Re: OpenSSL with OpenPGP

2010-06-05 Thread Mounir IDRASSI
Hi, I have written a small program that demonstrates how an RSA public key can be extracted from an OpenPGP public key file and used in OpenSSL. You can get the source from the following link : http://www.idrix.fr/Root/Samples/pgp_pubkey.c I hope this will help. Cheers, -- Mounir IDRASSI IDRIX ht

Re: NameConstraints are not being applied (or I don't know how to enforce them?)

2010-06-05 Thread jeff
I did a little debugging and managed to fix on my end. The issue is now resolved. There's nothing wrong with OpenSSL1.0.0's handling of nameConstraints. It just Rocks! For those who might run into the same problem i'll explain more. Debugging revealed the problem to be in the following area:

Re: NameConstraints are not being applied (or I don't know how to enforce them?)

2010-06-05 Thread jeff
I tested this openssl 1.0.0. Error 34 is gone now but now error 47 shows up which shows the name constraint is being applied. However, it's being applied or verified in a way that I don't understand. To show you I have simplified the test. Generating only one end certificate and specifying one very

Re: {Spam?} Invalid signature with PKCS11

2010-06-05 Thread Fares Gianluca
Thanks TIM, it works as expected. On 6/5/10 2:20 AM, "Tim Hudson" wrote: > On 5/06/2010 12:56 AM, Fares Gianluca wrote: >> Hi all, >> I¹m try to figure out why my X509_REQ signature is always not verified. >> I¹m using openssl-1.0.0 and gclib.dll provided by gemalto. > > It is helpful to actu