Re: Application segfaults after upgrade from 3.0.11 to 3.0.13

2024-07-16 Thread Victor Wagner
; 185 PKCS11_CTX_private *ctx = slot->ctx; 186 PKCS11_OBJECT_private *pubkey; 187 PKCS11_TEMPLATE tmpl = {0}; 188 CK_OBJECT_HANDLE object = key->object; 189 CK_SESSION_HANDLE session; > > On Tue, Jul 16, 2024 at 12:43 PM

Application segfaults after upgrade from 3.0.11 to 3.0.13

2024-07-16 Thread Victor Wagner
Hi! I'm using osslsigncode application on Debian 12 system (amd64) to sign stuff with RSA key stored on hardware token with PKCS11 interface. osslsigncode (https://github.com/mtrojnar/osslsigncode) seems to be well-behaved openssl application, which uses digest BIO and PKCS7 API, does no poking i

Re: [openssl-users] Checking if an EVP_PKEY* contains a private key

2015-12-21 Thread Victor Wagner
On Mon, 21 Dec 2015 21:29:03 -0800 Stephen Kou wrote: > OpenSSL has the higher-level EVP_PKEY_* functions which work > abstracts the public key cryptography algorithms. However, sometimes > a EVP_PKEY* only has a public key. How could I check if a given > EVP_PKEY* contains a private key? I co

Re: [openssl-users] Converting Bin format to X509 format

2015-07-22 Thread Victor Wagner
On Wed, 22 Jul 2015 09:17:43 + (UTC) Anirudh Raghunath wrote: > Hello, > I have used rsault -sign option to sign a text file which gives me a > binary file. I would like to convert this to X509 so that I can use > it in a ssl handshake. I understand the command: openssl x509 -inform > -in -

Re: [openssl-users] Getting certificates from smartcards

2015-07-21 Thread Victor Wagner
On Tue, 21 Jul 2015 13:58:21 + (UTC) Anirudh Raghunath wrote: > Ah okay, that clears up quite a lot of doubts. But the certificate I > want to load is a self signed certificate which has a private key > attached to it. I used the XCA application to export the > certificate-private key pair as

Re: [openssl-users] Getting certificates from smartcards

2015-07-21 Thread Victor Wagner
On Tue, 21 Jul 2015 06:58:24 + (UTC) Anirudh Raghunath wrote: > Hello, > I would like to utilize the ENGINE_load_ssl_client_cert() function to > load a certificate from my smart card. I have successfully loaded the > engine and have also tried to play around with the > ENGINE_load_private_key

Re: [openssl-users] Loading pkcs11 engine opensc without using command line

2015-07-17 Thread Victor Wagner
On Fri, 17 Jul 2015 00:10:27 + "Dr. Stephen Henson" wrote: > On Thu, Jul 16, 2015, Anirudh Raghunath wrote: > > > Hello, > > > > I want to write a program in which I can load a certificate from a > > smartcard instead of having it in a file on the client machine. In > > You may be able to

Re: [openssl-users] Not Before and Not After Date format for openssl API X509_gmtime_adj

2015-07-15 Thread Victor Wagner
On Tue, 14 Jul 2015 20:35:31 +0200 Jakob Bohm wrote: > > Does ASN1_TIME_set_string() support dates outside the > time_t range of the local libc? Why do yo need time dates outside of 64-bit integer range? Sun would explode into red giant sooner than that amount of time passes. > This is import

Re: [openssl-users] Not Before and Not After Date format for openssl API X509_gmtime_adj

2015-07-13 Thread Victor Wagner
On Mon, 13 Jul 2015 12:25:40 +0530 Nayna Jain wrote: > > Hi all, > > I am programmatically generating the self signed certificate and need > to specify the "Not Before" and "Not After" date, > > Wanted to understand what all formats are acceptable by this API ? X509_set_notAfter and X509_set_