Re: seeding PRNG

You don't need to call RAND_write_file. RAND_load_file("/dev/random",bytes ) will seed the PRNG with whatever is the value of "bytes" variable. -Sandeep On Sun, Sep 19, 2010 at 3:59 AM, krishnamurthy santhanam < krishnamurth...@gmail.com> wrote: > Hi, > > > I need to seed PRNG of 128 bytes. in

RE: Error while trying to get text output from x509 cert file

Hi Vivek, There is no "x509 format" in that context; an x509 certificate encoding can be represented in DER (binary) or PEM (text) mode. Try: openssl x509 -in TestCryptPublic.cert -inform DER -text Erik Tkal Juniper OAC/UAC/Pulse Development From: owner-

RE: Queries on rsautl encryption output

> From: owner-openssl-us...@openssl.org On Behalf Of Panikulam Vivek > Sent: Monday, 20 September, 2010 10:52 > I am using the below openssl command to encrypt a string using a > public key and get a binary output (symm_key_string_enc.txt). Is this > an example of assymetric en

Re: Confusion about subject alternative names - resolved

I am mostly using openssl to sign certificates for corporate servers for corporate users only. So I am the only one using it to issue certificates. As much as possible I want all certificates to have a common CA- that way corporate end users only need to manually install the public cert fo

Re: CA cert from .p12 file

On Mon, Sep 20, 2010 at 02:42:08PM +0400, Sergey Sedov wrote: > Hi, > > My ISP provides to me .p12 file containing certs for using TLS for wifi > connection. > I can install it under Windows and use it. > But when I try to install it under Linux I have some troubles. > NetworkManager wants 3 cert

CA cert from .p12 file

Hi, My ISP provides to me .p12 file containing certs for using TLS for wifi connection. I can install it under Windows and use it. But when I try to install it under Linux I have some troubles. NetworkManager wants 3 certs to setup TLS for wifi connection. I can extract User cert and Private Ke

Re: Confusion about subject alternative names - resolved

Hey there: It should be noted that this is an EXCEEDINGLY BAD thing to do, since it more or less removes any control that the CA has over the certificates that it issues, and unless the Registration Authority is VERY careful about examining all of the requests in detail, all manner of evil and

Re: Error while trying to get text output from x509 cert file

Thanks for your response. It looks like the .cert file is not in the required format. It is a binary file and I assumed that it is in x509 format. Regards Vivek Panikulam From: Mounir IDRASSI To: openssl-users@openssl.org Sent: Sat, September 18, 2010 11:13:0

Queries on rsautl encryption output

Hi   I am using the below openssl command to encrypt a string using a public key and get a binary output (symm_key_string_enc.txt). Is this an example of assymetric encryption? and is there a way to get the output in a text/ASCII format? openssl rsautl -encrypt -inkey pub_key.txt -pubin -in symm

Re: Error while trying to get text output from x509 cert file

Also, look out for blank/extra lines in the file.Microsoft IE may be OK with them but openssl may not be. On 09/19/2010 12:13 AM, Mounir IDRASSI wrote: Hi, The error says that it didn't find the expected start line for a certificate which is -BEGIN CERTIFICATE- . So, check that you

Re: CA cert from .p12 file

Hi, Your PKCS#12 file doesn't contain the CA, so the simplest solution is to use Windows: since you can use it correctly, there is a big chance that the CA is installed under Windows, so go to the IE certificate store, double click on your certificate, go to the "Certification Path" tab and

CA cert from .p12 file

Hi, My ISP provides to me .p12 file containing certs for using TLS for wifi connection. I can install it under Windows and use it. But when I try to install it under Linux I have some troubles. NetworkManager wants 3 certs to setup TLS for wifi connection. I can extract User cert and Private Ke

Stunnel 4.34 released

Dear Users, The ChangeLog entry: Version 4.34, 2010.09.19, urgency: LOW: * New features - Updated Win32 DLLs for OpenSSL 1.0.0a. - Updated Win32 DLLs for zlib 1.2.5. - Updated automake to version 1.11.1 - Updated libtool to version 2.2.6b - Added ECC support with a new service-level "c