RE: Verify signed text

2011-03-31 Thread luis hernandez
Thak you DAVE I answer without seeing your post. > From: dthomp...@prinpay.com > To: openssl-users@openssl.org > Subject: RE: Verify signed text > Date: Thu, 31 Mar 2011 16:56:39 -0400 > > > From: owner-openssl-us...@openssl.org On Behalf Of luis hernandez > > Sent: Thursday, 31 March, 2

RE: Verify signed text

2011-03-31 Thread luis hernandez
Problem solved! I found this:openssl x509 -inform pem -in certificate.pem -pubkey -noout > publickey.pemand added to the certificate. From: lu_her...@hotmail.com To: openssl-users@openssl.org Subject: RE: Verify signed text Date: Thu, 31 Mar 2011 14:07:27 -0600 it did not work:$cat si

RE: Verify signed text

2011-03-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of luis hernandez > Sent: Thursday, 31 March, 2011 16:07 > it did not work: > $cat signedbase64string.txt | openssl enc -base64 -d -A -out seal > $cat stringtosign.xt | openssl dgst -md5 -verify cert.pem -si

RE: Truststore or Cacerts file?

2011-03-31 Thread David Patricola
Thanks. I've actually managed to get it to work. Java only takes server.crt into its cacerts file. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson Sent: Thursday, March 31, 2011 4:38 PM To: openssl-users@openssl

RE: Truststore or Cacerts file?

2011-03-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Lou Picciano > Sent: Wednesday, 30 March, 2011 09:44 > Sure, at that point you've only handled one half of the handshake. > You gotta find the corresponding command to install or 'present' the client cert now... Client key A

RE: Cert chain verification failures

2011-03-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of David Coulson > Sent: Wednesday, 30 March, 2011 10:24 > On 3/30/11 8:33 AM, Crypto Sal wrote: > > David: > > > > Firefox caches that information, so that it can use them > later if you > > view a similar certificate hierarchy. > > > > If you v

RE: Verify signed text

2011-03-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Wim Lewis > Sent: Wednesday, 30 March, 2011 17:01 > On 30 Mar 2011, at 12:02 PM, luis hernandez wrote: > > Thanks Wim, > > > > i know that cer pem files have the public key in it like: > > > > -BEGIN PUBLIC KEY- > > MIGfMA0GCSqGSIb3D

RE: SSL_read return -1 error:00000005:lib(0):func(0):DH lib

2011-03-31 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of tipo nac > Sent: Thursday, 31 March, 2011 13:22 > I getting error in a SSL_read call. > SSL_read return -1 Your code shows SSL_accept != 1, but the answer is the same for SSL_read/write < 0. > and > SSL_

RE: Verify signed text

2011-03-31 Thread luis hernandez
it did not work:$cat signedbase64string.txt | openssl enc -base64 -d -A -out seal $cat stringtosign.xt | openssl dgst -md5 -verify cert.pem -signature seal $unable to load key file > Subject: Re: Verify signed text > From: w...@omnigroup.com > Date: Wed, 30 Mar 2011 10:12:45 -0700 > CC: w...@o

SSL_read return -1 error:00000005:lib(0):func(0):DH lib

2011-03-31 Thread tipo nac
hi guys, someone can help me? I getting error in a SSL_read call. SSL_read return -1 and SSL_get_error( GetSSL(), -1 ) return error:0005:lib(0):func(0):DH lib I have a thread like this sckClient = accept( pMe->m_socket, ( struct sockaddr * ) & stClient, & intAddrSize ); if( sckClient ==

Re: BIO_do_accept() + fork() is leaking 64B?

2011-03-31 Thread Michal Stawinski
On 28 March 2011 13:40, Steffen DETTMER wrote: >> -Original Message- >> > BIO_set_close(bio, 0) >> No, I haven't tried it yet, but it seems this is what I've >> been looking for- clean & neat. > > Is it? > Wouldn't this mean that father process sooner or later runs out of file > descriptor