Re: Getting started to create PKCS7 message with PKCS11 provider

2011-07-05 Thread lists
On 06/30/2011 11:25 AM, James Berry wrote: Hi: I need to sign a challenge string using the private key present on a smartcard. The smartcard has a PKCS11-compliant library and I have been able to open the card etc with the PKCS11 driver. Now I would like to sign a message in PKCS7 format

RE: Extracting and verifying encrypted certificate digest

2011-07-05 Thread DarkMike
Hi Dave, I have already tried signing and verifying the message and it works great for me with the following commands: openssl dgst -sha1 -sign rsa_client_priv_key.pem -out rsa_signature.bin msg.txt openssl dgst -sha1 -verify rsa_client_pub_key.pem -signature rsa_signature.bin msg.txt Now I

Please help: OpenSSL + OpenVPN Elliptic Curves (SHA512, ECDSA, ECDH, Linux, Debian)

2011-07-05 Thread Gaglia
Hi, first of all please accept my apologizes, I know this is a question more related to OpenVPN, but I think that the problem lies in the cert authority and client/server certificate generation step with OpenSSL, so I'm also posting it here, hoping for a solution. I'm trying to make an OpenVPN

Re: Need to extract the checksum from a signature

2011-07-05 Thread Wim Lewis
On 4 Jul 2011, at 7:47 AM, Roland Flury wrote: At the moment I use the PHP function openssl_pkcs7_verify() to verify the signature (I also could use the openssl command line tool with a system command). But verify is not enough, because I need to send back the digest. Is there any way

RE: Extracting and verifying encrypted certificate digest

2011-07-05 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of DarkMike Sent: Tuesday, 05 July, 2011 03:34 I have already tried signing and verifying the message and it works great [with dgst -sign/verify] Now I want to focus on the certificate verification, limit it to x509v3, sha1, rsa encryption

question about des_ede3_cbc_encrypt()

2011-07-05 Thread ZhouTony
Hi all, I am new to this mail list. Have some questions about the API: DES_ede3_cbc_encrypt() void DES_ede3_cbc_encrypt(const unsigned char *input,unsigned char *output, long length, DES_key_schedule *ks1, DES_key_schedule *ks2, DES_key_schedule *ks3, DES_cblock *ivec, int enc); 1. For

Re: question about des_ede3_cbc_encrypt()

2011-07-05 Thread Prashant Batra
2011/7/6 ZhouTony redhat-1...@hotmail.com Hi all, I am new to this mail list. Have some questions about the API: DES_ede3_cbc_encrypt() void DES_ede3_cbc_encrypt(const unsigned char *input, unsigned char *output, long length, DES_key_schedule *ks1, DES_key_schedule *ks2,