Re: Another FIPS question

2012-09-05 Thread Steve Marquess
On 09/05/2012 02:02 PM, Jason Todd wrote: > I just would like to verify this is correct. I've been digging through > the manuals but it would nice to just have a verification. > > 1) I plan to build a build environment (for Linux and Windows) that > matches what is specified in the 140sp1747.pdf a

Another FIPS question

2012-09-05 Thread Jason Todd
I just would like to verify this is correct. I've been digging through the manuals but it would nice to just have a verification. 1) I plan to build a build environment (for Linux and Windows) that matches what is specified in the 140sp1747.pdf and build the fipscanister 2) Then build openssl-fip

Re: Creating certificate with gost algorithm

2012-09-05 Thread malblw
Alexander Kriventsov-2 wrote: > > And I've got this error: > 34373201800:error:0D0C30C6:asn1 encoding routines:ASN1_item_sign:digest > and key type not supported:a_sign.c:245: > What's wrong? What should I do to make certificate signed of my CA? > Hello I think, this trouble provoked by wrong

Re: asn1 parsing tutorial

2012-09-05 Thread Kenneth Goldman
The piece that openssl doesn't handle is the rsaOAEP OID for the public key. Here's a typical certificate dump. I'm trying to extract the public modulus. 158 74: . . . SEQUENCE { 160 9: . . . . OBJECT IDENTIFIER rsaOAEP (1 2 840 113549 1 1 7) : . . . . . (PKCS #1) 171 61: . . . . SE