Re: Beginner's questions with openssl API

2002-01-07 Thread Juan Segarra
On Mon, 7 Jan 2002, Mack Stevenson wrote: Hi Bear, Thank you for replying. - I gather that it's a bad idea to just encrypt all the files with the passphrase chosen by the user, right? You don't use the passphrase *directly*, but you should certainly use the user's passphrase. Run

OpenSSL ocsp and SmartTrust Servant OCSP

2002-01-07 Thread Franz Brandl
Title: A-Trust Hi All, I am trying to use the OpenSSL command ocsp together with SmartTrust Servant OCSP 4.0 and consistently get 'internalerror (2)' when trying to verify the status of a certificate. Does anyone have experience with SmartTrust OCSP and OpenSSL ? Best regards Franz Brandl

Re: Root cert questions

2002-01-07 Thread Bear Giles
By definition, a root cert is one where the issuer is also the signer. How you determine issuer===signer can be problematic (insert various Gutman data here :), but most software probably compares DN's. I might not have been clear on this - the table is intended to be used as the cert store

How to do When root CA'cert expired!!?

2002-01-07 Thread XuJi
hello, I am a graduate student of Southeast University. We are studying abount CA system. Now we meet a problem that the CA Certificate we created before will expire soon. And we have a CA center for accepting and signing certification request,and a CA application for query. If we change

openssl to find out expiration date in pfx-files???

2002-01-07 Thread Hochmuth, Karl-Heinz
Hello folks! I am looking for a solution to extract the expiration date of a certificate to a text file to bring finaly all of the expiration dates in a database, so I know when the next certificate expires. I am using IIS 5.0 extracting my keys including private key to a *.pfx-file. I can use

openssl-0.9.6 compile problem in windows 2000 + vc 6.0

2002-01-07 Thread [EMAIL PROTECTED]
Hello, openssl-0.9.6, openssl-0.9.6a, openssl-0.9.6-stable-snap-20020103, openssl-engine-0.9.6c, openssl-0.9.6c, openssl-snap-20020103, these versions can not be compiled under windows2000 + VC6.0. Whenever I use perl Configure VC-WIN32 or perl Configure VC-NT, run ms\do_ms or

Problems compiling openssl 9.6c on win2000 with vc6.0

2002-01-07 Thread John van Pelt
Title: Problems compiling openssl 9.6c on win2000 with vc6.0 I have installed openssl 9.6c according the instructions in the INSTALL file: perl Configure VC-WIN32 ms\do_ms nmake -f ms\ntdll.mak The result of the make is an error compling the file .\crypto\engine\hw_aep.c. Error: Cannot

RSA_verify question

2002-01-07 Thread Hylton Tregenza
Hi I am using RSA_verify to verify that the signiture that I am getting with a message is correct The process that I am using is as follows. Get the user public key from file and put it in a RSA structure ERR_print_errors returns no error Get Server private key from file and put in another RSA

Doubt regarding extracting the Extended Key usage attribute

2002-01-07 Thread Chandu
Hi, Iam facing a problem regarding the extracting the Extended Key usage attribute. My requirement is to know if Extended Key Usage attribute Nid_OCSP_sign is present. I tried the following way X509 *pCert; /* The certificate */ int iVal; iVal = X509_get_ext_by_NID(pCert,

Re:win32

2002-01-07 Thread robert
I am using msvc C++ opensll 0.9.6c. In NT4 environment I set the RANDFILE value to RANDOM.pem, should the value end in .rnd. Do i need to do anything special or explicit in the openssl.cnf, to confirm it, when I am creating ref or ca certs? In my application, I have build a C++ wrapper

Re: RSA keys auth.

2002-01-07 Thread Bear Giles
Jeffrey Altman wrote: A passphrase consisting of human readable/typable text provides approximately 2 bits of entropy per character. English text contains approx. 3.5 bits of entropy per character. Password half password of password normal password English password text password is

[no subject]

2002-01-07 Thread Bernd . Bauer
hi! i have an axis development board and i want to run an snmp agent on it. the agent need the openssl library, but if i try to compile it there is an error: could not read symbols nvalid operation can you tell me why? thanks bernd -- GMX - Die Kommunikationsplattform im Internet.