EVP_PKEY ] How to duplicate it ?]

2008-06-02 Thread delcour.pierre
Hello everyone, I would like to duplicate an EVP_PKEY struct. I wrote this not working code: BIO *bout = BIO_new(BIO_s_mem()); PEM_write_bio_PrivateKey(bout, key, NULL, NULL, 0, NULL, NULL); key = PEM_read_bio_PrivateKey(bout, NULL, NULL, NULL); cout (key == NULL) endl; BIO_free(bout);

[PATCH] ASN.1 declaration error in pk7_asn1.c

2008-06-02 Thread Peter Edwards
I think I've spotted a problem generating PKCS#7 DER-encoded output using OpenSSL 0.9.8e crypto/pkcs7/pk7_asn1.c has an ASN.1 definition for PKCS7_SIGNED as: ASN1_NDEF_SEQUENCE(PKCS7_SIGNED) = { ASN1_SIMPLE(PKCS7_SIGNED, version, ASN1_INTEGER), ASN1_SET_OF(PKCS7_SIGNED,

How to add an extension to a X509 certificate ?

2008-06-02 Thread delcour.pierre
Hello everyone, As i get no answer from the user mailing list, i ask it here. Sorry in advance if i post this question in the wrong place, but i really need a clue. I would like to add an extension to a X509v3 certificate. I wrote : void Addmyextension(X509* cert, int nid, char* value, bool

[openssl.org #1687] [PATCH] ASN.1 declaration error in pk7_asn1.c

2008-06-02 Thread Peter Edwards via RT
I think I've spotted a problem generating PKCS#7 DER-encoded output using OpenSSL 0.9.8e crypto/pkcs7/pk7_asn1.c has an ASN.1 definition for PKCS7_SIGNED as: ASN1_NDEF_SEQUENCE(PKCS7_SIGNED) = { ASN1_SIMPLE(PKCS7_SIGNED, version, ASN1_INTEGER), ASN1_SET_OF(PKCS7_SIGNED,

Re: [CVS] OpenSSL: openssl/crypto/x509/ x509_att.c

2008-06-02 Thread Ben Laurie
Dr. Stephen Henson wrote: - if (len == -1) + if ((len == -1) !(attrtype MBSTRING_FLAG)) I do wish you wouldn't use these extra brackets around comparison operators. if (len == -1 !(attrtype MBSTRING_FLAG)) works just fine and is consistent with most of the rest of the

Re: [CVS] OpenSSL: openssl/apps/ ca.c

2008-06-02 Thread Ben Laurie
Dr. Stephen Henson wrote: OpenSSL CVS Repository http://cvs.openssl.org/ Server: cvs.openssl.org Name: Dr. Stephen Henson Root: /v/openssl/cvs Email: [EMAIL PROTECTED]

Re: [CVS] OpenSSL: openssl/apps/ ca.c

2008-06-02 Thread Dr. Stephen Henson
On Sun, Jun 01, 2008, Ben Laurie wrote: Dr. Stephen Henson wrote: OpenSSL CVS Repository http://cvs.openssl.org/ Server: cvs.openssl.org Name: Dr. Stephen Henson Root:

[openssl.org #1685] [BUG] OpenSSL 0.9.8h cannot be compiled by GCC 4.3.0 on MinGW

2008-06-02 Thread Ferdinand Prantl via RT
Hello, I called ms\mingw32.bat and here we are the last console lines: gcc -o tmp\set_key.o -Ioutinc -Itmp -DL_ENDIAN -DDSO_WIN32 -fomit-frame-pointer -O3 -march=i486 -Wall -DBN_ASM -DMD5_ASM -DSHA1_ASM -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_NO_CAMELLIA -DOPENSSL_NO_SEED -DOPENSSL_NO_RC5

[openssl.org #1686] [PATCH] create engines dir

2008-06-02 Thread Hanno Boeck via RT
This patch will create the /lib/engines directory if it doesn't exist on installation. Please apply. (Patch taken from gentoo linux) -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail:[EMAIL PROTECTED] --- openssl-0.9.8/engines/Makefile

[openssl.org #1683] OPENSSL_NO_{RSA,DSA,DH} defines not honored

2008-06-02 Thread Vladimir Kotal via RT
Hello, The following defines are not honored during compilation of rsa/dsa/dh: OPENSSL_NO_RSA OPENSSL_NO_DSA OPENSSL_NO_DH The following source files have to be modified: usr/src/common/openssl/crypto/dh/dh_asn1.c usr/src/common/openssl/crypto/dh/dh_gen.c

[openssl.org #1684] bug: name collision with Windows SDK

2008-06-02 Thread David W. Thomas via RT
The following produced a series of compiler errors that seem unrelated to the cause: #include windows.h #include openssl/des.h I tracked it down to a name collision of: typedef struct ocsp_response_st OCSP_RESPONSE; within openssl/ossl_typ.h collides with #define OCSP_RESPONSE

[openssl.org #1688] Re: [PATCH] Fix parallel build

2008-06-02 Thread Daniel Black via RT
On Sat, 31 May 2008 07:13:32 pm Hanno Böck wrote: This patch adds some dependencies to the Makefile targets to allow parallel make to succeed. Please apply. (Patch is taken from Gentoo Linux) as attached? -- Daniel Black -- Proudly a Gentoo Linux User. Gnu-PG/PGP signed and encrypted email

[openssl.org #1687] [PATCH] ASN.1 declaration error in pk7_asn1.c

2008-06-02 Thread Stephen Henson via RT
[EMAIL PROTECTED] - Mon Jun 02 10:49:53 2008]: I think I've spotted a problem generating PKCS#7 DER-encoded output using OpenSSL 0.9.8e crypto/pkcs7/pk7_asn1.c has an ASN.1 definition for PKCS7_SIGNED as: ASN1_NDEF_SEQUENCE(PKCS7_SIGNED) = { ASN1_SIMPLE(PKCS7_SIGNED,

Re: [CVS] OpenSSL: openssl/apps/ ca.c

2008-06-02 Thread Bodo Moeller
On Mon, Jun 2, 2008 at 12:47 PM, Dr. Stephen Henson [EMAIL PROTECTED] wrote: On Sun, Jun 01, 2008, Ben Laurie wrote: Stop const mismatch warning. - else if (index_name_cmp(row,rrow)) + else if (index_name_cmp((const CSTRING *)row,(const CSTRING *)rrow)) I do wish you'd find

Re: [CVS] OpenSSL: openssl/crypto/x509/ x509_att.c

2008-06-02 Thread Geoff Thorpe
On Friday 30 May 2008 09:52:40 Ben Laurie wrote: Dr. Stephen Henson wrote: - if (len == -1) + if ((len == -1) !(attrtype MBSTRING_FLAG)) I do wish you wouldn't use these extra brackets around comparison operators. if (len == -1 !(attrtype MBSTRING_FLAG)) works just fine

RE: openssl 0.9.8 with fips

2008-06-02 Thread Beth E. Okun
Hi Steve Thanks so much for your replay and explanation..it is very helpful. Have a great day... Sincerely, Beth E. Okun From: [EMAIL PROTECTED] on behalf of Steve Marquess Sent: Sat 5/31/2008 9:07 AM To:

Re: [CVS] OpenSSL: openssl/crypto/x509/ x509_att.c

2008-06-02 Thread Michael Sierchio
Geoff Thorpe wrote: On Friday 30 May 2008 09:52:40 Ben Laurie wrote: Dr. Stephen Henson wrote: I do wish you wouldn't use these extra brackets around comparison operators. if (len == -1 !(attrtype MBSTRING_FLAG)) works just fine and is consistent with most of the rest of the

Re: [openssl.org #1684] bug: name collision with Windows SDK

2008-06-02 Thread [EMAIL PROTECTED]
- typedef struct ocsp_response_st OCSP_RESPONSE; within openssl/ossl_typ.h collides with #define OCSP_RESPONSE ((LPCSTR) 67) within WinCrypt.h, a windows header file (Microsoft Windows SDK 6.0A). There are work-arounds, but the compiler errors led to a few hours of

Re: [openssl.org #1684] bug: name collision with Windows SDK

2008-06-02 Thread Dr. Stephen Henson
On Mon, Jun 02, 2008, [EMAIL PROTECTED] wrote: - typedef struct ocsp_response_st OCSP_RESPONSE; within openssl/ossl_typ.h collides with #define OCSP_RESPONSE ((LPCSTR) 67) within WinCrypt.h, a windows header file (Microsoft Windows SDK 6.0A). There are