Re: Open SSL Symmetric Code Security with Apache2.0

2005-12-16 Thread Remo Inverardi
Ben, I'm hoping to get very basic instructions on how to create a client side certificate. What kind of certificates are you planing to hand out to your users? Do you want to trust an official certificate authority, or do you want to issue the certificates yourself? Desirably, I want to be

Re: X509_verify question

2003-03-18 Thread Remo Inverardi
> I generate an RSA-key, assign it to an EVP_PKEY structure, sign the > cert with it, than use X509_get_pubkey() to get the public key, and > verify the signature with the pubkey, X509_verify(cert, pubkey), but > it always results "-1", ASN.1 (and, therefore, X.509) signatures identify the message

Symmetric Key Handling

2001-08-24 Thread Remo Inverardi
While working on some proper C++ wrapper classes for OpenSSL, I realized that while there are EVP_PKEY structs for asymmetric keys, there is no such thing for symmetric ciphers (DES in my case). Did I just miss something while going through the source code or is using the des_* APIs the only

Abusing OpenSSL for E-Business applications?

2000-07-24 Thread Remo Inverardi
I was wondering if anyone ever used the algorithms from OpenSSL for E-Business applications beyond plain SSL? While I see most of the basic PK applications present in the toolkit (signing documents, authentication, encryption, etc), I would like to hear about your experience with the OpenSSL packa

The rsaref library

2000-07-24 Thread Remo Inverardi
After reading about the rsaref library, several questions came to mind: a) Is the rsaref library the same as Bsafe? Or is it a part of Bsafe? b) Why is it impossible to order the Bsafe library from Switzerland? I tried several times (also on the Australian RSA Site which seems to redire

RE: basic...

2000-02-25 Thread Remo Inverardi
>server.csr = Certificate signing request. This contains your server >key and is used to request your server.crt from a certification >authority. Guard this with your life also! Huh? It sure contains your public key, but your private key is not in there. Grötjes, Remo __