Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-06 Thread Dr. Stephen Henson
On Tue, Dec 07, 2010, Maxim Kammerer wrote: > > The command-line argument "-md" to "openssl cms -sign_receipt" is > > apparently ignored, and the default digest algorithm (SHA-1 in my > > tests) is used instead. In addition, the "-noattr" argument has the > > same effect as "-nosmimecap", apparent

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-06 Thread Maxim Kammerer
> The command-line argument "-md" to "openssl cms -sign_receipt" is > apparently ignored, and the default digest algorithm (SHA-1 in my > tests) is used instead. In addition, the "-noattr" argument has the > same effect as "-nosmimecap", apparently leaving some unnecessary > attributes (like signin

certificate signing using CA application - 0.9.8l (Mac OS X) vs 1.0.0 (RHEL6)

2010-12-06 Thread Andrey Brindeyev
Hi all! Some code was working on OpenSSL < 1.0.0 and now have troubles working on 1.0.0 (which comes with RHEL6). Here are test case: #!/bin/sh mkdir private echo 10 > serial touch index.txt mkdir newcerts openssl req -new -x509 -extensions v3_ca -keyout private/cakey.pem -out cacert.pem -da

Problems building FIPS Openssl under Server 2008 R2

2010-12-06 Thread Christopher A Hotchkiss
To whom it may concern, I have been attempting to build a FIPS capable openssl using the instructions in the User Guide. However I am getting the following error while trying to run the fips validation of the archive: c:\build\openssl\openssl-0.9.8p\out32dll>C:\build\openssl\openssl\bin\openssl

Re: Wrong cipher selected in handshake?

2010-12-06 Thread Mike Brennan
That is nice to know. Thank you! That fixed my problem. > > On Mon, Dec 06, 2010 at 11:36:01AM -0600, Mike Brennan wrote: > > > It seems that Openssl doesn't always obey the server's priority > > s/doesn't always obey/never by default obeys/ > > > ordered list of ciphers (set wi

Re: Wrong cipher selected in handshake?

2010-12-06 Thread Victor Duchovni
On Mon, Dec 06, 2010 at 11:36:01AM -0600, Mike Brennan wrote: > It seems that Openssl doesn't always obey the server's priority s/doesn't always obey/never by default obeys/ > ordered list of ciphers (set with SSL_set_cipher_list()), even when > that list is syntactically correct

Wrong cipher selected in handshake?

2010-12-06 Thread Mike Brennan
Greetings, It seems that Openssl doesn't always obey the server's priority ordered list of ciphers (set with SSL_set_cipher_list()), even when that list is syntactically correct, when the ciphers are available, and when the client capabilities don't constrain the choice. Example: I can specify o

Re: int and BIGNUM operations?

2010-12-06 Thread Jeffrey Walton
On Sun, Dec 5, 2010 at 11:12 AM, Eugene N wrote: > Dear sirs > > I am looking for a way to perform a set of heterogeneous operations, with > some parameters being BIGNUM and some just 32 bit integers. > for example, multiply a bignum by 2, increment a bignum by 1, find a result > of BIGNUM modulo

Re: int and BIGNUM operations?

2010-12-06 Thread Dr. Stephen Henson
On Sun, Dec 05, 2010, Eugene N wrote: > Dear sirs > > I am looking for a way to perform a set of heterogeneous operations, with > some parameters being BIGNUM and some just 32 bit integers. > for example, multiply a bignum by 2, increment a bignum by 1, find a result > of BIGNUM modulo 3, etc. >

Re: CMS routines:CMS_verify:signer certificate not found

2010-12-06 Thread Dr. Stephen Henson
On Sun, Dec 05, 2010, ammonite wrote: > > Hi, I'v got some signed files from a OFTP-Server, i' trying to verify those > files with openssl cms, but i get following error: > CMS routines:CMS_verify:signer certificate not found > The commando i use was: > openssl cms -verify -in signed.txt -inform

int and BIGNUM operations?

2010-12-06 Thread Eugene N
Dear sirs I am looking for a way to perform a set of heterogeneous operations, with some parameters being BIGNUM and some just 32 bit integers. for example, multiply a bignum by 2, increment a bignum by 1, find a result of BIGNUM modulo 3, etc. How can i do it, without initialising bignums to 2,

CMS routines:CMS_verify:signer certificate not found

2010-12-06 Thread ammonite
Hi, I'v got some signed files from a OFTP-Server, i' trying to verify those files with openssl cms, but i get following error: CMS routines:CMS_verify:signer certificate not found The commando i use was: openssl cms -verify -in signed.txt -inform der -certfile certs/local.cer -CAfile certs/ca.cer