Re: Building a KeyIdentifier with SSLeay/OpenSSL

1998-12-30 Thread Ben Laurie
Dr Stephen Henson wrote: > > Ben Laurie wrote: > > > > Oscar Jacobsson wrote: > > > > > > Hi all! > > > > > > From what I've managed to comprehend of draft-ietf-pkix-ipki-part1 my > > > v2 CRL needs an AuthorityKeyIdentifier. Quoting paragraph 4.2.1.2: > > > > > > (1) The keyIdentifier is com

Re: Building a KeyIdentifier with SSLeay/OpenSSL

1998-12-30 Thread Oscar Jacobsson
Dr Stephen Henson wrote: > Anyway to answer the original question I believe you should hash > public_key->length bytes of public_key->data. Thanks! Now there's just the problem of the cRLNumber extension, for which I'll need to 'wrap' an ASN1_INTEGER in an ASN1_OCTET_STRING, somehow. I've looke

Re: Building a KeyIdentifier with SSLeay/OpenSSL

1998-12-29 Thread Dr Stephen Henson
Ben Laurie wrote: > > Oscar Jacobsson wrote: > > > > Hi all! > > > > From what I've managed to comprehend of draft-ietf-pkix-ipki-part1 my > > v2 CRL needs an AuthorityKeyIdentifier. Quoting paragraph 4.2.1.2: > > > > (1) The keyIdentifier is composed of the 160-bit SHA-1 hash of the > >

Re: Building a KeyIdentifier with SSLeay/OpenSSL

1998-12-29 Thread Ben Laurie
Oscar Jacobsson wrote: > > Hi all! > > From what I've managed to comprehend of draft-ietf-pkix-ipki-part1 my > v2 CRL needs an AuthorityKeyIdentifier. Quoting paragraph 4.2.1.2: > > (1) The keyIdentifier is composed of the 160-bit SHA-1 hash of the > value of the BIT STRING subjectPubli