RE: RSA_private_decrypt without e and d

2011-02-24 Thread Shaheed Bacchus (sbacchus)
Hi Marek, My understanding was that while it's mathematically possible, from an OpenSSL API perspective there is no way to do it. Did I misunderstand? -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of marek.marc...@malkom.pl S

ts -reply

2011-02-24 Thread Yessica De Ascencao
Hi people! I installed the service for time stamping with opentsa, now I want to try the service for time stamping. I generate a query with the following command: . /openssl ts-reply-queryfile request.tsq-signer / root / tssCRT.pem-inkey / root / tssKey.pem-out-token_out responde.tsr And I get t

Re: HELP!!!! mod_tsa:could not load X.509 certificate

2011-02-24 Thread Yessica De Ascencao
Hello! Thank you very much for your help. I managed to install it, load the server and connect to the database, the problem was the version of apache. Compiled httpd-2.0.59 version. Now I want to try the service for time stamping. I generate a query with the following command: . /openssl ts-reply

RE: RSA_private_decrypt without e and d

2011-02-24 Thread Marek . Marcola
Hello, Remember, you do not need to recover this parameters to decrypt message. Best regards, -- Marek Marcola owner-openssl-us...@openssl.org wrote on 02/24/2011 05:19:30 PM: > "Shaheed Bacchus (sbacchus)" > Sent by: owner-openssl-us...@openssl.org > > 02/24/2011 05:21 PM > > Please resp

RE: RSA_private_decrypt without e and d

2011-02-24 Thread Shaheed Bacchus (sbacchus)
Thanks Mounir and Marek, I will try to recover these parameters. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Mounir IDRASSI Sent: Thursday, February 24, 2011 2:27 AM To: openssl-users@openssl.org Subject: Re: RSA_private_de

Re: RSA_private_decrypt without e and d

2011-02-24 Thread Victor Duchovni
On Thu, Feb 24, 2011 at 08:15:47AM +0100, Mounir IDRASSI wrote: > Your analysis is not true because the original poster says he has dmp1, > dmq1 and iqmp, not only p and q. Yes, naturally if the OP has "d" (or equivalently d mod (p-1) and (q-1), which are presumed co-prime), he can recover "e" i

Re: HELP!!!! mod_tsa:could not load X.509 certificate

2011-02-24 Thread Mounir IDRASSI
Hi, Getting the same error (on ts_rsp_sign.c:206) with the file I send means that you are not using the right files : I have explicitely tested the OpenSSL function referenced in ts_rsp_sign.c and it is working with no error. You have to check your configuration in order to point to the right