sign digest and build pkcs#7

2010-01-28 Thread Jaraba Nieto, Fernando
I would know if it's possible with openssl to sign a digest message,
without using the original document. If it's then I can send hash digest
to the client and receive signed hash to build pkcs#7 structure.
 
Thanks a lot

 

 

Fernando.



RE: OpenSSL 1.0.0 beta5 release v. VMS

2010-01-28 Thread Arpadffy Zoltan
Hello Steven,

> The following looks ok to me (but so did the previous stuff):
The difference is noticeable. This one works perfect for me too :)
Thank you very much...
It would be good if Richard could merge this into the tests.com file.

Regards, 
Z

-Original Message-
From: Steven M. Schweda [mailto:s...@antinode.info] 
Sent: den 27 januari 2010 22:13
To: openssl-dev@openssl.org
Subject: Re: OpenSSL 1.0.0 beta5 release v. VMS

From: Arpadffy Zoltan 

> Could you please write that DEFINE/NOLOG SSLROOT [...]

   _You_'re the one with all the "00" stuff, so I thought that I
could get _you_ to do it.  Sigh.  The following looks ok to me (but so
did the previous stuff):

$
$   set default '__here'
$   set default [-.apps]
$   sslroot = f$parse( f$environment( "default"), , , ,
"no_conceal")
$   sslroot = sslroot - "][" - ".00" - "].;" + ".]"
$   define /translation_attributes = concealed sslroot 'sslroot'
$   set default '__here'
$


   By the way, building on HP-UX and Solaris, I noticed thet the JPAKE
stuff is "experimental", and not included in the builds by default. 
And, if it is included, the test fails in the same way.  If it really
doesn't work, then perhaps it should be excluded from the VMS build. 
(Or done last.)



   Steven M. Schweda   s...@antinode-info
   382 South Warwick Street(+1) 651-699-9818
   Saint Paul  MN  55105-2547
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org

 
 
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


Re: Get root certificates from System Store of Windows

2010-01-28 Thread NARUSE, Yui
How about my previous patch, which lookup Windows' store with CryptoAPI.
http://www.mail-archive.com/openssl-dev@openssl.org/msg27023.html

thanks,

-- 
NARUSE, Yui
nar...@airemix.jp
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org


Re: OpenSSL 1.0.0 beta5 release v. VMS

2010-01-28 Thread Steven M. Schweda
From: Richard Levitte 

> In the mean time, I believe the latest snapshot has all my changes to
> date, which includes most if not all the patches I've seen from you in
> the latest few days...  Worked for me, please try it out.

   "@ INSTALL.COM [dir]" from "openssl-1.0.0-stable-SNAP-20100127.tar.gz"
failed for me.  Early on, when "crypto/install.com" was trying to copy
header files:

[...]
%COPY-S-COPIED, ALP$DKA100:[UTILITY.SOURCE.OPENSSL.openssl-1^.0^.0-stable-SNAP-2
0100127.crypto]opensslv.h;1
copied to WRK_SSLROOT:[INCLUDE]opensslv.h;1 (8 blocks)
%COPY-E-OPENIN, error opening ALP$DKA100:[UTILITY.SOURCE.OPENSSL.openssl-1^.0^.0
-stable-SNAP-20100127.crypto]OPENSSLCONF.H; as input
-RMS-E-FNF, file not found
[...]

And that seems to abort the procedure.

   With the "beta5" kit, it found that file:

[...]
%COPY-S-COPIED, ALP$DKA0:[UTILITY.SOURCE.OPENSSL.openssl-1^.0^.0-beta5.crypto]op
ensslv.h;1
copied to WRK_SSLROOT:[INCLUDE]opensslv.h;1 (8 blocks)
%COPY-S-COPIED, ALP$DKA0:[UTILITY.SOURCE.OPENSSL.openssl-1^.0^.0-beta5.crypto]op
ensslconf.h;1
copied to WRK_SSLROOT:[INCLUDE]opensslconf.h;1 (12 blocks)
[...]

   The "beta5" kit included that file (VMSTAR listing):

-rw-r--r-- 0/0   5960 Jan 20 09:09:10 2010 openssl-1.0.0-beta5/crypto/op
ensslconf.h

But I don't see it in the "SNAP" kit.  There seems to be a generated
file, "[.crypto.ALPHA]OPENSSLCONF.H".  Is that what we should be copying
to to the destination "include" directory?

   P.S.:  I'm subscribed to the openssl-dev list, so direct e-mail is
redundant.

   SMS.
__
OpenSSL Project http://www.openssl.org
Development Mailing List   openssl-dev@openssl.org
Automated List Manager   majord...@openssl.org