Re: cannot create p12 file

2010-09-18 Thread Mounir IDRASSI
Hi, It hangs because it is waiting for the input certificate that has to be put with the given key inside the PKCS#12 file. Replace the -certfile option with -in and everything will be OK. Actually -certfile is for adding additional certificate, not the main one. -- Mounir IDRASSI IDRIX http://ww

Re: Error while trying to get text output from x509 cert file

2010-09-18 Thread Mounir IDRASSI
Hi, The error says that it didn't find the expected start line for a certificate which is -BEGIN CERTIFICATE- . So, check that your certificate is indeed BASE64 encoded and that the first line is -BEGIN CERTIFICATE- and the last is -END CERTIFICATE- . Cheers, -- Mounir IDR

Error while trying to get text output from x509 cert file

2010-09-18 Thread Panikulam Vivek
Hi I am trying to get output from this x509 certificate and am getting the below error. Please let me know how to resolve this error and generate text output from this cert file. $ openssl x509 -in TestCryptPublic.cert -pubkey unable to load certificate 557096:error:0906D06C:PEM routines:PEM_re

Re: Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
The problem is not so much with IMAP or SMTP. You can easily use IIS to create separate certificate requests so those services.In the MS Exchange2007 Management Console (GUI) it is pretty easy to select the certificate to use for IMAP SSL connection. For some very odd reason you have to u

RE: Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
Some additional info: My openssl.cnf file includes the following --- policy = policy_anything [ policy_anything ] countryName = op

Confusion about subject alternative names

2010-09-18 Thread Gaiseric Vandal
Hi I am using various version of openssl-0.9.x (including openssl-0.9.8k-1.fc11.i686 on my linux machine altho the cusotmized openssl.cnf file is probably inherited from a slightly earlier version.) When I create a certificate signing request with openssl, I have an option to specify an Subject A

cannot create p12 file

2010-09-18 Thread Gaiseric Vandal
I am trying to create a .p12 file with pkcs12. I created the private key: #openssl genrsa -out user.key -des3 I also create a certificate signing request (openssl req ..) and a certificate (openssl ca.) I want to store the user key (and optionally the user certificate) in a .p

Re: How to convert RSA public key XML format to PEM or ASCII format

2010-09-18 Thread Mounir IDRASSI
Hi, The code is a generic OpenSSL C source that will compile using the favorite compiler of your platform. Did I understand your question correctly? -- Mounir IDRASSI IDRIX http://www.idrix.fr > Hi > > Thanks for your response. In which platform do I compile/execute the below > CODE? > I only ha

Engine API documentation

2010-09-18 Thread Niklas Eklund
Hi. I'm trying to implement an Engine to use my decoder with openssl. However, I find the API lacking documentation. This far I only seen comments in source code headers. How shall I go about implementing my engine? (AES cipher initially) Have searched alot and read many source files. Kind regard

Re: How to convert RSA public key XML format to PEM or ASCII format

2010-09-18 Thread Panikulam Vivek
Hi Thanks for your response. In which platform do I compile/execute the below CODE? I only have UNIX command line and Windows available. Regards Vivek Panikulam From: Mounir IDRASSI To: openssl-users@openssl.org Sent: Fri, September 17, 2010 10:07:10 PM Sub