segfault with cryptodev in openssl 1.0.0g

2012-02-20 Thread Frank
quot;, size=16382) at bf_buff.c:494 #15 0xb6ecdcb4 in BIO_gets (b=0x99bb8, in=0x95bb0 "N", inl=16383) at bio_lib.c:313 #16 0x000391f0 in ?? () #17 0x000391f0 in ?? () Backtrace stopped: previous frame identical to this frame (corrupt stack?) Is this a bug in the c

segfault with cryptodev in openssl 1.0.0g

2012-02-20 Thread Frank
382) at bf_buff.c:494 #15 0xb6ecdcb4 in BIO_gets (b=0x99bb8, in=0x95bb0 "N", inl=16383) at bio_lib.c:313 #16 0x000391f0 in ?? () #17 0x000391f0 in ?? () Backtrace stopped: previous frame identical to this frame (corrupt stack?) Is this a bug in the c

RE: segfault with cryptodev in openssl 1.0.0g

2012-02-26 Thread Frank
erstand it wouldn't work with either openbsd or linux cryptodev. The attached patch fixes the issues found and makes some optimizations for cryptodev-linux (without sacrificing openbsd cryptodev support)." Regards, Frank > -Original Message- > From: owner-openssl-us...@openssl

compile problem in latest snap shot

2004-04-01 Thread Frank
Just grabed the lastest snap shot of openssl Got a compile problem that probably needs to be addressed. In file x509_vfy.h the prototype for X509_policy_check() uses a reserved word explicit int X509_policy_check(X509_POLICY_TREE **ptree, int *explicit, Thanks,. Frank

Problem with newer snapshots

2004-05-11 Thread Frank
penssl now. I haven't narrowed what call I make does this as of yet. Anyone else have such a problem? Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List

effient ways to sign and verify signatures using openssl

2004-05-24 Thread Frank
e data, do I need to call these functions to cleanup after wards? I think I do but want to make sure. Thanks, Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List

Example of signing/verifing using ECDSA?

2004-05-24 Thread Frank
Does any one have any examples of signing and verifying data using Elliptic Curve DSA? I have something working with DSA but have been asked to look at ECDSA. Can you use the same certs also? If not how do you create the certs too. Thanks, Frank

Re: Example of signing/verifing using ECDSA?

2004-05-24 Thread Frank
C code for signing/verify, command line for cert creation Thanks, Frank Nils Larsch wrote: Frank wrote: Does any one have any examples of signing and verifying data using Elliptic Curve DSA? I have something working with DSA but have been asked to look at ECDSA. Can you use the same certs also

OpenSSL for PDA's

2004-07-01 Thread Frank
r our application to work. Thanks, Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Examples of RSA/DSA signing of data

2002-11-11 Thread Frank
erify as they need lots of information. I think the biggest issue I have is how to populate the RSA structure with the private & public key from the cert. Thanks, Frank __ OpenSSL Project

Re: Examples of RSA/DSA signing of data

2002-11-13 Thread Frank
Great, thanks! Nils Larsch wrote: > Hi Frank, > > Frank wrote: > > Marcus, > > Thanks. But that example is a little confussing. First what type of > > signature are you doing, RSA, DSA? > > If your are using the EVP_Sign{Init|Update|Final} functions (as in

Re: Elliptic Curve cryptography

2003-06-02 Thread Frank
Well I'm fumbling my way through this right now myself. Nils is the expert (he wrote it). but look in the crypto/ecdsh directory and look at the test programs. They might help. Frank "Henrik N. Rask" wrote: > I am trying to figure out exactly how much support for elliptic cu

Re: EC point multiplication

2003-06-02 Thread Frank
t? all I know about them is that they are BIGNUM's. I need to do 2 things, multiply 2 points together and add two points together. Thanks, Frank Nils Larsch wrote: > Hi Frank, > > Frank wrote: > > Nils, > > Thanks for the information. Had a couple more questio

ECC ectest.c, curve attributes

2003-06-03 Thread Frank
hing? Thanks, Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

[Fwd: ECC ectest.c, curve attributes]

2003-06-03 Thread Frank
Sorry, figured it out. NIST listed P as an int instead of a hex like the others!!! Original Message Subject: ECC ectest.c, curve attributes Date: Mon, 02 Jun 2003 10:07:36 -0400 From: Frank <[EMAIL PROTECTED]> To: Openssl user grp <[EMAIL PROTECTED]> I was check

Re: EC point multiplication

2003-06-04 Thread Frank
#x27;m really guessing here, Is the 3rd parameter the order of the curve (i.e. n or Z in ectest.c)? If not what is it? Thanks, Frank Nils Larsch wrote: > Frank wrote: > > Yes, MQV. > > To implement MQV (according to "An Efficient Protocol for > Authenticated Key Agreement

Test vectors for OpenSSL ECC imp

2003-06-18 Thread Frank
these test vectors would supply the private/pulic keys to use and what the group key would be after the calculations. Thanks, Frank __ OpenSSL Project http://www.openssl.org User Support Ma

Certificate, encoding and signing questions.

2003-09-17 Thread Frank
o how is that done? Then how is it read in? I have only used PEM type functions to read in a x509 cert/private keys. Signing data - can I use the sam EVP functions that I did before to sign with RSA to do DSA? Any help would be appraised.

Re: RE : Certificate, encoding and signing questions.

2003-09-17 Thread Frank
better working with PEM format and converting later when needed with > openssl x509 -inform PEM -outform DER -in ... -out ... > > Barbara Post > > -Message d'origine- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la part de Frank > Envoyé : mercredi 17

DSA signatures

2003-09-19 Thread Frank
2. If it will, then how do I sogn the data using the dsa(3) functions or will the EVP funtions I used for signing RSA work too (i.e see nothign that was RSA specific). i.e. EVP_SignInit(); EVP_SignUpdate(); EVP_SignFinal(); Thanks

Converting PEM cert to DER format

2003-09-19 Thread Frank
Ok, I got a few pieces meal answers (and no answers) here so I wanted to recap to make sure I have it all straight. Certificates - Even though you may wish to send the cert DER encoded over the network, it is advisable to create and work with it while PEM encoded, correct? Now all the examples I

Re: Converting PEM cert to DER format

2003-09-19 Thread Frank
that back in on the other side right into a x509 structure is possible without having to write it to the HD and read it ack in. Thanks, Frank Massimiliano Pala wrote: > Frank wrote: > > Ok, I got a few pieces meal answers (and no answers) here so I wanted to > > recap to mak

Re: DSA signatures

2003-09-19 Thread Frank
Nils Larsch wrote: > On Friday 19 September 2003 15:28, Frank wrote: > > What I've seen so far with openssl is that there seems to be 10,000 ways > > to do the same thing so I want to make sure I understand how to do a DSA > > signature. My questions are as follows

Re: Dodgy "Microsoft fix" emails

2003-09-22 Thread Frank
[mailto:[EMAIL PROTECTED]]On Behalf Of Michael Sierchio Sent: Sunday, September 21, 2003 11:39 PM To: [EMAIL PROTECTED] Subject: Re: Dodgy "Microsoft fix" emails Sorin Marti wrote: Frank wrote: es, tons of them 300+, please someone help

Converting public key from DER to Interanl and back again

2003-09-22 Thread Frank
the EVP_PKEY_missing_parameters() and it fails. Also when I save the pulickey with PEM_write_PUBKEY() is it much smaller then the original. Any examples/thoughts? Thanks, Frank __ OpenSSL Pro

Re: Dodgy "Microsoft fix" emails

2003-09-22 Thread Frank
"Microsoft fix" emails Sorin Marti wrote: Frank wrote: es, tons of them 300+, please someone help Get a good OS! With Linux / Unix you never will have such probs... Facile and wrong. My ma

Re: DSA signatures

2003-09-22 Thread Frank
signing with RSA certs Thanks, Frank Nils Larsch wrote: On Friday 19 September 2003 15:28, Frank wrote: What I've seen so far with openssl is that there seems to be 10,000 ways to do the same thing so I want to make sure I understand how to do a DSA signature. My questions a

Re: Converting public key from DER to Interanl and back again

2003-09-22 Thread Frank
I have a DSA key. No I havn't. Thought the same ones worked forboth, but I guess not. Thanks, Frank Dr. Stephen Henson wrote: On Mon, Sep 22, 2003, Frank wrote: Any one have an example on how to DER encode a public key and then convert it back again? I believe yo

Re: Dodgy "Microsoft fix" emails

2003-09-22 Thread Frank
Finally somebody with a clue!!!  I can't effetely stop this crap unless my ISP gives my root/admin on the mail server  Even with cable modem It takes a few minuets to down load all these virus!!!  The ISP's/mail server admin's  need to stand up and  so there job's!!! Cory C. Al

Re: DSA signatures

2003-09-22 Thread Frank
Steve,     That did it!! Thanks a bunch Frank Dr. Stephen Henson wrote: On Mon, Sep 22, 2003, Frank wrote: Nils, Humm I tried this and got a error during signing 1436:error:0606B06E:digital envelope routines:EVP_SignFinal:wrong public key typ e:p_sign.c:101: The

Re: EVP_PKEY_size() ??? what does it return?

2003-09-23 Thread Frank
Steve, thanks. My understanding is that DSA signatures should be 40bytes not 48 (i.e. 2* the length of q (160 bits) accoridng to the standard).  Can you or someone else explain the difference ? Thanks, Frank Dr. Stephen Henson wrote: On Tue, Sep 23, 2003, Frank wrote: First I

EC_POINT_point2oct() problem

2003-10-09 Thread Frank
some extra stuff here? Thanks, Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL

Re: Locating AES GCM & GMAC Code under OpenSSL

2011-03-02 Thread Frank Morgner
ncing to openssl stable, because everything is already included in openssl HEAD. Anyway, since I am using CMAC, I need the patch myself. You can find a more recent patch to stable here: http://openpace.svn.sourceforge.net/websvn/openpace Greets, Frank. pgp0bQsyVFW4o.pgp Description: PGP signature

Re: (DH) how to send dh->pub_key to peer

2011-03-25 Thread Frank Morgner
Hi! > How to serialized dh->pub_key ? I know that i2d_DHparams(const_dh, &dhbuf); > serialize dh structure pointed by const_dh but I did not find a function to > serialize just dh->pub_key Use BN_bin2bn. Greets, Frank. pgp4g55TCrPOo.pgp Description: PGP signature

Re: (DH) how to send dh->pub_key to peer

2011-03-25 Thread Frank Morgner
erialized ? No. Please get familiar with the man pages. See for example http://www.openssl.org/docs/crypto/DH_generate_key.html http://www.openssl.org/docs/crypto/BN_bn2bin.html Greets, Frank. pgpkx1MbnNDuu.pgp Description: PGP signature

Re: Convert ASN1_OCTET_STRING contents to ASN1 Sequence

2011-09-22 Thread Frank Morgner
r approach would be to strip tag and length from the octet string with ASN1_get_object. Then use ASN1_put_object to wrap the data into a sequence. Cheers, Frank. pgpbsvk6I8Aoe.pgp Description: PGP signature

Re: [openssl-users] Support for certificates other than the X509?? standard Reg.

2012-02-01 Thread Frank Morgner
Hi! > > Out of my head, there's ISO7816-6 certificates, used at least in eID > > projects (EAC passports). We built support for Card Verifiable Certificats (CV-Certificates) into OpenSSL: http://openpace.sourceforge.net/ This format is used in the EAC passports. Cheers, Frank

sslv3 alert certificate unknown

2009-05-29 Thread Vyncke, Frank
up on the JAVA side ? I am using JAVA JRE 1.6 Thanks in advance. Frank __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated

Re: sslv3 alert certificate unknown

2009-06-02 Thread Frank Vyncke
Dave, This explains the problems I have. Indeed, it appears I need to install my home generated certificate in a TrustManager. I indeed get the SSL exception on the java side. Thanks for the pointer Frank On 02/06/2009 03:07, "Dave Thompson" wrote: >> From: owner-openssl-u

OpenSSL.NET version 0.4 released

2009-09-02 Thread Frank Laub
cense: git://openssl-net.git.sourceforge.net/gitroot/openssl-net/openssl-net Preliminary support for mono has been added and has been tested on debian x64 and Mac OS X 10.5. A big thanks goes out to Ben Henderson for contributing the wrapper for the SSL library. Enjoy, -Frank

[ANNOUNCE] OpenSSL.NET version 0.4 released

2009-09-02 Thread Frank Laub
A big thanks goes out to Ben Henderson for contributing the wrapper for the SSL library. Enjoy, -Frank __ OpenSSL Project http://www.openssl.org User Support Mailing List

RSA_verify, algorithm mismatch

2009-09-14 Thread Frank Mcgeough
I'm using openssl on a Symbian device. I load in my own certificate file and am able to verify my server connection. However, on a newer device ( brand new ) there has been a change in what is provided in the openssl dll (I can see a byte level difference) and now I am getting an error when

Re: RSA_verify, algorithm mismatch

2009-09-14 Thread Frank Mcgeough
On Mon, Sep 14, 2009, Frank Mcgeough wrote: I'm using openssl on a Symbian device. I load in my own certificate file and am able to verify my server connection. However, on a newer device ( brand new ) there has been a change in what is provided in the openssl dll (I can see a byte

OCSP Response problem

2010-07-09 Thread Wockenfuß , Frank
nRet is 0 and pOCSPResponse is NULL. The connect and all before seems to go well. What could be the problem for this? Best regards Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User S

OCSP Response problem

2010-07-11 Thread Wockenfuß , Frank
nRet is 0 and pOCSPResponse is NULL. The connect and all before seems to go well. What could be the problem for this? Best regards Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User S

AW: CMS usage with OpenSSl

2008-04-01 Thread Wockenfuß , Frank
I'm wrong a someone can tell me the right version, but this is how we did it. Best regards Frank Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von shankar ks Gesendet: Dienstag, 1. April 2008 11:36 An: openssl-

Problem after removing memory leak

2008-04-01 Thread Wockenfuß , Frank
t what could be wrong? The destructor is called at least once before the constructor is called again and X509_verify_cert is called. Thanks in advance. Frank Wockenfuß __ OpenSSL Project http://

Questions about the openssl "req" option

2008-04-02 Thread Frank Wendel
= mysecret ), to higher the security level. Thank you for your patience and for your very qood work! Kind regards, Frank Wendel

AW: Problem after removing memory leak

2008-04-02 Thread Wockenfuß , Frank
Thank you for that hint. I will try to rebuild the class as singleton. This could help, but isn't really nice. Best regards Frank > Wockenfuß wrote: > > Hi all, > > > > I have written a class in C++ to easily access functions > from OpenSSL from our products.

AW: Problem after removing memory leak

2008-04-02 Thread Wockenfuß , Frank
sation are called and afterwards someone constructs and initialises again and gets the error. So now everything works fine. Thanks to all for the help. Frank > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag von > Steffen DETTMER &

Check Certificate Chain problem

2008-04-18 Thread Wockenfuß , Frank
cate purpose'. Anyone an idea? I use OpenSSL 0.9.8e with Visual C++ 2005. Best regards Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User Support Mailing List

Parsing certificate to find CRL distribution points

2008-05-06 Thread Wockenfuß , Frank
distribution points out of the X509 extensions? Best regards Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List

AW: Parsing certificate to find CRL distribution points

2008-05-06 Thread Wockenfuß , Frank
Hi Patrick, Thank you for that hint. I'll have a look at it. Best regards Frank Wockenfuß > -Ursprüngliche Nachricht- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag von > Patrick Patterson > Gesendet: Dienstag, 6. Mai 2008 15:05 > An: op

question regarding ./config no-idea no-mdc2 no-rc5

2008-10-14 Thread Frank Zhou
Hi There, I am building a web service client application that uses openSSL for web service https/SSL communication. In order to avoid the patent issue for the portion of openSSL, I build the openSSL libraries myself using ./config no-idea no-mdc2 no-rc5. All is working fine as far as I am c

Declined: OWASP Hartford: February 2009 (Open Web Application Security Project)

2008-12-14 Thread Frank Pirillo
0 SUMMARY:Declined: OWASP Hartford: February 2009 (Open Web Application Secur ity Project) UID:04008200E00074C5B7101A82E0086015A2316121C901000 010008755599A2D01DB488364749052F323A6 ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=DECLINED;RSVP=TRUE;CN="Frank Pirillo

Re: asn1 encoding routines error: x509_extension, from ssl3_get_server_cert

2013-08-07 Thread Frank Migge
OID (1.2.840.113549.1.9.15 per RFC4262), but it seems there is no handling for the ASN.1 sequence underneath. There is a related http://www.mail-archive.com/openssl- us...@openssl.org/msg58514.html">old thread from 2009 with the recipe for manually adding the SMIME Capabilities to open

Re: multi-byte subject DN display

2013-09-12 Thread Frank Migge
UTF-8 output. Hope this helps in the right direction, Frank From: Bin Lu Sent: Thursday, September 12, 2013 9:44 AM To: openssl-users@openssl.org Subject: FW: multi-byte subject DN display Re-post … as nobody responded. If I use “–nameopt utf8” option, the output of the subject is empty even

Re: odd error for ECDSA key in REQ.

2020-08-07 Thread Frank Migge
QQ5M5xopaMzFDWSwKNtBT8x069u0Y+1 > T0dHud/G22q8cVVh8sVcpLUortLxxesEXCddpx/EeuxP+MN/RymHTMrjoAAwCgYI > KoZIzj0EAwIDSQAwRgIhAO+K+TFCdYxQg7aT+B3wIVa6CCYxM/mL4/WHSrwXujJy > AiEA7UsbQT/YRKaFDPn/U9jdrJaUmKsqKJvGwN7YVaMGdeo= > -END CERTIFICATE REQUEST- -- Frank Migge http://fm4dd.com | pub...@frank4dd.com

PEM file line size

2021-02-24 Thread Frank Liu
openssl 1.1.1j. Does anybody know the bug or PR when that was fixed? Thanks! Frank

Re: PEM file line size

2021-02-25 Thread Frank Liu
gt; > It‘s not a bug, it‘s undefined behaviour. > > On Wed, 24 Feb 2021 at 20:20 Frank Liu wrote: > >> Hi, >> >> I noticed openssl 1.0.1 and 1.0.2 can't read a certificate PEM file with >> base64 line size of multiples of 1265. Any other line size seems to be

Re: PEM file line size

2021-02-25 Thread Frank Liu
://tools.ietf.org/html/rfc1421>].“ > > > It‘s not a bug, it‘s undefined behaviour. > > On Wed, 24 Feb 2021 at 20:20 Frank Liu wrote: > >> Hi, >> >> I noticed openssl 1.0.1 and 1.0.2 can't read a certificate PEM file with >> base64 line size of mult

Segfault in 1.0.1j BIO_reset() compiled with no-ssl2 no-ssl3

2014-10-16 Thread Frank Schmirler
ne 641 (I'm using some patches, so line numbering from my backtrace is slightly off): https://github.com/goochjj/pound/blob/stage_for_upstream/v2.7b/http.c#L641 Maybe someone could take a look... Thanks, Frank __ OpenSSL Project

Re: [PATCH] Segfault in 1.0.1j BIO_reset() compiled with no-ssl2 no-ssl3

2014-10-17 Thread Frank Schmirler
On Thu, 16 Oct 2014 16:33:28 +0200, Frank Schmirler wrote > I get the following segfault when trying to send an SSLv3 request to > the reverse proxy "pound", running on openssl-1.0.1j with SSLv2/3 disabled: > > Program received signal SIGSEGV, Segmentation fault. >

Re: [openssl-users] Regarding the security of the keys

2015-07-22 Thread Frank Thater
-HSM supports key replication to build some kind of load-balancing cluster where all HSMs share the same key. Depending on the load of the server these "small" HSMs might be suitable. Otherwise you should spent some money for a complete and full HSM solution. Regards, Frank Am 21.07.201

Re: [openssl-users] d2i_RSAPrivateKey not working on a private key

2015-10-09 Thread Frank Migge
blem? d2i_RSAPrivateKey() is not reading PEM, just making sure... Best wishes, Frank Migge David Lobron <mailto:dlob...@akamai.com> Saturday, October 10, 2015 12:33 AM Hello openssl people, I am trying to read a private key of a certificate into memory using d2i_RSAPrivateKey. I'm able to read

Re: [openssl-users] d2i_RSAPrivateKey not working on a private key

2015-10-13 Thread Frank Migge
ely, building a test case around d2i_RSAPrivateKey() to see if the DER format is valid, e.g. converting the PEM key into DER using the OpenSSL commandline, and binary-compare with the programs DER data. openssl rsa -inform PEM -in test-key.pem -outform DER -out key.bin Best Wishes, Frank

Re: [openssl-users] Certificate Chain Verify Error

2016-02-01 Thread Frank Migge
Hi Nicholas, Not calling OpenSSL_add_all_algorithms(); at the beginning could cause it? Cheers, Frank Nicholas Mainardi <mailto:mainardinicho...@gmail.com> Monday, February 01, 2016 8:57 PM I wrote this small program which takes as input X509 certificates, base64-encoded, parse th

Re: [openssl-users] Missing documentation

2016-11-08 Thread Frank Migge
11 ff): case SSL_CTRL_SET_TLSEXT_HOSTNAME: returns 1 on success, and 0 on failure which also writes the cause to the SSL error handler. Best wishes Frank <mailto:pub...@frank4dd.com><https://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campaign=reach> -- openssl-users ma

Re: [openssl-users] RSA Key generation time

2017-01-28 Thread Frank Migge
00Mhz RAM), your e500 PowerPC can't be to far behind. Your numbers seem to be off by a magnitude. You mentioned using a external HW RNG, could that be it? Cheers, Frank Jakob Bohm <mailto:jb-open...@wisemo.com> Wednesday, January 25, 2017 1:10 AM I'm afraid you will have to look at

Re: [openssl-users] Doubt regarding O-SSL and setting the duration of certificates

2017-09-12 Thread Frank Migge
32bit systems. It is indirectly related to OpenSSL when system time is used, converted to or from. Particularly in IOT/ICS industry situations with scaled down CPUs, long device lifespans and support requirements, functional validation with future time settings would definitely be a good idea on the

Re: [openssl-users] TLS Error in FreeRadius - eap_tls: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed

2018-01-19 Thread Frank Migge
t; I have some problems with new Cisco CAPF certs What is the authenticating device? Cisco IP phone? Cheers, Frank -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] TLS Error in FreeRadius - eap_tls: ERROR: Failed in __FUNCTION__ (SSL_read): error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed

2018-01-19 Thread Frank Migge
rst. I am not fully sure, but believe that Extended Key Usage should *not* be there. Frank > Frank Migge <mailto:f...@frank4dd.com> > Saturday, January 20, 2018 11:29 AM > Hi Robert, > >>> error 26 : unsupported certificate purpose > > It seems the cert gets decl

Re: [openssl-users] Combining certificate and key in PEM format into a P12 file without knowing the key password?

2018-02-20 Thread Frank Migge
code your own PKCS12 unpack program, just for this specific use case. I may be wrong but to me it looks doable, just a *lot* of work. Frank > Tobias Dussa (SCC) <mailto:tobias.du...@kit.edu> > Tuesday, February 20, 2018 9:15 PM > Hi, > > On Tue, Feb 20, 2018 at 12:23:14PM +0100

Description of the X509_STORE object

2006-10-24 Thread Frank Büttner
In the doc of SSL_CTX_set_cert_store I only found the hint, that the doc of the X509_STORE object are not ready. But I will connect my own to OpenSSL. When will be the doc of the X509_STORE object ready, so that I can continue my library? Thanks Frank smime.p7s Description: S/MIME Cryptographic

Filling a PKCS#7 structure

2007-06-19 Thread Wockenfuß , Frank
plete CMS file? Hope someone can help me or send me some sample code. Thanks in advance, Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User Support Mailing Listopen

Detached Signature

2007-07-30 Thread Wockenfuß , Frank
Hello everybody, I want to save a detached signature and I don't know what structure to use and how to fill it. The signature is created by a smartcardterminal and I want to save it in a standardized way for later verification. Any suggestions? Frank Wock

AW: Detached Signature

2007-07-30 Thread Wockenfuß , Frank
Hi, thanks for the hint. Do I always need to use a private key to create a PKCS7 format? If yes, how do I decrypt the PKCS7 format on the verification side? Frank Wockenfuß _ Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Hien Truong Thu Gesendet: Montag, 30. Juli

AW: Detached Signature

2007-07-30 Thread Wockenfuß , Frank
I will try it and ask again if there are more questions. Thank you Frank Wockenfuß _ Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Hien Truong Thu Gesendet: Montag, 30. Juli 2007 13:32 An: openssl-users@openssl.org Betreff: Re: Detached Signature Hi, Yes, you

RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
to the structure are read from a smartcard. Thanks in advance Frank Wockenfuß __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@open

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
ave to use the public key. This is only for verification purpose. Frank -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Schwartz Gesendet: Mittwoch, 1. August 2007 10:22 An: openssl-users@openssl.org Betreff: RE: RSA_public_decrypt problem &g

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
It should be pRSA->n = BN_bin2bn( pPublicModulus, nPublicModulusLength, NULL ); pRSA->e = BN_bin2bn( pPublicExponent, nPublicExponentLength, NULL ); Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Wockenfuß, Frank Ge

AW: AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
I've tested it and it looks good. I get back the values I have set. Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Marek Marcola Gesendet: Mittwoch, 1. August 2007 11:18 An: openssl-users@openssl.org Betreff: R

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
Yes, I'm trying to verify a RSA signature. What can I do to verify it correctly? Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Schwartz Gesendet: Mittwoch, 1. August 2007 11:01 An: openssl-users@openssl.org Betref

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
I understood, that n should be the modulus and e the exponent. pRSA->n = BN_bin2bn( pPublicModulus, nPublicModulusLength, NULL ); pRSA->e = BN_bin2bn( pPublicExponent, nPublicExponentLength, NULL ); Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
This is the first call in the engine and the set of n and e doesn't raise any error (I've just tested it). The error occurs on RSA_public_decrypt. Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Schwartz Gesendet

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
I do ENGINE_load_builtin_engines(); before calling the decrypt function. There is no other engine attached, I use the standard engines from OpenSSL 0.9.8e. Are there other way to verify the signature with only the public key? Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
I tried it and now I get 119 (RSA_F_RSA_VERIFY). Does this mean that it just failed. How can I get extended error informations? Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Schwartz Gesendet: Mittwoch, 1. August 2007 13

AW: RSA_public_decrypt problem

2007-08-01 Thread Wockenfuß , Frank
Same mistake as before: 119 means RSA_R_WRONG_SIGNATURE_LENGTH Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von David Schwartz Gesendet: Mittwoch, 1. August 2007 13:41 An: openssl-users@openssl.org Betreff: RE: RSA_public_decrypt

AW: AW: AW: RSA_public_decrypt problem

2007-08-02 Thread Wockenfuß , Frank
Thanks, This test programs works fine, so I think I need to check my signatures (as David Schwartz mentioned too). Best regards, Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Marek Marcola Gesendet: Donnerstag, 2. August

AW: AW: AW: AW: RSA_public_decrypt problem

2007-08-02 Thread Wockenfuß , Frank
RSA_NO_PADDING leads to the same error. Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Marek Marcola Gesendet: Donnerstag, 2. August 2007 15:05 An: openssl-users@openssl.org Betreff: Re: AW: AW: AW: RSA_public_decrypt problem

AW: AW: AW: AW: AW: RSA_public_decrypt problem

2007-08-02 Thread Wockenfuß , Frank
N: 008796FB4EAAB5FCC21619608ECB34D4BD82D062BF136A54E7E0BF6B2991C2F0F93A161930D650AF939C8282431D291D0E6E9F69A09AF091345D60439569C5CB5ECA566740B6A69FE4BBF2DB9CC03786AEDF8F9522EB7F6096A1B900140E6AA7AF55198B87E68A69546631E9EF90666984123F5364BE2EA6E067BBAA8831A34B15 E: 004081 Frank Wockenfuß

AW: AW: AW: AW: AW: RSA_public_decrypt problem

2007-08-02 Thread Wockenfuß , Frank
Maybe the leadings 00 is the problem with both? Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Wockenfuß, Frank Gesendet: Donnerstag, 2. August 2007 16:36 An: openssl-users@openssl.org Betreff: AW: AW: AW: AW: AW

RSA_public_decrypt problem UPDATE

2007-08-02 Thread Wockenfuß , Frank
ify I get now the reason 155 as error description. If I call RSA_public_decrypt I get a NULL pointer access violation. What can I do now? Could the NULL pointer exception be because of missing structure entries to RSA? I just do RSA_new() and the set only n and e. Frank Wock

AW: RSA_public_decrypt problem UPDATE

2007-08-02 Thread Wockenfuß , Frank
the orignial hash inside the decrypted content. It lays on the last 32 byte. Before this is mostly FF. How do I surely get the original hash out of the content? Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Marek Marcola

AW: AW: RSA_public_decrypt problem UPDATE

2007-08-02 Thread Wockenfuß , Frank
That's it! Many thanks for the help! Frank Wockenfuß -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Marek Marcola Gesendet: Donnerstag, 2. August 2007 18:25 An: openssl-users@openssl.org Betreff: Re: AW: RSA_public_decrypt problem U

Re: One SSL certificate for foo.bar.org and bar.org?

2007-09-23 Thread Frank Büttner
Jim Fox schrieb: > > >> >> Is it possible to have one (self-signed) SSL certificate for a server >> that is known as foo.bar.org (internal LAN name) and bar.org (FQDN on >> the Internet)? A wildcard certificate doesn't seem to be a solution >> since it seems to be a subdomain only solution. >> >

ca server - unable to load CA private key

2007-10-30 Thread Frank Garber
phrase for C:\CA\private\CAkey.pem:". Is it looking for a value from a previous step? Any help would be greatly appreciated, Frank ~ Here's the values entered and the error message. C:\Program Files\OpenSSL>ca server Simple CA utility

ca client - failed to update database, TXT_DB error number 2

2007-11-05 Thread Frank Garber
- Country Name (2 letter code) [AU]:US State or Province Name (full name) [Some-State]:Connecticut Locality Name (eg, city) []:Burlington Organization Name (eg, company) [Internet Widgits Pty Ltd]:Prosoft Organizational Unit Name (eg, section) []:DS Common Name (eg, YOUR name) []:Frank Email Address

Re: ca client - failed to update database, TXT_DB error number 2

2007-11-06 Thread Frank Garber
NTABLE:'Prosoft' organizationalUnitName:PRINTABLE:'DS' commonName:PRINTABLE:'Frank' emailAddress :IA5STRING:'[EMAIL PROTECTED]' Certificate is to be certified until Nov 5 12:52:03 2008 GMT (365 days) Sign the certificate? [y/n]:y failed to update datab

Re: ca client - failed to update database, TXT_DB error number 2

2007-11-07 Thread Frank Garber
1,153,024 openssl.exe 7 File(s) 3,375,039 bytes 2 Dir(s) 26,369,331,200 bytes free Attached is my entire openssl.conf file Thanks in advance for all the help. Frank - Original Message From: Bernhard Froehlich <[EMAIL PROTECTED]> To: openssl-users@openss

  1   2   3   >