Re: Can "openssl smime" decrypt signature string?

2009-02-21 Thread ohaya
Hi, For the record, I was able to figure out my original (non-openssl-related) problem. It was that I was getting some extra whitespace or non-visible characters in the message, which was causing the signature verification to fail. Jim oh...@cox.net wrote: > Hi Kyle, > > I also have t

Re: Can "openssl smime" decrypt signature string?

2009-02-21 Thread ohaya
Hi Kyle, I also have the hash (it's in the DigestValue of the assertion). I've been having some problem with some code that I've been working on, and so I was hoping that there was a way to take the signature string and somehow put it into a file that would "look" like it was a S/MIME message,

Re: Can "openssl smime" decrypt signature string?

2009-02-21 Thread Kyle Hamilton
A "signature" is a hash (SHA-1, SHA-2, SHA-3, SHA-128, SHA-256, SHA-384, SHA-512 as examples -- and deprecated methods including MD2, MD4, and MD5) over content, encrypted with the private key which belongs to a public key which the verifier obtains through some trusted mechanism. The signature st

Can "openssl smime" decrypt signature string?

2009-02-21 Thread ohaya
Hi, I have the signature string from a signed SAML assertion. I also have the private key file and cert file. I'm trying to decrypt the signature string, so that I can try to see how it compares to the digest in the assertion. I think that "openssl smime" should be able to do this, using some

Re: Creating a CA cert with explicit start/end date

2009-02-21 Thread Oliver Martin
Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin: > I'm trying to create a CA cert with explicit notBefore and notAfter > dates. I've tried to follow the advice given in an old mailing list > post [1], but haven't been successful so far. I've found a solution for that part: openssl genrs

RE: Problems with sending RSA public keys.

2009-02-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Mrigank > Sent: Friday, 20 February, 2009 03:11 > I wanted to write an application wherein I had to "send" a server's public key (RSA) to a client. > So I generated the RSA keys with RSA_generate_key and checked it with RSA_check_key. > I then

RE: static openssl on mingw (undefined reference on bss_sock.c)

2009-02-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Tomasz Kolaj > Sent: Friday, 20 February, 2009 05:17 > dllwrap -o libpq.dll --dllname libpq.dll --def libpqdll.def > -L../../../src/port -L/local/ssl/lib -lcrypto -lshfolder -leay32 > -lssleay32 - > lgdi32 -lwsock32 -lwst -lws2_32 -lmswsock

RE: Decryption does not yield the same as Encryption

2009-02-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Rafel Coyle > Sent: Tuesday, 17 February, 2009 21:54 > To: openssl-users@openssl.org > Subject: Re: Decryption does not yield the same as Encryption > > > I sent this snippet out a few days ago, but I haven't received an > adequate response. I

Re: PKCS7 (time.certum.pl)

2009-02-21 Thread Dr. Stephen Henson
On Sat, Feb 21, 2009, Jan F. Schnellbaecher wrote: > Hi, > > I try to verify a signature made by time.certum.pl. This is what I did: I > obtain > a pkcs7 signature using wget. When I look into the binary data that will be > returned I can find the given sha1 checksum, but the verification fails.

PKCS7 (time.certum.pl)

2009-02-21 Thread Jan F. Schnellbaecher
Hi, I try to verify a signature made by time.certum.pl. This is what I did: I obtain a pkcs7 signature using wget. When I look into the binary data that will be returned I can find the given sha1 checksum, but the verification fails. 1) What did I miss? 2) How can I extract the signed attributes