Re: ASN1_sign, ASN1_verify

2003-11-04 Thread Peter Sylvester
You need to set the followiong flags like for a bitstringc containing a public key: pk->public_key->flags&= ~(ASN1_STRING_FLAG_BITS_LEFT|0x07); pk->public_key->flags|=ASN1_STRING_FLAG_BITS_LEFT; If not, the code assumes that a bitstring is in fact a named bit list and removes tr

pkcs7 file in crypto/pkcs7/p7 and crypto/pkcs7/t

2003-11-04 Thread Jia L Wu
Hi, Can anyone tell me what file formate are the files in crypto/pkcs7/p7/ and crypto/pkcs7/t/ driectories? For the files in p7 directory, I can not load them using "openssl pkcs7" command either in der or pem form. For the most files in t directory, "openssl pkcs7 -text -noout" returns nothing.

Re: crlDistributionPoints with DirName value?

2003-11-04 Thread Kiyoshi Watanabe
Hi, > crlDistributionPoints = DirName:/C=FI/O=SSH Communications Security Corp/CN=SSH Test > CA 2 No Liabilities How about crlDistributionPoints = @crl_dist [ crl_dist ] DirName = /C=FI/O=SSH Communications Security Corp/CN=SSH Test CA 2 No Liabilities -Kiyoshi Kiyoshi Watanabe > and

ASN1_sign, ASN1_verify

2003-11-04 Thread Francis.Vanhemmens
Hi everybody, i have a strange behavior ... (while investigationg it i noticed that i2d_ASN1_BIT_STRING shorten a bit string if there are null bytes at the end of the string which it was not doing in older versions.) But that's not why i write here : I upgraded a server application from an old

[OpenSSL Advisory] Denial of Service in ASN.1 parsing

2003-11-04 Thread Mark J Cox
-BEGIN PGP SIGNED MESSAGE- OpenSSL Security Advisory [4 November 2003] Denial of Service in ASN.1 parsing == Previously, OpenSSL 0.9.6k was released on the 30 September 2003 to address various ASN.1 issues. The issues were found using a test suite from NI

crlDistributionPoints with DirName value?

2003-11-04 Thread Mike Acar
Hi, (Sorry if some of my terminology is wrong - What I understand of X.509 certs I've picked up working with OpenSSL to set up IPSec and SSL tunnels.) I've been working on getting SSH Sentinel to talk to the Linux FreeS/WAN IPSec implementation, and am at the stage where I want to get Sentinel t

How to set Issuing Distribution Point in CRL

2003-11-04 Thread Thitikorn Trakoonsirisak
Dear all, I try to search documents in all OpenSSL mailing list about setting Issuing Distribution Point in CRL and I found a conversation that talk about iDP (http://marc.theaimsgroup.com/?l=openssl-users&m=105015263429749&w=2). Dr Stephen N. Henson said "iDP AFAICS doesn't need additional s