How to create SSLv3 certs

Hi, Can you please let me know how to create SSLv3 certs using openSSL? I am able to create v2 certs but not v3 certs. Thanks Praveen

Problem using SSL_CTX_use_certificate_file(); Throws Illegal instruction

Hi All, I am new to OPenssl programming. I have searched the previous posts in the forum before posting my problem. I am trying to execute some sample applications given with Openssl code (openssl-0.9.8) to get basic understanding of how Openssl works. Below is the code sample that I have

PKCS7 - SubjectKeyIdentifier CHOICE in SignerIdentifier fails?

Hello, We're having a pkcs7 file that gives the following error when being parsed: 9872:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:.\crypto\asn1\tasn_dec.c:1320 (openssl-1.0.0-beta3, but same prob in openssl 0.9.8g) Here's part of the file dump, the prob seems to occur

extract components from public key

Hello, what kind of informations can be extracted from the public_key ? In particular, i generate it like this: openssl rsa -pubout -in private_key.pem -out public_key.pem I know that from a private_key it's possible to extract many informations (as the modulus, or any other info (doing openssl

Re: extract components from public key

I think I've found the answer myself: openssl rsa -text -noout -modulus -pubin -in public_key.pem or openssl rsa -noout -modulus -pubin -in public_key.pem On Mon, Mar 22, 2010 at 12:59 PM, Valerio Schiavoni valerio.schiav...@gmail.com wrote: Hello, what kind of informations can be extracted

Re: PKCS7 - SubjectKeyIdentifier CHOICE in SignerIdentifier fails?

On Mon, Mar 22, 2010, Stef Hoeben wrote: Hello, subjectKeyIdentifier [0] SubjectKeyIdentifier } Could it be that the SubjectKeyIdentifier CHOICE isn't supported here, that the parser expects a IssuerAndSerialNumber only? Yes the SKID option is not part of the PKCS#7 standard so

Re: How to create SSLv3 certs

On 21-Mar-10, at 9:12 PM, Bejjam, Praveen wrote: Hi, Can you please let me know how to create SSLv3 certs using openSSL? I am able to create v2 certs but not v3 certs. The version of the SSL protocol is completely independent from the version of X.509 of the certificates used during the

Need help on: openssl pkcs12 --- avoid or in batch mode

Hi Dr Stephen Henson, I really could not solve this issue and need your help. When I run openssl pkcs12 -in new.crt -inkey new.key -certfile .CA/cacert.pem -out new.p12 -export -name xx It will prompt user for: Enter Export Password: Verifying - Enter Export Password: Is anyway I can

Re: Need help on: openssl pkcs12 --- avoid or in batch mode

Hi John, I have already answered your question on the list two days ago. Here is what I wrote : To avoid the password prompt, you can add the argument -password pass: to the command line. This will use an empty password for the PKCS12 file. For a non empty value, for example 1234, use

Re: Problems with SSL_shutdown() and non blocking socket

On Fri, Mar 12, 2010, Darryl Miles wrote: int rc = SSL_shutdown(ssl); /* BEGIN - INSERT THIS CODE AFTER EVERY SSL_shutdown() INVOCATION IN YOUR CODE */ if(rc == -1) { int ssl_errno; SSL_get_error(ssl, ssl_errno); if(ssl_errno == SSL_ERROR_WANT_READ || ssl_errno ==