Re: errors processing PKCS12 file

2003-06-20 Thread Todd A. Oberly
On 06/20/2003, Dr. Stephen Henson wrote: > On Fri, Jun 20, 2003, Todd A. Oberly wrote: [...] >> OpenSSL's NSEQ tools are still primitive, and processing it with >> >> ./openssl nseq -in ~/deliver.exe >> >> still generates an error. :-( So I'm off to report a bug and perhaps >> write a little to

Re: errors processing PKCS12 file

2003-06-20 Thread Dr. Stephen Henson
On Fri, Jun 20, 2003, Todd A. Oberly wrote: > On 06/19/2003, Todd A. Oberly wrote: > > > I wanted to try processing a binary PKCS12 file (ie. > > split apart the 3 certificates inside) as downloaded from Thawte's > > FreeMail service, but keep getting the same errors no matter what I try. > > For

Re: errors processing PKCS12 file

2003-06-20 Thread Todd A. Oberly
On 06/19/2003, Todd A. Oberly wrote: > I wanted to try processing a binary PKCS12 file (ie. > split apart the 3 certificates inside) as downloaded from Thawte's > FreeMail service, but keep getting the same errors no matter what I try. > For example [...] FYI, I finally figured it out myself. We

RE: From BSAFE to Openssl

2003-06-20 Thread Lu, Steve
(B (B (BHi (BWu, (B  (BIt (Bturns out both engine are doing some sort of padding (Balready. (BIf the (Blength of the clear text is 16bytes, both engine will (Bproduce (Bencrypted stream of size 24Bytes. (B(CipherUpdate returns 16, CipherFinal adds extra 8 (Bbytes.) (B  (BIf I

Re: No shared cipher?

2003-06-20 Thread Jay Cornwall
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 20 Jun 2003 07:29 am, Lutz Jaenicke wrote: > > Are there any preconditions for using these ciphers, apart from setting a > > private RSA key? > A corresponding public key (certificate) might be helpful. Aha, thank you. I definitely do nee

Re: need a RC4 128 bit certificate

2003-06-20 Thread Rich Salz
for my homepage I need a RC4 128bit certificate. No you don't. :) You are mixing concepts. You need a certificate (typically RSA, of 1K or 2K bits). That keypair is used to exchange an RC4 session key, and the RC4 key is 128bits. You need to learn more about how SSL works. /r$ -- Ric

need a RC4 128 bit certificate

2003-06-20 Thread Andreas Bender
Hello, for my homepage I need a RC4 128bit certificate. On http://www.openssl.org/docs/apps/CA.pl.html I get an instruction to generate DSA CERTIFICATES (see below) It works fine, but I get a 168Bit certificate. It must be a RC4 128bit certificate. Can anyone help me, please? - - - DSA CERTIFI

about the signer file format in OCSP // load_key() in app.c

2003-06-20 Thread Wu Junwei
(B (B (BHi,all (BI am studying the openssl ocsp. (B  (BI would like to know , when use the -signer or -signkey option of the OCSP, (Bis there any format limitation of this signer file or signer key file? (B  (BI have a PKCS#12 certificate1(can be found in the end of this mail ) which (