how do i set OCSP test server with OPENSSL

hi all, i'v been setting OCSP test server with OPENSSL. is possible make of OCSP server with OPENSSL's command line tool? if so, below mesage is supported by OPENSSL Doc. "openssl ocsp -index demoCA/index.txt -port -rsigner rcert.pem -CA demoCA/cacert.pem -text -out log.txt" que

Re: How to set my custom information in certificate

Yes, you can add custom extension info through configuring openssl.cnf and with right openssl command. You mean that I should write down my custom information in openssl.cnf, and then load the custom information to extension of proxy by openssl command, isn't it? If I want to do this job by s

Re: Converting ASN1_TYPE to printable string...

hi chaz i worked on it sometime last year and i have written some little howto's on this. maybe it could help you http://tanish2k.googlepages.com/asn1any.pdf rgrds saurabh On 7/12/07, Chaz. <[EMAIL PROTECTED]> wrote: I was wondering if anyone knows how to convert an ASN1_TYPE to a printable

Re: How to set my custom information in certificate

Yes, you can add custom extension info through configuring openssl.cnf and with right openssl command. Feiyi On 7/5/07, Ian jonhson <[EMAIL PROTECTED]> wrote: Hi all, Did anyone try to set some custom information in certificate? For example, if I want to set a simple string, "This is my proxy

Re: PEM returns null

Jim, Thanks for confirming that for me. I added the formatting requirements to my private key assembly function and everything appears to be working great now. I am going to see if I can send a little something your way as a thank you. Thanks again for ALL of your help. On 7/11/07, Jim Fox <[

Converting ASN1_TYPE to printable string...

I was wondering if anyone knows how to convert an ASN1_TYPE to a printable string? Any help would be greatly appreciated. Peace, Chaz __ OpenSSL Project http://www.openssl.org User Support Mailing L

RE: PEM returns null

> What I am trying to accomplish is create a remote application with an > embedded private key that can securely retrieve a small block of data. > > I started by generating a private key without a password: > > openssl genrsa -out private.pem 2048 > > I then used various methods to hide the key in

Re: PEM returns null

What I am trying to accomplish is create a remote application with an embedded private key that can securely retrieve a small block of data. Is there somewhere a public key to go with this private key? I assume the RSA header and footer line are unnecessary? Bad assumption. Both are part

PEM returns null

Ok, so I got all the coding "finished". However, the call to PEM_read_bio_RSAPrivateKey() is returning a null pointer. What I am trying to accomplish is create a remote application with an embedded private key that can securely retrieve a small block of data. I started by generating a private ke

compiling openssl-0.9.9dev on AIX5.3 64bit

genpkey.o s_server.o s_client.o speed.o s_time.o apps.o s_cb.o s_socket.o app_rand.o version.o sess_id.o ciphers.o nseq.o pkcs12.o pkcs8.o pkey.o pkeyparam.o pkeyutl.o spkac.o smime.o rand.o engine.o ocsp.o prime.o ts.o" \ LIBDEPS=" $LIBRARIES " \ link_app.$

Re: openssl function to convert pkcs#8

I have another problem now, I want to convert a pkcs#1 to a pkcs#8 using the openssl function. I noticed that there is a "PEM_write_PKCS8PrivateKey()", but I believe it produces a pkcs#1 public key, so how do i get a pkcs8 public key? pkcs8 is just for private keys. There isn't any pkcs8 p

Re: openssl function to convert pkcs#8

Hi, I have another problem now, I want to convert a pkcs#1 to a pkcs#8 using the openssl function. I noticed that there is a "PEM_write_PKCS8PrivateKey()", but I believe it produces a pkcs#1 public key, so how do i get a pkcs8 public key? thanks! On 6/27/07, Dr. Stephen Henson <[EMAIL PROTECTE

Re: Keystore password

Hi, Kaushal, I assume you're talking about java. There's a java utility here that can convert a "java keystore file" into an OpenSSL-friendly PEM file: http://juliusdavies.ca/commons-ssl/utilities.html java -cp not-yet-commons-ssl-0.3.8.jar org.apache.commons.ssl.KeyStoreBuilder Try the 3rd o

openssl function to produce pkcs#8 public key?

Hi there, I am trying to generate a rsa private and public key in pkcs#8 format, but I believe the funciton "PEM_write_PKCS8PrivateKey()" produces a public key in pkcs#1 format. How do I produce a public key in pkcs#1 format using the openssl function? I was following reference at the openssl

Re: How to verify a certificate against several others

Hi Goetz, Thx again for your help, I finally found what was going wrong with my code. I was setting a flag to force CRL verification but I did not have a CRL stored for the CA. Now everything is running well. Thx again for your help. Regards ! -- Florian Manach NUMLOG [EMAIL PROTECTED] (+33

Extensions while signing

Hello All, I think this one should be easy for you guys, but for me (as a newbie) is quite hard to achieve.. I've been searching on google, openssl docs and archives and found something similar for what I want to do, but I think it's no enough. Well, what I need is to create a particular CA f

public dns server

I need address of a secure public DNS server it will be even better to get a secure gateway or a vpn connection. Can anybody help ? On 7/11/07, Arvind Sachdeva <[EMAIL PROTECTED]> wrote: I need address of a secure public DNS server it will be even better to get a secure gateway or a vpn connec

Re: Keystore password

I need address of a secure public DNS server it will be even better to get a secure gateway or a vpn connection. Can anybody help ? On 7/11/07, Kaushal Shriyan <[EMAIL PROTECTED]> wrote: Hi, We would like to extract the un-signed SSL certificate used by the application and its keystore passwo

Keystore password

Hi, We would like to extract the un-signed SSL certificate used by the application and its keystore password. Could you please provide us with the steps do this specially the keystore password? Thanks and Regards Kaushal