Re: Openssl command line fails to verify detached smime signature created moments earlier

2012-06-01 Thread Dr. Stephen Henson
On Thu, May 31, 2012, Jonathan Duncan wrote: > Hi, > > I've recently come across a problem verifying detached smime > signatures using openssl 1.0.1b on OSX 10.6 and 1.0.1c on cygwin. > > First I create a DSA key. > > openssl dsaparam -noout -out privatekey.pem -genkey 1024 > > Next I create a

Re: Openssl command line fails to verify detached smime signature created moments earlier

2012-06-01 Thread Jakob Bohm
I belive the smime and pkcs7 command line tools are badly broken for binary files, which has hurt some of my projects too. On 5/31/2012 9:13 PM, Jonathan Duncan wrote: Hi, I've recently come across a problem verifying detached smime signatures using openssl 1.0.1b on OSX 10.6 and 1.0.1c on cygw

Re: Openssl command line utility with FIPS 140-2 compliant module

2009-05-20 Thread Kyle Hamilton
If you build the FIPS module as documented, it will create the fipscanister.o. If you then build a version of OpenSSL 0.9.8 that has FIPS support with the appropriate command-line option to build it and link it with fipscanister.o, you have a version of the library (and commandline tools) that wil

RE: OpenSSL command line HMAC

2009-02-09 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: 07 February 2009 01:59 To: openssl-users@openssl.org Subject: RE: OpenSSL command line HMAC > > Without the quotes, if my hmac key contains a space

Re: OpenSSL command line HMAC

2009-02-09 Thread Steffen DETTMER
Hi all! * Dave Thompson wrote on Fri, Feb 06, 2009 at 20:59 -0500: > > Adding the quotes didn't work because, if I understand things > > correctly, the notion of quotes (or escaping characters with \) > > is a shell concept - hence my attempt to force the command to run > > under a shell. > > > Th

RE: OpenSSL command line HMAC

2009-02-06 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Young, Alistair > Sent: Friday, 06 February, 2009 05:17 > -Original Message- > From: owner-openssl-us...@openssl.org On Behalf Of Dave Thompson > Sent: 06 February 2009 00:29 > > > But, to complicate things further, I'm trying to invoke

RE: OpenSSL command line HMAC

2009-02-06 Thread Young, Alistair
Hi Steffen! -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Steffen DETTMER Sent: 06 February 2009 13:33 To: Everyone Subject: Re: OpenSSL command line HMAC > Hi all, Hi Alistair! > * Young, Alistair wrote on Fri,

Re: OpenSSL command line HMAC

2009-02-06 Thread Michael S. Zick
On Fri February 6 2009, Steffen DETTMER wrote: > Hi all, Hi Alistair! > > * Young, Alistair wrote on Fri, Feb 06, 2009 at 10:16 +: > > Ultimately I settled on the use of a shell script to act as an > > intermediary: > > > > #!/bin/bash > > If you can use bash you could pass the key in \xNN f

Re: OpenSSL command line HMAC

2009-02-06 Thread Steffen DETTMER
Hi all, Hi Alistair! * Young, Alistair wrote on Fri, Feb 06, 2009 at 10:16 +: > Ultimately I settled on the use of a shell script to act as an > intermediary: > > #!/bin/bash If you can use bash you could pass the key in \xNN form for $'\xNN' to avoid special characters like blanks and contr

RE: OpenSSL command line HMAC

2009-02-06 Thread Young, Alistair
Hi Dave - thanks for your reply! -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: 06 February 2009 00:29 To: openssl-users@openssl.org Subject: RE: OpenSSL command line HMAC > > From: owner-open

RE: OpenSSL command line HMAC

2009-02-05 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Young, Alistair > Sent: Wednesday, 04 February, 2009 09:52 > I seem to have some success if I place quotes around the [Linux] command line: > $ cat message.bin | openssl dgst -sha256 -hmac "`cat key.bin`" -binary > mac.bin (Don't need cat here,

RE: OpenSSL command line HMAC

2009-02-05 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 05 February 2009 12:29 To: openssl-users@openssl.org Subject: Re: OpenSSL command line HMAC > On Thu, Feb 05, 2009, Young, Alistair wrote: > >

Re: OpenSSL command line HMAC

2009-02-05 Thread Dr. Stephen Henson
On Thu, Feb 05, 2009, Young, Alistair wrote: > > Thanks Steve. Unfortunately we need to something with FIPS validation > behind it, so the standard Java crypto libraries (or something like > BouncyCastle) are out. It also means that we can't modify the OpenSSL > source so would have to add wrap

RE: OpenSSL command line HMAC

2009-02-05 Thread Young, Alistair
-Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: 04 February 2009 15:20 To: openssl-users@openssl.org Subject: Re: OpenSSL command line HMAC > On Wed, Feb 04, 2009, Young, Alistair wrote: > &g

Re: OpenSSL command line HMAC

2009-02-04 Thread Dr. Stephen Henson
On Wed, Feb 04, 2009, Young, Alistair wrote: > Well, having been trying this for a while, I'm having serious problems using > this on a Linux platform. > > I seem to have some success if I place quotes around the command line: > > $ cat message.bin | openssl dgst -sha256 -hmac "`cat key.bin`"

RE: OpenSSL command line HMAC

2009-02-04 Thread Young, Alistair
Well, having been trying this for a while, I'm having serious problems using this on a Linux platform. I seem to have some success if I place quotes around the command line: $ cat message.bin | openssl dgst -sha256 -hmac "`cat key.bin`" -binary > mac.bin But, to complicate things further, I'

Re: openssl command hanging

2008-10-15 Thread Victor Duchovni
On Wed, Oct 15, 2008 at 03:02:33PM -0400, Jason Reeder wrote: > Hello, > > I am trying to run the following openssl command on an AIX 5.1 box: > > openssl enc -a -rc2-ecb -pass pass:LGRORKYOABVCWBSXIZNNIZVHZ -in ned.log > -out ned.enc > > The command just hangs and never returns anything. The

RE: Openssl Command line in FIPS mode

2007-11-29 Thread Bill Colvin
The following footnote is on page 23 of the OpenSSL FIPS 140-2 User Guide (http://www.openssl.org/docs/fips/UserGuide-1.1.1.pdf) September 27, 2007 The OPENSSL_FIPS=1 environment variable will enable FIPS mode for an openssl command built from a FIPS capable OpenSSL distribution. B

RE: openssl command

2006-07-28 Thread Gayathri Sundar
Wonder why you need a "pfd" format!! Does "man openssl" mean anything to you? Now how could anyone respond to ur query?? First of all let us know what you want to use it for Coz openssl commands are plenty.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf O

Re: openssl command

2006-07-28 Thread Kaushalye Kapuruge
Kaushal Shriyan wrote: Hi ALL I wanted a PDF format of openssl command, Can any one explain me about openssl command with examples I mean How do i use it If you are looking for a openssl guide, please visit these pages. http://www.madboa.com/geek/openssl/ http://sial.org/howto/openssl/ Cheers

Re: OpenSSL command line error: unable to load client certificate private key file

2006-06-11 Thread deependra baniya
Torsha Banerjee <[EMAIL PROTECTED]> wrote: Is u r private key in a separate .pem file if it is not, first ensure that...Jeremiah Foster wrote:> Hello,> > I am building an OpenSSL application to process credit cards. I am> testing the server implementation with the OpenSSL command line tool> like t

Re: OpenSSL command line error: unable to load client certificate private key file

2006-06-05 Thread Torsha Banerjee
Is u r private key in a separate .pem file if it is not, first ensure that... Jeremiah Foster wrote: Hello, I am building an OpenSSL application to process credit cards. I am testing the server implementation with the OpenSSL command line tool like this; $ openssl s_client -connect secure.inc

Re: OpenSSL command line error: unable to load client certificate private key file

2006-06-05 Thread Dr. Stephen Henson
On Mon, Jun 05, 2006, Jeremiah Foster wrote: > Hello, > > I am building an OpenSSL application to process credit cards. I am > testing the server implementation with the OpenSSL command line tool > like this; > > $ openssl s_client -connect secure.incab.se/verify/server/click:443 > -cert trusted

Re: OpenSSL command line error: unable to load client certificate private key file

2006-06-05 Thread Marek Marcola
Hello, > I am building an OpenSSL application to process credit cards. I am > testing the server implementation with the OpenSSL command line tool > like this; > > $ openssl s_client -connect secure.incab.se/verify/server/click:443 > -cert trusted.cer > > The error I receive is; > unable to load

Re: openssl command loops

2002-01-17 Thread Lutz Jaenicke
On Thu, Jan 17, 2002 at 09:03:37PM +0100, Tim McClure wrote: > I am running the following command on my Linux server and it loops > (processor 99% utilized) and never returns. > > openssl genrsa -des3 -rand /dev/urandom -out tim.key 1024 > > I am trying to genrate a private key. Any suggestions

Re: openssl command line documentation

1999-05-12 Thread Lars Weber
On Tue, May 11, 1999 at 06:13:16PM -0800, Michael wrote: > Can someone point me to a more comprehensive description of the > openssl command line documentation. The stuff on the web site is not > very illuminating. I don“t think that there is such a description. But you can do something like "