RE: Private Key Type and PEM Length

2006-07-03 Thread Wu, Sonia X (Sonia)
Marek, Thanks a lot. I think I was improperly using memory. After I cleaned up some unused RSA_new, EVP_PKEY_new etc.., it started working. Your test program helped me learn openssl error logging. One more question before I move to new agenda. Is siglen RSA_size? Should rsa_pv and rsa_pb the

RE: Private Key Type and PEM Length

2006-07-03 Thread Marek Marcola
Hello, > This is what I up to, > > $ openssl genrsa -out private.pem 2048 > $ openssl rsa -in private.pem -out public.pem -pubout > > to gen the private & public keys > > pvk_fd = fopen("private.pem","r"); > rsa_pv = PEM_read_RSAPrivateKey(pvk_fd,&rsa_pv,NULL,NULL); > ret = RSA_sign(NID_md5,tes

RE: Private Key Type and PEM Length

2006-07-03 Thread Wu, Sonia X (Sonia)
This is what I up to, $ openssl genrsa -out private.pem 2048 $ openssl rsa -in private.pem -out public.pem -pubout to gen the private & public keys pvk_fd = fopen("private.pem","r"); rsa_pv = PEM_read_RSAPrivateKey(pvk_fd,&rsa_pv,NULL,NULL); ret = RSA_sign(NID_md5,testString,15,authMsg,siglen,r

Re: unable to get local issuer certificate

2006-07-03 Thread snacktime
On 7/3/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Mon, Jul 03, 2006, snacktime wrote: > Well I figured out what's happening. The reason windows was > complaining about the certificate is that the subjectkeyidentifier was > getting set to the same value as authoritykeyidentifier. Fire

RE: Private Key Type and PEM Length

2006-07-03 Thread Marek Marcola
Hello, > I want to read public part of RSA. > The input file is PEM format file generated by openssl genrsa > for private and openssl rsa for public. > Do you mean this is not the correct format for PEM_read_RSAPublicKey? Yes, PEM_read_RSAPublicKey require PKCS#1 but if public key was generated w

RE: Private Key Type and PEM Length

2006-07-03 Thread Wu, Sonia X (Sonia)
I want to read public part of RSA. The input file is PEM format file generated by openssl genrsa for private and openssl rsa for public. Do you mean this is not the correct format for PEM_read_RSAPublicKey? Sonia -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behal

RE: Private Key Type and PEM Length

2006-07-03 Thread Marek Marcola
Hello, > I tried the PEM_read_RSAPrivateKey and PEM_read_RSAPublicKey pair. > PEM_read_RSAPrivateKey seems work fine. > PEM_read_RSAPublicKey failed. > By tracing, it failed in BIO_gets(), returning 0. Any idea? PEM_read_RSAPublicKey reads from PKCS#1 ASN1 structure public part of RSA key (n,e).

RE: Private Key Type and PEM Length

2006-07-03 Thread Wu, Sonia X (Sonia)
Thank you Marek, I tried the PEM_read_RSAPrivateKey and PEM_read_RSAPublicKey pair. PEM_read_RSAPrivateKey seems work fine. PEM_read_RSAPublicKey failed. By tracing, it failed in BIO_gets(), returning 0. Any idea? Thanks. Sonia -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: Private Key Type and PEM Length

2006-07-03 Thread Sudhir Voona
Thanks Marek,I Got the function Wanted !!--sudhir

Re: Private Key Type and PEM Length

2006-07-03 Thread Marek Marcola
Hello, > I think the modulus field of the rsa_t / dsa_t structure gives the > Key Length in Bytes, > am i correct ?? Oh, you mean size of RSA key, try RSA_size(); (and yes - this is size of modulus) Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __

Re: Private Key Type and PEM Length

2006-07-03 Thread Sudhir Voona
Hi,     I think the modulus field of the rsa_t / dsa_t structure gives the Key Length in Bytes,    am i correct ??--SudhirOn 7/3/06, Sudhir Voona <[EMAIL PROTECTED]> wrote: Hi,   Thanks for the suggestion Marek.   As posted earlier, my requirement is to know the Private Key Type and its PEM Length

Re: Private Key Type and PEM Length

2006-07-03 Thread Sudhir Voona
Hi,   Thanks for the suggestion Marek.   As posted earlier, my requirement is to know the Private Key Type and its PEM Length.   EVP_PKEY would give me  the private key Type and not its PEM Length.   How do i extract the PEM Length of the EVP_PKEY  ?     Is there an API for getting the   EVP_PKEY

Re: Openssl "decryption failed" error

2006-07-03 Thread Anoop Achutan
Hi Jan,  I'm using openssl 0.9.8b. The one shipped with S10 doesn't have thread support. Resin required to compile openssl with thread option.Thanks,AnoopOn 7/3/06, Jan Pechanec <[EMAIL PROTECTED]> wrote: On Mon, 3 Jul 2006, Anoop Achutan wrote:> Hi,> I'm trying to set up Resin stadalone web serve

Re: Openssl "decryption failed" error

2006-07-03 Thread Jan Pechanec
On Mon, 3 Jul 2006, Anoop Achutan wrote: > Hi, > I'm trying to set up Resin stadalone web server with openssl support, in a > sparc 64 bit server running Solaris 10. > I use the following configure options : > ./Configure shared threads solaris64-sparcv9-cc > After successful compilation of openss

Re: Openssl "decryption failed" error

2006-07-03 Thread Kyle Hamilton
Does openssl s_client have any problems? -Kyle H On 7/3/06, Anoop Achutan <[EMAIL PROTECTED]> wrote: Hi, I'm trying to set up Resin stadalone web server with openssl support, in a sparc 64 bit server running Solaris 10. I use the following configure options : ./Configure shared threads solar

Openssl "decryption failed" error

2006-07-03 Thread Anoop Achutan
Hi,  I'm trying to set up Resin stadalone web server with openssl support, in a sparc 64 bit server running Solaris 10.I use the following configure options : ./Configure shared threads solaris64-sparcv9-cc After successful compilation of openssl library, I compiled Resin. When I access a https url

Re: unable to get local issuer certificate

2006-07-03 Thread Dr. Stephen Henson
On Mon, Jul 03, 2006, snacktime wrote: > Well I figured out what's happening. The reason windows was > complaining about the certificate is that the subjectkeyidentifier was > getting set to the same value as authoritykeyidentifier. Firefox > didn't pick up on this, but windows did.I was cre

Re: RSA sign/verify padding modes

2006-07-03 Thread Marek Marcola
Hello, > Also i'm planning to add support for other padding modes like > RSA_PKCS1_OAEP_PADDING by manually adding the padding and using > RSA_NO_PADDING when calling the function. Are there any security > implications of doing this? No, this is the way of doing this, but security implications shou

Re: unable to get local issuer certificate

2006-07-03 Thread snacktime
Well I figured out what's happening. The reason windows was complaining about the certificate is that the subjectkeyidentifier was getting set to the same value as authoritykeyidentifier. Firefox didn't pick up on this, but windows did.I was creating the subjectkeyidentifier before the subje

RSA sign/verify padding modes

2006-07-03 Thread K.S.Sreeram
Hi All I'm trying to use RSA_private_encrypt/RSA_public_decrypt for low level access to sign/verify operations. The documentation for these functions state that RSA_PKCS1_PADDING and RSA_NO_PADDING are the only supported padding modes, whereas when i look at the source code (0.9.8b:crypto\rsa\rsa