How to store Multiple Certificates in PKCS12 File.

2008-01-28 Thread Milinda Pathirage
Hi all, Please apologize me if this is a dumb question. I am currently involved in project which I need to create key store which has functions like Java Key Store in C. My requirements is to store several X509 certificates with owner's certificate and private key in a pkcs12 file. And my programmi

Re: FIPS 1.1.2/1.2 validation progress

2008-01-28 Thread Kyle Hamilton
As has been mentioned numerous times by Steve Marquess, the FIPS validation process is fraught with peril. It is entirely, from what I gather, rather like playing Chutes & Ladders with a constantly- changing board. There cannot be any effective estimate of when it may be done; the best e

RE: site encryption

2008-01-28 Thread David Schwartz
> Hi there > I am trying to integrate a paypal shopping cart into my site and paypal > recommend getting a security certificate from your website. > Their site tells users to find the WIN32 section of your site to get > the source for the certificate but I cant find that section anywhere. I goog

Re: site encryption

2008-01-28 Thread Victor Duchovni
On Fri, Jan 25, 2008 at 11:58:13AM +1100, Christine Berry wrote: > I am trying to integrate a paypal shopping cart into my site and paypal > recommend getting a security certificate from your website. Their site tells > users to find the WIN32 section of your site to get the source for the > certi

msvc ver.8

2008-01-28 Thread Don Morgan
Hello. I have to implement a small section of openssl (specifically the RSA, SHA, MGF portions) for an embedded application. I was hoping to be able to first build the app in windows and tailor it to my target- this would allow me to debug on a platform a little more stable than our current target

SSL from the command line

2008-01-28 Thread Rafel Coyle
Can you provide some direction on using SSL security from the command line? If this involves the use of Stunnel that ok, but I cannot determine the relationship between the two. I want to use the command line to enable us to send messages from an existing application over the internet to a se

site encryption

2008-01-28 Thread Christine Berry
Hi there I am trying to integrate a paypal shopping cart into my site and paypal recommend getting a security certificate from your website. Their site tells users to find the WIN32 section of your site to get the source for the certificate but I cant find that section anywhere. Eg: If you are

PEM_read_bio:bad base64 decode:pem_lib.c

2008-01-28 Thread Artur Jasowicz
I am trying to decrypt a private key and am running into following error: $ openssl rsa -in my.key -out my.key.dec unable to load Private Key 28356:error:0906D064:PEM routines:PEM_read_bio:bad base64 decode:pem_lib.c:753: No references in google for this particular message. Any help apprecia

Re: whySSL_CTX_new () returns null pointer

2008-01-28 Thread Marek . Marcola
Hello, > I tried to compile & run this program for secure conection > establishment. when i tried to compile and run this > SSL_CTX_new(SSLv23_client_method() returns only null pointer .how can > i avoid this error > > > #include "stdio.h" > #include "string.h" > > int main() > { > BIO * bio

openSSL SSL_accept problem on AIX 5.3

2008-01-28 Thread Ricardo Vazquez
Hi there, I am having some issues with a server application that is based on openSSL. Here are the details: The server application uses OpenSSL ver. 0.9.7g and runs on AIX 5.3. Sometimes when it processes a client request the SSL_accept() function returns an error -1 and the SSL_get_error() func

Doubt with VeriSign certificate and client-server: must I install it on server?

2008-01-28 Thread tarmstrong
Hi. Using cURL with Linux, I want to make a webservice request to a remote server which requires an X509 cert. I got a Trial SSL Certificate by Verisign and obtained three files which I copied into my machine (client): - ssl.key (private key, generated by my server) - verisign.crt (SSL certifica

SHLIB_VERSION_NUMBER != soname ??

2008-01-28 Thread Rex Dieter
See also: https://bugzilla.redhat.com/show_bug.cgi?id=429846 Due to licensing issues, kdelibs dlopens openssl instead of linking. In order to make this work, kdelibs needs to know the soname of both libcrypto and libssl. Upstream kdelibs *tries* to use libssl.so.SHLIB_VERSION_NUMBER (and libcryp

FIPS 1.1.2/1.2 validation progress

2008-01-28 Thread Dan Mathews
Does anyone have an update on how FIPS 1.1.2 and/or 1.2 are progressing? Are there any guesstimates on when either might be officially "blessed"? Dan Mathews Software Developer Configuresoft, Inc.

Re: d2i_X509 segmentation violation

2008-01-28 Thread Michael S. Zick
On Wed January 23 2008 00:37, Md Lazreg wrote: > Hi, > > I have the following code: > > --- > unsigned char SERVER_certificate[1406]={ > 0x30,0x82,0x05,0x7A,0x30,0x82,0x03,0x62,0x02,0x

whySSL_CTX_new () returns null pointer

2008-01-28 Thread balaji ethiraja
I tried to compile & run this program for secure conection establishment. when i tried to compile and run this SSL_CTX_new(SSLv23_client_method() returns only null pointer .how can i avoid this error #include "stdio.h" #include "string.h" int main() { BIO * bio; SSL * ssl; SSL_CTX *

Re: Copying an EVP_CIPHER_CTX

2008-01-28 Thread Victor Duchovni
On Mon, Jan 28, 2008 at 01:23:27PM +0100, Dr. Stephen Henson wrote: > This is really an omission in the library and there should be a way to copy an > EVP_CIPHER_CTX. In the case of an ENGINE the data might be (for example) a > reference to a handle which, if copied, will result in two linked vers

Re: Certificate verification in C

2008-01-28 Thread Bobby Krupczak
Hi! >Now I would like to write a C program doing the same. For this, I used >Viega and Messier's Secure Programming Cookbook, recipe 10.5 (BTW, I >am not sure the workaround they propose there is still necessary with >latest versions of openssl any hint welcome). I used the exampl

Re: openssl-0.9.8g on Solaris core dumps?

2008-01-28 Thread Jorgen Lundman
Same package, compiled by SunProCC, the same way works just fine. Jorgen Lundman wrote: I have tried these versions: drwxr-xr-x 22 root root1536 Nov 30 15:00 openssl-0.9.8b drwxr-xr-x 22 root root1536 Nov 30 14:54 openssl-0.9.8c drwxr-xr-x 22 root root15

Re: Copying an EVP_CIPHER_CTX

2008-01-28 Thread Dr. Stephen Henson
On Mon, Jan 28, 2008, Sam Elstob wrote: > Hello > > We recently upgraded the version of OpenSSL used in our application from > 0.9.6c to 0.9.8e. Everything is fine except I have found that some of our > code was using memcpy() to 'save' and 'restore' EVP_CIPHER_CTX structures. > I understand now

Re: Issues with OpenSSL implementation on Windows NT service application

2008-01-28 Thread Bobby Krupczak
Hi! >The same code does not work i.e. opening the certificate files, when I >try to execute from a Windows NT Service (Ours is an application >running as a service and that service in turn acts as a TCP server >which will open SSL ports for communication with client) > >The sa

Re: OpenSSL Usage

2008-01-28 Thread Alex Samad
On Tue, Jan 22, 2008 at 09:34:01PM +1100, Josh Royal wrote: > I would like to know if it is possible to generate a certificate in which I > can change the certificate bit eg. Make a certificate which are 40 bits, 128 > bits (which I can do) or 256 bits which is what I would like to. I also know

Copying an EVP_CIPHER_CTX

2008-01-28 Thread Sam Elstob
Hello We recently upgraded the version of OpenSSL used in our application from 0.9.6c to 0.9.8e. Everything is fine except I have found that some of our code was using memcpy() to 'save' and 'restore' EVP_CIPHER_CTX structures. I understand now from looking at the OpenSSL code that this use was i

Re: rsa oaep mgf1p

2008-01-28 Thread Marek . Marcola
Hello, > Anyone can send a reference to the rsa-oaep-mgf1p algorithm? Look at PKCS#1 document from RSA. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> __ OpenSSL Project http://www.openssl.org

OpenSSL Usage

2008-01-28 Thread Josh Royal
I would like to know if it is possible to generate a certificate in which I can change the certificate bit eg. Make a certificate which are 40 bits, 128 bits (which I can do) or 256 bits which is what I would like to. I also know how to make a private key with different bits so you don't need to

Issues with OpenSSL implementation on Windows NT service application

2008-01-28 Thread Parag Jhavery
Hi Friends, I am facing a trivial problem with OpenSSL implementation on Windows platform. To avoid the compilation of source code, I am using the OpenSSL installation for Windows platform, available from shininglightpro.com (http://www.shininglightpro.com/download/Win32OpenSSL-0_9_8g.exe)(Win

rsa oaep mgf1p

2008-01-28 Thread majorsoul
Anyone can send a reference to the rsa-oaep-mgf1p algorithm? thanks, -majorsoul -- View this message in context: http://www.nabble.com/rsa-oaep-mgf1p-tp14980616p14980616.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ___