Adding Multiple Root certificates in Openssl

t; openssl x509 -in root.cer -hash > >[Mayur]After storing links to my PEM format Certificate files how > do I parse the folder having links to get root C for my chain A -->B ? > > > Regards, > Mayur > > > > On Fri, Jul 15, 2011 at 10:05 PM, Ciprian

Re: Adding Multiple Root certificates in Openssl

Hi Mayur, You can create a file where you may concatenate all your trusted certificates in PEM format and use that file for verification. Another way is to store your trusted certificates in PEM format in filesystem and create a folder from where you create symbolic links to every certificate. The

Re[2]: Extended key usage field

> From RFC3280 section "4.2.1.13 Extended Key Usage" > If a certi __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager

Extended key usage field

Accorind to RFC 2459: If the Extended key usage field is flagged critical, the certificate MUST be used only for one of the purposes indicated. If the extension is flagged non-critical, then it indicates the intended purpose or purposes of the key, and may be used in finding the correct key/certi

Re: 3DES ECB

Hello Stella, Tuesday, June 04, 2002, 11:14:59 AM, you wrote: SP> Hi, SP> I was wondering if someone could clarify this for me. I'm trying to decrypt SP> a string which has been encrypted in 3DES ECB mode. SP> I'm using the command line utility and a program I have written to do this. SP> Acc

Re: Unable to load

Hello Leandro, Thursday, May 13, 2004, 10:25:39 PM, you wrote: LSdP> seeded:md_rand.c:501:You need to read the OpenSSL FAQ, LSdP> http://www.openssl.org/support/faq.html Have you done as suggested ? __ OpenSSL Project

openssl-0.9.6d fails under cygwin on Win2000 was Re:

Hello A?rtCorcoran", Saturday, May 11, 2002, 7:34:49 AM, you wrote: Arnc> Hi, I'm trying to compile openssl-0.9.6d on Win2000 under cygwin (latest cygwin). Arnc> The configure works fine, but it fails during make with the following: Arnc> make[3]: Entering directory `/d/acorcoran/apps/openssl/

Re: J/Crypto 3.3 DER encoded certificate cannot be read by openssl-0.9.6b

Please, ignore this post. Monday, April 15, 2002, 4:34:58 PM, you wrote: PT> Trying to read the attached DER form of a X509 certificate with PT> OpenSSL 0.9.6c and 0.9.6b yields the following error: __ OpenSSL Project

J/Crypto 3.3 DER encoded certificate cannot be read by openssl-0.9.6b

Hello, there! :) I've checked google in this but to no avail - so I'm asking here... Hope its not a duplicate thread. Trying to read the attached DER form of a X509 certificate with OpenSSL 0.9.6c and 0.9.6b yields the following error: paveltz@MORDOR ~ $ openssl x509 -in ./1.der -inform DER una

Re: Error when signing a certificate

Hello Charles, Thursday, April 11, 2002, 3:38:44 PM, you wrote: CH> Hi , I am trying to do a SSL certificate to use TLS/SSL encryption with Qpopper. I read the doc and I created a certificate request succesfully but it seems that when I try to sign it, it crash CH> with a serious error, here's

[BUG & suggested PATCH] EVP_DecodeUpdate 0.9.6b & 0.9.6c

Hello, there! :) My colleague Nedelcho Stanev and myself have identified what we would think to be a bug (or a flaw) in the EVP_DecodeUpdate() routine. We were trying to read base64 encoded data with the base64 BIO which has the 'next' member pointed to membuf BIO in which we write the encoded da

Fwd: [BUG & suggested PATCH] EVP_DecodeUpdate 0.9.6b & 0.9.6c

This is a forwarded message From: Pavel Tsekov <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Thursday, April 11, 2002, 12:39:59 PM Subject: [BUG & suggested PATCH] EVP_DecodeUpdate 0.9.6b & 0.9.6c Seem like the original message could not made its way to the mail list so am I

RE: How do I install OPENSSL on Solaris 2.x

try www.sunfreeware.com pk -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 16, 2001 7:47 PM To: [EMAIL PROTECTED] Subject: How do I install OPENSSL on Solaris 2.x __ OpenSS

openssl 0.9.6a on Unixware 2.1.3

succeeded with installation on a similar version of Unixware or with previous versions of openssl? Thanks ! Please answer as well directly to me. Pavel Wolf Radiomobil, a.s. __ OpenSSL Project

Need some help/advice - OpenSSL + NT + PWS 4.0

connexion based on OpenSSL library ? I know it sounds stupid but I have to demonstrate the OpenSSL library abilities and the services it provides ... Please give me some advice ? Pavel Tzekov CSoft Ltd. __ OpenSSL Project