Re: Newbie Struggles with SMIME

2011-02-15 Thread ManicPixel
Did I mention I was a rookie? :-) I had not tried that. Excellent suggestion, thank you. I just did (after a crash course in cert & key exports). I do get the following error, however I signed the message and my certs are decrypting it. Verify error:self signed certificate in certificate chain

Re: Newbie Struggles with SMIME

2011-02-15 Thread Dr. Stephen Henson
On Tue, Feb 15, 2011, ManicPixel wrote: > Hello, > > > I've been searching the mail archives for days and pouring over the examples > in the /demo projects and can't seem to figure this one out on my own. I'm > trying to use OpenSSL to encrypt and decrypt S/MIME messages. I'd be happy > with d

Newbie Struggles with SMIME

2011-02-15 Thread ManicPixel
Hello, I've been searching the mail archives for days and pouring over the examples in the /demo projects and can't seem to figure this one out on my own. I'm trying to use OpenSSL to encrypt and decrypt S/MIME messages. I'd be happy with decrypt at this point! I am a rookie with encryption an

Re:at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread lzyzizi
What time have you to call SSL_free() and SSL_CTX_free() depends what you want to end the SSL/SSL_CTX object's lifecycle.Calling these functions is just likedel the object in C++,which means you don't want the object any more. The failure of calling functions(e.g.SSL_CTX_set_cipher_list( ), SSL_

RE: Adding non-root certificates to the list of trusted certificates?

2011-02-15 Thread Martin Nicholes
Dear Viktor, Thanks for the reply. I will take a closer look at the callbacks to see if they will work for me. Marty -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Victor Duchovni Sent: Monday, February 14, 2011 11:54 AM

Re: Pass parameter to an engine without entering OpenSSL Prompt

2011-02-15 Thread Dr. Stephen Henson
On Tue, Feb 15, 2011, Torsten Weber wrote: > Hello, > > I have written a dynamic engine that implements digest algorithms. > The engine got an entry in the openssl.conf file to make it replace > the default digest implementation: > ./openssl dgst -sha1 my_file.dat > > I also added support for so

Pass parameter to an engine without entering OpenSSL Prompt

2011-02-15 Thread Torsten Weber
Hello, I have written a dynamic engine that implements digest algorithms. The engine got an entry in the openssl.conf file to make it replace the default digest implementation: ./openssl dgst -sha1 my_file.dat I also added support for some command-line parameters in the engines code. Now I w

at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread Aro RANAIVONDRAMBOLA
Hello, I 'd like to know at what time have I to call SSL_free( ) and SSL_CTX_free( ) 1) For example, I call SSL_CTX_free( ) when a call to a function which fill in the CTX fails ( SSL_CTX_set_cipher_list( ), SSL_CTX_use_certificate_file( ), ..., SSL_CTX_set_verify( ) ). I am wondering if it is a go

RE: ASN.1 encoding a private structure

2011-02-15 Thread Eisenacher, Patrick
> -Original Message- > From: Peter Sylvester > > On 02/14/2011 01:11 PM, Eisenacher, Patrick wrote: > > I want to encode a private asn1 structure, say something > like the following: > > > > SEQUENCE > >true_false BOOLEAN > >certificate Certificate > > > > I checked the asn1parse c

Re: ASN.1 encoding a private structure

2011-02-15 Thread Peter Sylvester
On 02/14/2011 01:11 PM, Eisenacher, Patrick wrote: I want to encode a private asn1 structure, say something like the following: SEQUENCE true_false BOOLEAN certificate Certificate I checked the asn1parse command and was able to specify my outer sequence and the inner boolean in the genc

Re: File CER into File PFX

2011-02-15 Thread Jeffrey Walton
Hi Yann, > I know , but i haven't file .KEY (eg. cert.key) , i must convert file .cer > into .pfx without file .key Factor n, or solve the discrete log to recover the private exponent. On Mon, Feb 14, 2011 at 11:44 AM, yann458 wrote: > > > I know , but i haven't file .KEY (eg. cert.key) , i must

RE: looking for openssl doc outline

2011-02-15 Thread dave.mclellan
I second that. Absolutely that is a great way to learn about OpenSSL. It's old but it's how lots of people learn. Very friendly to a new SSL person. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John R Pierce Sent: M

RE: looking for openssl doc outline

2011-02-15 Thread Welling, Conrad Gerhart
If you're compelled (as I have been), encourage O'Reilly to encourage John Viega to update "Network Security with OpenSSL" and release a 2nd edition. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John R Pierce Sent: Monday,

Re: File CER into File PFX

2011-02-15 Thread yann458
I know , but i haven't file .KEY (eg. cert.key) , i must convert file .cer into .pfx without file .key ramaswamy.bm wrote: > > Try this > openssl pkcs12 -inkey cert.key -in cert.cer -export -out output.pfx > > Thanks, > Ram > > > yann458 wrote: >> Hello, >> >> I need to convert a file .CER