Re: [twsocket] SSL PEM error

2009-04-21 Thread Dod
Hello, As I told you I am still learning about thoses Smartcards but it seems that the SmartCards has some functions you can call, I tested one called "random number generator", but it also can make authentication key calculation and I suppose this is why the private key cannot not be ext

Re: [twsocket] SSL PEM error

2009-04-20 Thread Arno Garrels
Arno Garrels wrote: >> I know that private key cannot be extracted from the SmartCard type >> I use > > That's hard to believe, if OpenSSL can read the key, and it must read > it, then it should be possible to write it to a PEM file as well, > IMHO. Maybe the smartcart is smarter than I can ima

Re: [twsocket] SSL PEM error

2009-04-20 Thread Arno Garrels
Dod wrote: > Hello Arno, > > I thought ICS was based on OpenSSL as it use the libeay32.dll and > ssleay32.dll like OpenSSL.exe do. OpenSSL is a huge crypto library, ICS uses just parts of it. Engines have been introduced after ICS-SSL started and nobody obviously implemented it later on. I a

Re: [twsocket] SSL PEM error

2009-04-20 Thread Dod
Hello Arno, I thought ICS was based on OpenSSL as it use the libeay32.dll and ssleay32.dll like OpenSSL.exe do. Currently I am able to do a connection using OpenSSL.exe (using pkcs11 engine) or sTunnel.exe that is configured with nearly same parameters syntax as OpenSSL as it also rely on l

Re: [twsocket] SSL PEM error

2009-04-20 Thread Arno Garrels
Dod wrote: > Hello Arno, > > Only one BEGIN/END section in each PEM that is only CERTIFICATE. > >> The private key must not neccessarily be an RSA key, do you see any >> other PRIVATE KEY section? > >> That's possible. AFAIK, OpenSSL supports PKCS11 only thru a dynamic >> Engine, to list current

Re: [twsocket] SSL PEM error

2009-04-20 Thread Dod
Hello Arno, Only one BEGIN/END section in each PEM that is only CERTIFICATE. AG> The private key must not neccessarily be an RSA key, do you see any other AG> PRIVATE KEY section? AG> That's possible. AFAIK, OpenSSL supports PKCS11 only thru a dynamic AG> Engine, to list current active engines

Re: [twsocket] SSL PEM error

2009-04-20 Thread Arno Garrels
Dod wrote: > Hello Arno, > > I have correct BEGIN/END CERTIFICATE but none of PEM have a RSA > PRIVATE KEY section. The private key must not neccessarily be an RSA key, do you see any other PRIVATE KEY section? > > With OpenSSL I use PKCS11 but has I had to manually extract auth >

Re: [twsocket] SSL PEM error

2009-04-20 Thread Dod
Hello Arno, I have correct BEGIN/END CERTIFICATE but none of PEM have a RSA PRIVATE KEY section. With OpenSSL I use PKCS11 but has I had to manually extract auth certificate I supposed PKCS11 access would not be really needed anymore, but may be it is still needed because

Re: [twsocket] SSL PEM error

2009-04-19 Thread Arno Garrels
Dod wrote: > Hello Arno, > > First of all I have to say I am actually learning about SSL so I am > not yet fluent with it, excuse my answers and "stupid" beginner's > questions . > >> Does your PEM file actually include a private key? >> Or is the private key stored in a separate PEM file

Re: [twsocket] SSL PEM error

2009-04-19 Thread Dod
Hello Arno, First of all I have to say I am actually learning about SSL so I am not yet fluent with it, excuse my answers and "stupid" beginner's questions . AG> Does your PEM file actually include a private key? AG> Or is the private key stored in a separate PEM file? Not sure about pub

Re: [twsocket] SSL PEM error

2009-04-19 Thread Arno Garrels
Dod wrote: > Hi, > > I am starting to use with ICS SSL using basic icsSSL sample but I get > this error : > > Can't load private key error:0906D06C:PEM routines:PEM_read_bio:no > start line. Does your PEM file actually include a private key? Or is the private key stored in a separate PEM file?

[twsocket] SSL PEM error

2009-04-19 Thread Dod
Hi, I am starting to use with ICS SSL using basic icsSSL sample but I get this error : Can't load private key error:0906D06C:PEM routines:PEM_read_bio:no start line. After google'ing I see it sometimes happend with bad formatted PEM files as the BEGIN and END format is critical but if I d