Re: How to create a pkcs7-envelopedData inside a pkcs7-signedData?

2002-02-13 Thread Dr S N Henson
Erwann ABALEA wrote: > > Hi, > > I'm facing a problem I can't manage to solve. > > I need to create a structure like this one: > > signed PKCS#7 { > signer certificate > authenticated attributes > content: enveloped PKCS#7 { > recipient certificates > enc_content: data > } > }

How to create a pkcs7-envelopedData inside a pkcs7-signedData?

2002-02-13 Thread Erwann ABALEA
Hi, I'm facing a problem I can't manage to solve. I need to create a structure like this one: signed PKCS#7 { signer certificate authenticated attributes content: enveloped PKCS#7 { recipient certificates enc_content: data } } I know how to create an enveloped PKCS#7 alone, wit

Re: newbie: Trouble Here (long. ignorable)

2002-02-13 Thread Jean Baptiste FAVRE
> > My batch can only generate certificates. it doesn't import it automatically > > in Web servers. > > More, I've only tested it under apache, not IIS. > > It seems to be a problem when using with Netscape 6.2 and Mozilla 0.9.5. > You get the same stuff with apache tho, eh? Interesting... Yep, th

RC4 failure on MacOSX

2002-02-13 Thread Robert Penland
I can build OpenSSL under MacOSX but the "make Test" returns errors for all the RC4 tests. Is this just a problem with the test (say BIGENDIAN versus LITTLEENDIAN) or is there something wrong with the libraries? Rob __ OpenSSL

Re: mystery failure: genrsa lacks entropy, req -new works

2002-02-13 Thread Lutz Jaenicke
On Tue, Feb 12, 2002 at 05:11:13PM -0500, POLIVKA-ROHRER, KEITH W (AIT) wrote: > [I said:] > > > dies with the "PRNG not seeded" error). > > > > > > The only way to clear this condition (which only happens for new > > > installations) is to invoke the openssl command line, do a > > req -new, and

Win/32 Handshake problem

2002-02-13 Thread Scott Frazor
Win/32 Client app using DH keys. Every so-often a SSL will seem to get stuck in a loop doing the handshake and call the callback function with the following error: ProcedureID:UnitCoreDataModule.ssl_infocallback Description:SSLv3 read server hello A The message "SSLv3 read server hello A" is th

Re: SV: crlDistributionPoints....how to get values?

2002-02-13 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > Thank you, > > You got me on the right track. > One small question, though > When reading text data from a ASN1_IA5STRING, is it then correct just to > cast the "data" variable to a char pointer, like in this case: > mystring = (char*) pGenName->d.ia5->data; >

SV: crlDistributionPoints....how to get values?

2002-02-13 Thread Hellan,Kim KHE
Thank you, You got me on the right track. One small question, though When reading text data from a ASN1_IA5STRING, is it then correct just to cast the "data" variable to a char pointer, like in this case: mystring = (char*) pGenName->d.ia5->data; ...or is there a function to return the tex

Re: crlDistributionPoints....how to get values?

2002-02-13 Thread Dr S N Henson
"Hellan,Kim KHE" wrote: > > Hi > > I have a certificate with a crlDistributionPoint extension. Using OpenSSL > terms, the extension consists of two DIST_POINT*.one of the type > GEN_DIRNAME and the other of the type GEN_URI. > In my code I have "parsed" these DIST_POINT* and what I end up wi

Re: Getting the size of a certificate

2002-02-13 Thread Dr S N Henson
Verdon Walker wrote: > > > I am getting a client certificate using SSL_get_peer_certificate() and > I need to know the size of the certificate in bytes. Is there a call I > can make to find out the size of the X509 object? I know it is encoded > and the size is part of the encoding so it should

crlDistributionPoints....how to get values?

2002-02-13 Thread Hellan,Kim KHE
Hi I have a certificate with a crlDistributionPoint extension. Using OpenSSL terms, the extension consists of two DIST_POINT*.one of the type GEN_DIRNAME and the other of the type GEN_URI. In my code I have "parsed" these DIST_POINT* and what I end up with is a GENERAL_NAME* for each distribu

Re: installing openssl in different directories

2002-02-13 Thread Bodo Moeller
On Mon, Jan 28, 2002 at 06:02:32PM -0600, Phil Howard wrote: > Does OpenSSL integrate installation paths into its installed files? > > If the answer is NO, then that should mean it is safe to move the > library files from /usr/lib to /lib, right? The answer is yes, but it usually should be safe