B64 Decode issues (C)

I'm having an issue with using base64 decode. I can encode fine, and can decode strings just fine, but am having an issue decoding (specifically) a sqlite database. Here's my encode and decode: encode: bmem = BIO_new(BIO_s_mem()); b64 = BIO_push(b64, bmem); fprintf(stderr,"inbuf = %s, inlen =

Re: Question on how to handle SSL cert chains

On 8/3/10 2:10 PM, Bryan Boone wrote: > Hi everyone. Sorry for the long email, I am kinda a noob to SSL certs. > > I am trying to develop a client application that will use SSL to encrypt LDAP > traffic so that a customer can use his/her LDAP server as a means of logging > into my client applic

Re: Forget/wipe a loaded cert/key

On 8/3/10 12:59 PM, Thomas Habets wrote: > > Hi. > > Is there a way to forget/wipe any certificates and keys once a SSL/TLS > connection has been established? I want to protect myself against bugs > that occur later on in the connection from exposing my private keys. > > Both server and client key

Question on how to handle SSL cert chains

Hi everyone. Sorry for the long email, I am kinda a noob to SSL certs. I am trying to develop a client application that will use SSL to encrypt LDAP traffic so that a customer can use his/her LDAP server as a means of logging into my client application. This client application will reside on a

Forget/wipe a loaded cert/key

Hi. Is there a way to forget/wipe any certificates and keys once a SSL/TLS connection has been established? I want to protect myself against bugs that occur later on in the connection from exposing my private keys. Both server and client keys are relevant here. So basically: accept-loop()

Re: Differences between openssl-0.9.8o and openssl-fips-1.2.tar.gz

On Tue, Aug 3, 2010 at 13:17, William A. Rowe Jr. wrote: > On 8/3/2010 10:05 AM, Bryan wrote: >> I see a "fips" directory in 0.9.8o.  If I'm building OpenSSL with FIPS >> on cygwin, should I use the openssl-fips, or use the 0.9.8o tarfile? > > This is well documented in the FIPS user guide and sec

Re: Differences between openssl-0.9.8o and openssl-fips-1.2.tar.gz

On 8/3/2010 10:05 AM, Bryan wrote: > I see a "fips" directory in 0.9.8o. If I'm building OpenSSL with FIPS > on cygwin, should I use the openssl-fips, or use the 0.9.8o tarfile? This is well documented in the FIPS user guide and security policy, and if you haven't read them in detail, what you ar

Certificates For Kerberos

Hi, I develop my own CA using M2Crypto to interface with OpenSSL. I am trying to create certificates for use with Kerberos. This requires me to add to the subjectAltName an other name in one of two ways. The first is to use the Microsoft Universal Principle Name. I am able to do that just fine b

creation of self-signed certificate fail

Hi, this is how i've been creating self signed certificates in the past for TLS in smtpd: openssl req -days 3650 -nodes -new -x509 -keyout /etc/ssl/private/ca.key \ -out /etc/ssl/ca.crt openssl req -days 3650 -nodes -new -keyout /etc/postfix/ssl/private/server.key \ -out /etc/postfix/ssl/p

Differences between openssl-0.9.8o and openssl-fips-1.2.tar.gz

I see a "fips" directory in 0.9.8o. If I'm building OpenSSL with FIPS on cygwin, should I use the openssl-fips, or use the 0.9.8o tarfile? __ OpenSSL Project http://www.openssl.org User Support Mail

Re: RSA_generate_key

Hi, I think you are confusing RSA with some sort of symmetric algorithm. RSA is a public key algorithm that involves two parts : a public part represented by the modulus and the public exponents, and the private part which has two possible representations (one is modulus+private exponent and the o