FIPS vs ECDSA

2011-09-16 Thread Kenneth Goldman
I have a preinstalled Linux OpenSSL package, where openssl version says OpenSSL 1.0.0-fips 29 Mar 2010. I have the development libraries, but ECDSA headers like e.g., ecdsa.h are missing. In the library, I don't see e.g., EC_KEY_new(). Is this expected? Do I have a fips build? Is ECDSA

Re: FIPS vs ECDSA

2011-09-16 Thread Dr. Stephen Henson
On Thu, Sep 15, 2011, Kenneth Goldman wrote: I have a preinstalled Linux OpenSSL package, where openssl version says OpenSSL 1.0.0-fips 29 Mar 2010. That is a non-standard FIPS version specific to some Linux distros. You should ask in the distro specific mailing lists. I have the

RSA_Verify error:04077064:rsa routines:RSA_verify:algorithm mismatch

2011-09-16 Thread brajan
hi can any one tell whats wrong i am doing in this code... I sign the Message using Java IBMFIPS compliant the code to sign the message is //Signs the hash of each chunk and adds it to the Message Header //data is 256Kb length //Get private key function is created by me to read the DER key

Is certificate a CA or Client Certificate

2011-09-16 Thread Harshvir Sidhu
Hi, In openssl is there some method using which i can find whether the cerficiate in a file a Client Certificate or a CA/Root Certificate? - H S

Re: Is certificate a CA or Client Certificate

2011-09-16 Thread Jakob Bohm
On 9/16/2011 7:58 PM, Harshvir Sidhu wrote: Hi, In openssl is there some method using which i can find whether the cerficiate in a file a Client Certificate or a CA/Root Certificate? - H S Try the following command, at look for the CA property and also see if the certificate lists itself

Re: Is certificate a CA or Client Certificate

2011-09-16 Thread Harshvir Sidhu
I already tried this command, but its not giving any information showing wheter its a root certificate or a client certificate. - Harshvir On Fri, Sep 16, 2011 at 1:53 PM, Jakob Bohm jb-open...@wisemo.com wrote: On 9/16/2011 7:58 PM, Harshvir Sidhu wrote: Hi, In openssl is there some

Re: Is certificate a CA or Client Certificate

2011-09-16 Thread vivek here
Hi Harshiv, Try commad : openssl X509 -in 'yourcert/rootcert' -text You are able to see human readable certificate. If the certificate is client certificate and not self signed then 'issuer' is different from 'subject'. And CA: flase for client certificate. you can find CA:true for root/CA

Re: Is certificate a CA or Client Certificate

2011-09-16 Thread Jakob Bohm
On 9/16/2011 9:02 PM, Harshvir Sidhu wrote: I already tried this command, but its not giving any information showing wheter its a root certificate or a client certificate. - Harshvir On Fri, Sep 16, 2011 at 1:53 PM, Jakob Bohm jb-open...@wisemo.com mailto:jb-open...@wisemo.com wrote: On

RE: Cipher setting error: fixedDH and experiment EXP

2011-09-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Kanchan Kumar Shaw Sent: Thursday, 15 September, 2011 08:22 I have written a simple program to test available ciphers. And of course I have a problem with some of them. I installed openssl--1.0.0e [normally] My

RE: RSA_Verify error:04077064:rsa routines:RSA_verify:algorithm mismatch

2011-09-16 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of brajan Sent: Friday, 16 September, 2011 08:07 I sign the Message using Java IBMFIPS compliant [provider] the code to sign the message is wrapping mostly fixed GetPrivateKey privkey = new GetPrivateKey(); Signature genSign =