RE: issuer_hash

2014-09-12 Thread Dave Thompson
m Sent: Thursday, September 11, 2014 06:25 To: openssl-users@openssl.org Subject: Re: issuer_hash On 11/09/2014 09:40, Steven Madwin wrote: cid:image001.gif@01CFCE32.F3F4B120 I see that the x509 command used with the –issuer_hash option returns a four byte digest value. Is there any method using Open

Re: issuer_hash

2014-09-11 Thread Jakob Bohm
On 11/09/2014 09:40, Steven Madwin wrote: I see that the x509 command used with the –issuer_hash option returns a four byte digest value. Is there any method using OpenSSL to procure the 20-byte SHA-1 digest value of the issuer name? use -fingerprint (-subject_hash and -issuer_hash are

issuer_hash

2014-09-11 Thread Steven Madwin
I see that the x509 command used with the -issuer_hash option returns a four byte digest value. Is there any method using OpenSSL to procure the 20-byte SHA-1 digest value of the issuer name? Thanks, Steve cid:image001.gif@01CC0904.0EE5C480 Steven Madwin Software QA Engineer

Re: Option -issuer_hash vs signature validation with -CAfile?

2010-11-12 Thread Jens Lechtenboerger
t;> > > The hash based filename doesn't apply to the -CAfile option: you can name the > file anything you want. > > It does apply to -CApath Thank you for your quick reply, my fault. I meant to use that option. The problem below remains, however. >> In my partic

Re: Option -issuer_hash vs signature validation with -CAfile?

2010-11-09 Thread Jens Lechtenboerger
t;> > > The hash based filename doesn't apply to the -CAfile option: you can name the > file anything you want. > > It does apply to -CApath Thank you for your quick reply, my fault. I meant to use that option. The problem below remains, however. >> In my partic

Re: Option -issuer_hash vs signature validation with -CAfile?

2010-11-09 Thread Dr. Stephen Henson
ou can name the file anything you want. It does apply to -CApath > In my particular example, > openssl x509 -in smime.pem -issuer_hash -noout > results in 9ec3a561. However, if I use that certificate (available > as /etc/ssl/certs/9ec3a561.0 on my system) then verification fails.

Option -issuer_hash vs signature validation with -CAfile?

2010-11-09 Thread Jens Lechtenboerger
Hi there, I received an SMIME certificate and want to know the correct filename to use in the command "openssl smime -verify -CAfile ..." In my particular example, openssl x509 -in smime.pem -issuer_hash -noout results in 9ec3a561. However, if I use that certificate (available a