Re: RSA_sign

2002-06-24 Thread Nils Larsch
Hi all, thanks for your help on DH stuff :-) Now I have a pb with RSA_sign(). I have a buffer and I want to sign it with my private key. So I generate a key: openssl genrsa -out key.pem 1024 then I have the following code: rsa = RSA_new(); get_my_priv_RSA(rsa); sigbuf =

Re: problems load private key URGENT!!!

2002-06-24 Thread Andrea Nagar
Here's the code I use: EVP_PKEY* GetPrivateKey(char *fileName, char *pass){ FILE *f; PKCS12 *p12; X509_NAME *name; X509 *certificato; EVP_PKEY *privata; // = new EVP_PKEY(); int len = strlen(pass); if ((f = fopen(fileName, "r")) == NULL)throw HandledError("File Specified Could Not Be Read"); else

Question about OpenSSL Reinstall

2002-06-24 Thread John Rishea
I want to reinstall OpenSSL on a Sparc v9 machine running Solaris 8. I've deleted the original installation but when I try to run config I get the following message: Configuring for solaris-sparcv9-cc target already defined - solaris-sparcv9-cc This is with ./config

Re: Compression Doubt in Specifications

2002-06-24 Thread Geoff Thorpe
Hi, On 24 Jun 2002, Shalendra Chhabra wrote: HI I fail to understand the following: In SSL 3.0, the Plaintext blocks are blocks of 2^14 But when they are compressed it is written: Compression must be lossless and may not increase the content length by more than 1024 bytes. I just

Re: RSA_sign

2002-06-24 Thread Nils Larsch
The input to RSA_sign() must be smaller than BN_num_bytes(rsa-n) minus PKCS#1 padding bytes and some bytes for the asn1 digest encoding. where is it written ? The RSA signature generation is specified in the PKCS#1 draft ( http://www.rsasecurity.com/rsalabs/pkcs/pkcs-1/index.html )

Re: MDC2 inconsistancy

2002-06-24 Thread Nalin Dahyabhai
On Thu, Jun 20, 2002 at 05:07:20PM +0200, Flemming Frandsen wrote: The openssl that failed (yours too maybe??) was from a Redhat 7.3: [ff@partyticket ff]$ rpm -qf `which openssl` openssl-0.9.6b-8 ... so maybe this is really a RatHead bug in stead? I've downloaded and compiled the 0.9.6b

Parse this! :-)

2002-06-24 Thread Marco Donati
I have a problem with the attached PKCS#12 key (generated and used with other tools). The PKCS12_parse return value is not 0, but the EVP_PKEY* remains NULL. The PKCS12 password is ''12071971'', in case you want to try (yes, it's a birth date:-)) Any hint? Thanks in advance parsethis.p12

Creating an RSA* from external key

2002-06-24 Thread Scarlata, Vincent R
Title: Message I am trying to use the openSSL RSA_public_encrypt() function using an RSA key which is externally loaded from 2 unsigned byte streams (e,n). What is the best way to fill in an RSA struct with values in this form so that I can begin making calls to the crypo functions? I could

TR : Unable to estabish a SSL session

2002-06-24 Thread Pierre . HURET
Title: TR : Unable to estabish a SSL session Sorry if you have already receive this mail Hi, I try to replace an IBM edge server reverse proxy, by an APACHE 2.0.36 / Mod_proxy / Mod_ssl / openssl 0.9.6d. The Reverse proxy deal the SSL part with client, and work with my back end Server in

RSA encryption

2002-06-24 Thread Federico Sauter
I got a question regarding RSA encryption: how do I encrypt/decrypt some text (or byte array, you understand what I mean) that is larger than RSA_key_size() ? Thanks in advance! _ Federico Sauter [EMAIL

Re: Major problems with OpenSSL and Apache 1.3.x

2002-06-24 Thread Hendrick Chan
Michael, You missed the libexec that mentioned in the example of httpd.conf: LoadModule foo_module libexec/mod_foo.so Michael Piskol wrote: Hello, I'm currently working on installing OpenSSL 0.9.6 under my Apache 1.3.x webserver. Unfortunately, major problems occurred during testing the

Re: Major problems with OpenSSL and Apache 1.3.x

2002-06-24 Thread terr
check ldconfig On Mon, Jun 24, 2002 at 01:10:08PM -0700, Hendrick Chan wrote: Michael, You missed the libexec that mentioned in the example of httpd.conf: LoadModule foo_module libexec/mod_foo.so Michael Piskol wrote: Hello, I'm currently working on installing OpenSSL 0.9.6

X509 Extension

2002-06-24 Thread davide
Hi, I use different type of RSA keys to build a X509 Cert, so I would like to add an extension to the certificate to establish what kinda of key peer is using. How could I do that? Thanks in advance -- Davide D'Amico [EMAIL PROTECTED] /(

Added generationQualifier and pseudonym to objects.txt but now subject name contains numeric OIDs!

2002-06-24 Thread Fiel Cabral
Dear Lutz Jaenicke and OpenSSL Users: I could not wait for 0.9.7 to come out so I decided to add the X509 OIDs for generationQualifier and pseudonym to crypto/objects/objects.txt. Now, I can create a certificate request containing these distinguished name attributes BUT when I do openssl req