RE: EVP_CipherInit_ex because cipher->do_cipher is NULL

2008-08-11 Thread Ambarish Mitra
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ger Hobbelt Sent: Friday, August 08, 2008 3:54 PM To: openssl-users@openssl.org Subject: Re: EVP_CipherInit_ex because cipher->do_cipher is NULL On Thu, Aug 7, 2008 at 8:13 AM, Ambarish Mitra <[EMAIL PROTECTE

openssl 0.8.9h sha256

2008-08-11 Thread Rafiqul Ahsan
I see an error like below when trying to use EAP_TLS/TTLS authentication with Certs that has Signature Algorithm: sha256WithRSAEncryption . Can anybody tell me why SSL does not like the TLS session ? I would appreciate your help. here is the radiusd -X log: ++[suffix] returns noop rlm_eap: EAP

Re: Device with both 1024-bit and 2048-bit RSA keys --- OpenSSL support?

2008-08-11 Thread altan
(sorry that previous one looked so terrible. Here it is with plain text) Can a single OpenSSL context support both 1024-bit and 2048-bit RSA at the same time? For example, if a client device has both 1024-bit and 2048-bit RSA keys, will the SSL/TLS handshake allow the server to pick whether

Device with both 1024-bit and 2048-bit RSA keys --- OpenSSL support?

2008-08-11 Thread altan
Can a single OpenSSL context support both 1024-bit and 2048-bit RSA at the same time?  For example, if a client device has both 1024-bit and 2048-bit RSA keys, will the SSL/TLS handshake allow the server to pick whether 1024 or 2048-bit RSA should be used? I do not believe this works bu

Re: PEM_read PrivateKey gives illegal seek

2008-08-11 Thread Matthias Barmeier
Hi, ok, sorry for not understanding what happens. The call OpenSSL_add_all_algorithms() was missing. After adding it everything seems to work perfect. Shouldn't this be mentioned on the man page of the PEM functions ? Ciao Matthias _

RE: PEM_read PrivateKey gives illegal seek

2008-08-11 Thread David Schwartz
> > Hi, > > > > You should you generate an X509 certificate and then try to read the > private key with PEM_read_PrivateKey. What does the key that you are > trying to load look like? Could it be that you are reading in the > certificate in place of the key? > > > > Also, I don't know much about p

Re: PEM_read PrivateKey gives illegal seek

2008-08-11 Thread Matthias Barmeier
> Hi, > > You should you generate an X509 certificate and then try to read the private key with PEM_read_PrivateKey. What does the key that you are trying to load look like? Could it be that you are reading in the certificate in place of the key? > > Also, I don't know much about perror, butOpenSSL

changing private key pass

2008-08-11 Thread Sergio
Hi people, it is posible to change pass phrase of a private key into a PKCS#12 file? Or, in other case, having private key into a separate file in PEM format. Thanks __ OpenSSL Project http://w

RE: PEM_read PrivateKey gives illegal seek

2008-08-11 Thread Matthias Barmeier
... >> >> Can anyone tell me why this does not work ? > > Most likely the file you're reading doesn't contain a private key in a > format that PEM_read_PriveKey likes. But the best way to tell is to use > more > sensible error output code. For example, call ERR_print_errors_fp(stderr). > The 'perro

X509_CRL_dup() problem ?

2008-08-11 Thread delcour.pierre
Hello everyone, I try to add a certificate in a CRL. To do that, i use a X509* cert, a X509_CRL* crl with this algorithm : X509_REVOKED *r = NULL; r = X509_REVOKED_new(); r->serialNumber = X509_get_serialNumber(cert); if(!crl->crl->revoked) ci->revoked = sk_X509_REVOKED_new(X509_REVOKED

RE: PEM_read PrivateKey gives illegal seek

2008-08-11 Thread David Schwartz
> Hi, > > I generated a x509 certificate. When I try to read the private key with > PEM_read_PrivateKey I always get NULL as return value and when calling > perror I get an Illegal seek. > > Here is my code: > > FILE *pemKeyFile; > EVP_PKEY *privKey; > > pemKeyFile = fopen ("/hom

PEM_read PrivateKey gives illegal seek

2008-08-11 Thread Matthias Barmeier
Hi, I generated a x509 certificate. When I try to read the private key with PEM_read_PrivateKey I always get NULL as return value and when calling perror I get an Illegal seek. Here is my code: FILE *pemKeyFile; EVP_PKEY *privKey; pemKeyFile = fopen ("/home/user/testkey.