Re: new OpenSSL user looking for manuals

2011-05-14 Thread Larry Bugbee
On May 14, 2011, at 2:32 PM, ffrei...@rockwellcollins.com wrote: > I'm developing software that uses SHA384 and ECDSA in OpenSSL. > > Is there any User's Manual or Programming Guide to show how to use it? Unless somebody has written something recently, arguably your best bet is 1) the O'Rei

Re: new OpenSSL user looking for manuals

2011-05-14 Thread Larry Bugbee
[oops, hit send prematurely] On May 14, 2011, at 2:32 PM, ffrei...@rockwellcollins.com wrote: > I'm developing software that uses SHA384 and ECDSA in OpenSSL. > > Is there any User's Manual or Programming Guide to show how to use it? Unless somebody has written something recently, arguably

Re: OpenSSL cross-compile for ARM

2008-12-25 Thread Larry Bugbee
I used: Configure --prefix=/usr/arm /usr/arm/bin/gcc and then modified the make file with: CC= /usr/arm/bin/arm-gcc AR= /usr/arm/bin/arm-ar $(ARFLAGS) r Larry Bugbee wrote: I also can't find libcrytpo.so, I have libvcrypto.a and libssl.a, but no *.so files? Where does the buil

Re: ECDSA

2008-11-17 Thread Larry Bugbee
I would to know how to generate a key with the ECDSA algorithm from openssl or do I have to use the ECDH algorithm for that? If I have to use ECDH, how do I generate a key? ECDH is only to share a secret key. Neither ECDSA or ECDH will generate an EC key. Assuming you have a key, ECDSA i

Re: ECDSA

2008-11-15 Thread Larry Bugbee
I would to know how to generate a key with the ECDSA algorithm from openssl or do I have to use the ECDH algorithm for that? If I have to use ECDH, how do I generate a key ? ECDH is only to share a secret key. ec An other question: I am doing cryptograhy with EDCSA an

X509_REQ_get_subject_name() and other macros

2008-10-10 Thread Larry Bugbee
Hi, I'm writing a ctypes wrapper to access libcrypto from Python using ctypes. A lot is working but when I go to extract the subject name from a CSR (REQ) so I can add it to the cert, No Joy. Extracting the subject name from a cert using X509_get_subject_name() works because it is a func

Re: Certificate Expiry and pem file

2008-10-07 Thread Larry Bugbee
One of our clients are renewing the digital certificates on their side as it is due to expire and would be rolling over to a new certificate.They have provided a .cer file.Actually we decrypt the messages from them.I understand that I need to generate a .pem file from this .cer file.Can anyon

Re: Certificate Expiry and pem file

2008-10-07 Thread Larry Bugbee
One of our clients are renewing the digital certificates on their side as it is due to expire and would be rolling over to a new certificate.They have provided a .cer file.Actually we decrypt the messages from them.I understand that I need to generate a .pem file from this .cer file.Can anyon

Re: Elliptic curves + openssl

2008-06-17 Thread Larry Bugbee
I would like to know how can I use the elliptic curves's algorithms with openssl? In what context? From the commandline? Programatically? Cryptographically or the generation of CSRs/certs? ??? You might want to begin with openssl commands. Consider the script linked fm... http:/

Re: EC public key to make X509 cert

2008-04-29 Thread Larry Bugbee
On Apr 29, 2008, at 3:29 AM, Dr. Stephen Henson wrote: Alternatively calling: EVP_PKEY *pk = EVP_PKEY_new(); ... EVP_PKEY_assign_EC_KEY(pk, ecpubkey; Will work. Indeed it does! A thousand thanks!!! Larry __ OpenSSL Project

EC public key to make X509 cert

2008-04-28 Thread Larry Bugbee
Using 0.9.9-dev (SNAP-20080417) I am able to create an EC CSR, and in turn, use it to create a X509 cert signed with an EC CA key. No problem. As long as the individual/device is capable of creating a CSR, it all works very nicely. Thank you. My problem is that there are times when the i

Re: 0.9.9 SNAP OSX .dylib link [solved]

2008-03-21 Thread Larry Bugbee
On Mar 21, 2008, at 12:52 PM, Andy Polyakov wrote: This is not supported way of creating shared libraries, './config shared ...' is! If configured with shared option assembler modules come out position-independent and .dylib is linked successfully. ...and right you are. It works perfectly!

Re: 0.9.9 SNAP OSX .dylib link problem [workaround]

2008-03-20 Thread Larry Bugbee
On Mar 20, 2008, at 4:18 AM, Dr. Stephen Henson wrote: On Wed, Mar 19, 2008, Larry Bugbee wrote: I traced it down to the assembly code in the x86-specific asm acceleration modules. ...those functions containing "OPENSSL_ia32cap_P". I'm unable to get to the root cause, but

Re: 0.9.9 SNAP OSX .dylib link problem

2008-03-19 Thread Larry Bugbee
I'm building 0.9.9 from the latest SNAP and have been successful with openssl (the app) but no joy with building .dylib files on MacOSX. The linker fails with: ld: absolute addressing (perhaps -mdynamic-no-pic) used in _OPENSSL_rdtsc from libcrypto.a(x86cpuid.o) not allowed in slidable

0.9.9 SNAP OSX .dylib link problem

2008-03-19 Thread Larry Bugbee
Hi, I'm building 0.9.9 from the latest SNAP and have been successful with openssl (the app) but no joy with building .dylib files on MacOSX. The linker fails with: ld: absolute addressing (perhaps -mdynamic-no-pic) used in _OPENSSL_rdtsc from libcrypto.a(x86cpuid.o) not allowed in

Re: Certs with ECDSA + SHA256

2008-03-17 Thread Larry Bugbee
is it possible to use ECDSA with EVP_MDs other than EVP_dss1() ? I am interested in use it with SHA256, especially in X509 signatures(eg., certificates, requests, etc... ). I was successful in pulling and building the 0.9.9 SNAP at ftp://ftp.openssl.org/snapshot/ ECDSA (various curves) with th

Re: Install openssl-0.9.8g on a Mac OS X PPC server

2008-03-04 Thread Larry Bugbee
How can I generate a loadable library module libssl.so of openssl-0.9.8g on a Mac OS X 10.4.11 PPC server? All these commands successfully finished. However, I got libssl.a and libssl.dylib but did not get libssl.so. I made a symbolic link from libssl.dylib to libssl.so. Unfortunately,