Re: Even CA's make mistakes..

2005-01-20 Thread Alok
> >> > > > >ok per block, it is still "a function (on a set) = output" > > > > > Sorry, I don't understand your analogy with rubik's cube (most possibly > because that's just not the way my brain's working... ;)) :o) > > A block cypher has a defined output for a defined input, so if you > encode

Re: Even CA's make mistakes..

2005-01-20 Thread Bernhard Froehlich
Alok wrote: I'm no expert, so please verify anything that you don't trust here. Block algorithms typically don't operate the way a cube operates. They are named a block algorithm because they operate on a single block in, single block out. ok per block, it is still "a function (on a set) = ou

Re: Even CA's make mistakes..

2005-01-20 Thread Alok
> I'm no expert, so please verify anything that you don't trust here. > Block algorithms typically don't operate the way a cube operates. They > are named a block algorithm because they operate on a single block in, > single block out. ok per block, it is still "a function (on a set) = output"

Re: Even CA's make mistakes..

2005-01-20 Thread Andrew Mann
I'm no expert, so please verify anything that you don't trust here. Block algorithms typically don't operate the way a cube operates. They are named a block algorithm because they operate on a single block in, single block out. They have the same starting point and rules for each block. Cert

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Sorry, just worked it out... again... X509_verify_cert_error_string(). On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: > Well, I just added this : > > SSL_get_verify_result( ssl ); > > And with the result being one of the return codes listed here : > http://www.openssl.org/docs/apps/verify.html#

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Errm. Except that returns a long, how do I map that to the definitions listed in include/openssl/x509_vfy.h in order to return something more useful than '20' ? On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: > Well, I just added this : > > SSL_get_verify_result( ssl ); > > And with the result b

Re: Simple cert verification code saught.

2005-01-20 Thread Naoki
Well, I just added this : SSL_get_verify_result( ssl ); And with the result being one of the return codes listed here : http://www.openssl.org/docs/apps/verify.html#DIAGNOSTICS Looks like I've answered myself :) On Fri, 2005-01-21 at 14:04 +0900, Naoki wrote: > Hi all, > > I'm writing a little

Simple cert verification code saught.

2005-01-20 Thread Naoki
Hi all, I'm writing a little code snippet to just check the validity of a certificate ( and the entire chain preferably ). Whilst using the example code it's easy enough to make the connection and setup a session but being a newbie I'm not clear on what/how I should verify the certs. So far.

Re: Even CA's make mistakes..

2005-01-20 Thread Alok
Maybe am a bit off my head but given a rubik cube, and a fixed axes of orientation defining it in space, are there more than one ways to get the cube into a particular formation? (not that I can solve the cube manually either...) Are block algorithms not closer to tensors? sorry if this soun

AW: Certificate Chain

2005-01-20 Thread R. Markham
Hi Shaun, I use certificate chain for Apache. Herefor I only concatenate the files. Regards Richard -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Shaun Lipscombe Gesendet: Donnerstag, 20. Januar 2005 17:14 An: openssl-users@openssl.org Betreff:

Custom BIO

2005-01-20 Thread Paul Wakefield
Hi,   I need to write a custom BIO to integrate OpenSSL into my custom comms/proxy library.   Could anyone point me in the right direction or make any suggestions as to the best way to go about this?   Kind Regards,   Paul

User specified cert in an httpsClient

2005-01-20 Thread Patrick Ritchie
Hi, I am working on a project that involves modifying an existing httpsClient to support user specified certs. The cert is provided in PEM format by a 3rd party. At first this seemed rather trivial, but the changes I made don't seem to work. Here is the code I am using: if (flCertString) /* is

Re: Smart cards and private keys

2005-01-20 Thread Charles B Cranston
There are very good reasons NOT to allow extraction of a private key from a crypto device. Investigate the vendor's provisions for either backing up or cloning a device. It is possible that the device will export its private key under some kind of protection (like encryption with some "master key

Re: Smart cards and private keys

2005-01-20 Thread Pablo J Royo
Title: Smart cards and private keys OpenSSL does not manage that directly, but it is possible: you will have to create a set of functions using your own software, let's say using Windows CryptoAPI to access smartcard , and then suply that callbacks to the RSA_METHOD structure.   - Ori

Re: Smart cards and private keys

2005-01-20 Thread Nils Larsch
Milan Tomic wrote: Hi, Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? in general it's not possible to extract the private key Cheers, Nils __

Re: Smart cards and private keys

2005-01-20 Thread PAILLETTE Frédéric
Milan Tomic wrote: Hi, Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? Thank you in advance, Milan Hi ! I don't know if it concerns really OpenSSL. I know that few smart cards can generate key pairs but

Smart cards and private keys

2005-01-20 Thread Milan Tomic
Title: Smart cards and private keys Hi,     Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? Thank you in advance, Milan