Averroes,
Examining a certificate stored inside an executable will be much more
difficult than examining one that is is stored in a PEM file.
However, there should be no risks with either approach because a certificate
is considered public and it should not contain any private data. The
content of a certificate should not need to be protected.
Do you mean that you want to store a private key inside your executable?
It's the private key that needs to be kept secret, not the certificate.
Perhaps you can elaborate on what you are trying to do.
Regards,
Steven
-----Original Message-----
From: Averroes [mailto:[EMAIL PROTECTED]]
Sent: Monday, 10 September 2001 4:35 PM
To: [EMAIL PROTECTED]
Subject: C output Form of Certif
Hi All,
Question for developper or Coder!
I am not C coder nor Developper, but I have this question
for them.
What are risks to publish a certificate in the form of a C source
file ?
Is it possible to do the reverse engineering ?
Here is the command:
openssl x509 -in ./CA-MedCert.pem -noout -C
/* subject:/C=FR/ST=Ile-de-France/L=Paris/O=Med Certification
Authority/OU=Certification Authority Dept./CN=Med Digital Signature
[EMAIL PROTECTED] */
/* issuer :/C=FR/ST=Ile-de-France/L=Paris/O=Med Certification
Authority/OU=Certification Authority Dept./CN=Med Digital Signature
[EMAIL PROTECTED] */
unsigned char XXX_subject_name[221]={
0x30,0x81,0xDA,0x31,0x0B,0x30,0x09,0x06,0x03,0x55,0x04,0x06,0x13,0x02,0x46,0
x52,
0x31,0x16,0x30,0x14,0x06,0x03,0x55,0x04,0x08,0x13,0x0D,0x49,0x6C,[...]
};
unsigned char XXX_public_key[294]={
0x30,0x82,0x01,0x22,0x30,0x0D,0x06,0x09,0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0
x01,
0x01,0x05,0x00,0x03,0x82,0x01,0x0F,0x00,0x30,0x82,0x01,0x0A,0x02,[...]
};
unsigned char XXX_certificate[1395]={
0x30,0x82,0x05,0x6F,0x30,0x82,0x04,0x57,0xA0,0x03,0x02,0x01,0x02,0x02,0x01,0
x00,
0x30,0x0D,0x06,0x09,0x2A,0x86,0x48,0x86,0xF7,0x0D,0x01,0x01,0x04,[...]
};
Any suggestions or comments would be appreciated
Thanks
--
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .-
# Averroes A. Aysha
# Think Linux, Think Slackware!
# Network Security Auditor (NSA)
# e-fingerprint = 73B7 2559 2968 5094 3B95 5C70 4E85 5F94 6068 1DD8
# http://www.keyserver.net/en/
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .-
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
