Re: Converting ASN1_TYPE to printable string...

2007-07-11 Thread Saurabh Arora
hi chaz i worked on it sometime last year and i have written some little howto's on this. maybe it could help you http://tanish2k.googlepages.com/asn1any.pdf rgrds saurabh On 7/12/07, Chaz. <[EMAIL PROTECTED]> wrote: I was wondering if anyone knows how to convert an ASN1_TYPE to a printable

RSAES-OAEP Support

2007-03-08 Thread Saurabh Arora
Hi does the current/nightly build of openssl support RSAES-OAEP key transport algorithm acc. to RFC 4055?? I see a file in openssl/crypto/rsa directory "rsa-oaep.c". but this algo is conformed to RFC 2437. or if sumone is working on the same, please can you give some pointers. thanks Saurabh

Re: Archives of this mailing-list?

2006-12-10 Thread Saurabh Arora
there are many archives.. at various locations the best searchable wud be openssl at google groups. On 12/11/06, Olivier Mascia <[EMAIL PROTECTED]> wrote: Are there searchable archives of this mailing-list? I'd like to look them up before posting questions. Thanks, -- Olivier Mascia __

Re: Attribute Certificate with OpenSSL?

2006-09-14 Thread Saurabh Arora
On 9/14/06, Mouse <[EMAIL PROTECTED]> wrote: First - thank you! At least it was something. I went through the Web sit and the code distro itself. Web site shows how to use their command x509AT. Great. There's no AT-related README though, no documentation, no edits or patch-format changes. Thus

Re: Attribute Certificate with OpenSSL?

2006-09-13 Thread Saurabh Arora
On 9/14/06, Mouse <[EMAIL PROTECTED]> wrote: Did anybody use OpenSSL successfully for creating and processing Attribute Certificates? very much .. chek dis link.. http://openpmi.sourceforge.net/ Is there any helpful HOWTO or TFM? download openssl distro(patched to support AC) frm d same li

Re: Nick Chi/Asia Division/Manulife is out of the office.

2006-09-10 Thread Saurabh Arora
is this a desperate attempt to realise he is "indeed out of office" OR auto-mailer malfunction OR new to openssl mailing group ? it wil be interesting to find out when he returns ! ;-) On 9/11/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I will be out of the office starting 09/11/2006 an

Re: openssl.cnf file and custom tag values.

2006-07-27 Thread Saurabh Arora
hi you need to add the entry of your custom tags under crypto/objects.txt and make update the openssl environment. best tanish On 7/27/06, Paweł Tatera <[EMAIL PROTECTED]> wrote: Hi. Is it possible to put custom tags inside the openssl.cnf file? I'm thinking here about generating a certif

Re: confusion about digital signatures

2006-06-23 Thread Saurabh Arora
hi On 6/23/06, hicham <[EMAIL PROTECTED]> wrote: hello I'm having some confusion about digital signatures, in this web site "http://www.youdzone.com/signature.html"; gives a nice examle of what 's a digital signature? Here what I understood : bob got one private key and a public key, both ke

Re: obj_mac.num

2006-06-23 Thread Saurabh Arora
hi first - follow the same thread of queries.. use reply instead of creating a separate thread. second - wot exactly you want to do ? so we can reply in that context. in case you are just understanding openssl, then i wud suggest you to first learn about OID (Object Identifiers) before mining th

Re: Object_mac.h,objects.txt

2006-06-23 Thread Saurabh Arora
hi i hope u read objects.txt.README still.. objects.txt is a way to tell openssl to use new OIDs,their respective names in openssl environment. so u add a OID, along with its short/long name in objects.txt then u make update openssl it updates environment, including obj_mac.h you dont need to

Re: asn1parse error

2006-06-19 Thread Saurabh Arora
hello Marek thanks.. it works now tanish On 6/19/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > > Hello, > > > i am not able to use asn1parse on my certificate. > > > > > > i generated the certificate by : > > > - generating request > > > - signing requ

Re: asn1parse error

2006-06-19 Thread Saurabh Arora
On 6/19/06, Marek Marcola <[EMAIL PROTECTED]> wrote: Hello, > i am not able to use asn1parse on my certificate. > > i generated the certificate by : > - generating request > - signing request by ca > > also i used CA.pl to do the same task. > > but in both cases, when i use asn1parse, it gives me

asn1parse error

2006-06-19 Thread Saurabh Arora
hi all i am not able to use asn1parse on my certificate. i generated the certificate by : - generating request - signing request by ca also i used CA.pl to do the same task. but in both cases, when i use asn1parse, it gives me the following error : # ./open

Re: 1095 bit key ??

2006-06-08 Thread Saurabh Arora
+JPeOSg5w7wYK4LDluUOrbzx AkUEIV5HVRLosCFMmPbyrQOfiHNO7Cg13cyxTJ/l2qigtYn82dpQg53P9OWt0rBg Irh4MVMHaJKjL+l4UwEmNLg+4Yom0to= -END RSA PRIVATE KEY- On 6/8/06, Victor Duchovni <[EMAIL PROTECTED]> wrote: On Thu, Jun 08, 2006 at 06:56:33PM +0200, Saurabh Arora wrote: > in else case heres my pr

Re: 1095 bit key ??

2006-06-08 Thread Saurabh Arora
hi now on regeneration and changing the key is working fine. so may be i misspelt and incidently added 1095 (if thats the case .. then i m sorry for being silly) in else case heres my private key : -BEGIN RSA PRIVATE KEY- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,A7C341355547B565

1095 bit key ??

2006-06-08 Thread Saurabh Arora
hi all i generated a self signed certificate and i found this : Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1095 bit) Modulus (1095 bit): 4b:e9:e4:a6:3a:30:bc:0b:99:56:c6:b5:19:da:73: 79:

Re: OID decoding problem

2006-06-07 Thread Saurabh Arora
On 6/7/06, Enis Arif <[EMAIL PROTECTED]> wrote: Hello, I have a problem decoding certain OIDs with openssl. I ran into this while parsing some certificates with custom extensions. After some testing, I noticed that OIDs like 3.3.3.33 or 5.5.5.5.55 are not correctly decoded by asn1parse. did yo

certificate subject DN

2006-06-05 Thread Saurabh Arora
hi all i am generating a self-signed certificate. is there a way to keep subject distinguished name EMPTY ?? best tanish __ OpenSSL Project http://www.openssl.org User Support Mailing List

RSAES-OAEP support

2006-06-01 Thread Saurabh Arora
hi all does openssl latest build support RSAES-OAEP algorithm for public key info ?? or even nightly build ?? regards tanish __ OpenSSL Project http://www.openssl.org User Support Mailing List

Re: ASN1_ANY

2006-05-31 Thread Saurabh Arora
On 5/31/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Tue, May 30, 2006, Saurabh Arora wrote: > On 5/29/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: > > , but i am unable to find a way for decoding . > can you tell the way.. how to check the type V_ASN1_SEQ

Re: ASN1_ANY

2006-05-30 Thread Saurabh Arora
On 5/29/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Mon, May 29, 2006, Saurabh Arora wrote: > hi all > > heres another lead , but with few problems : > > using this function we can set the type : > - > void ASN1_TYPE_set(a,type,value) > --

Re: ASN1_ANY

2006-05-29 Thread Saurabh Arora
i have to convert ATTRIBUTE1 and 2 into octet strings using i2d functions to set the type ?? On 5/29/06, Saurabh Arora <[EMAIL PROTECTED]> wrote: hi all heres one lead .. which makes me to do r2i but NOT i2r ATTRIBUTE *attr; ATTRIBUTE1 *attr_1; attr->type = OB

Re: ASN1_ANY

2006-05-29 Thread Saurabh Arora
field values of attribute 1 */ if (!sk_ASN1_TYPE_push(attr->value,attr1)) goto err; return attr; --- but i am still unable to print in i2r function ?? On 5/29/06, Saurabh Arora <[EMAIL PROTECTED]> wrote: hi i am having a problem in dealing ASN1_ANY implemntation. i need t

ASN1_ANY

2006-05-29 Thread Saurabh Arora
hi i am having a problem in dealing ASN1_ANY implemntation. i need to put a wrapper of ATTRIBUTE type for two attributes(ATTRIBUTE1 and 2) in my X509V3 extension : -- EXTENSION :: = SEQUENCE SIZE(1..MAX) OF ATTRIBUTES ATTRIBUTE :: = SEQUENCE {

Re: libcrypto.a

2006-04-27 Thread Saurabh Arora
-- myopenssl.cnf [v3_ca] customExtension = DER:02:03 and now i run the self-sign cert command , it compiles succesfully and i can see my extension in the certificate. what else shud i do, to make my custom extension a purely standard extension ?? ne help?? On 4/26/06, Saurabh Arora &l

libcrypto.a

2006-04-26 Thread Saurabh Arora
hello how can we re-build libcrypto.a ??i found a file in [crypto] dir - "crypto-lib.com" which is used to create LIBCYPTO.OLB (may be for windows version), similarly is there a way to re-build libcrypto.a ??ok heres my purpose to re-build it :i am trying to add my custom extension under the stand

Re: Need help for X509

2006-04-19 Thread Saurabh Arora
hithere is no error in mkreq.c code.its just the lack of documentation for naive users.heres the commands wch worked for me :-gcc mkreq.c -o mkreq.o -lcrypto -ldl - means use 2 libraries - lcrypto , -ldl (although the documentation shows : only lcrypto )On 4/19/06, Namrata P

Re: extensions-attributes-on the fly

2006-03-24 Thread Saurabh Arora
On 3/24/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Fri, Mar 24, 2006, Saurabh Arora wrote:> hi>> problem:> -> - I want to add custom attributes in the standard x509 extensions, without> patching the source code. > - I want to add new extensi

extensions-attributes-on the fly

2006-03-24 Thread Saurabh Arora
hiproblem:-- I want to add custom attributes in the standard x509 extensions, without patching the source code.- I want to add new extension along with standard x509 extension, without patching the source code. say, adding an attribute :attribute ::= SEQUENCE {type    attributetype ,val

how to add attribute to x509 extension

2006-03-23 Thread Saurabh Arora
hi i am using openssl toolkit and not custom source code to the following operation : - i have to add a custom attribute say : CertVersionID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING issuerKeyHash OCTET STRING serialN

how to add attribute to x509 extension

2006-03-22 Thread Saurabh Arora
hi i am using openssl toolkit and not custom source code to the following operation : - i have to add a custom attribute say : CertVersionID ::= SEQUENCE { hashAlgorithm AlgorithmIdentifier, issuerNameHash OCTET STRING issuerKeyHash OCTET STRING seria