RE: openssl function to convert pkcs#8

2012-10-15 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Sanjay Patnaik (sanpatna) >Sent: Friday, 12 October, 2012 16:29 >Is there any documentation available for functions like >PEM_read_PrivateKey, Pem_write_PrivateKey etc. On any correct Unix install you should have man pages. Or online at http:/

RES: Generating rsakey using openssl as lib

2012-10-15 Thread Leonardo Laface de Almeida
Hi all, Just if anybody needs it, this is working: RSA *rsa = NULL; const EVP_CIPHER *enc=NULL; unsigned long f4=RSA_F4; char outfile[20]; char passout[10]; BIO *bio = NULL; int num; num = 1024; memcpy(&passout[0],"teste",5); passout[5] = '\0'; memcpy(&ou

RES: Generating rsakey using openssl as lib

2012-10-15 Thread Leonardo Laface de Almeida
Thanks for reply, Dave. I was trying to understand the functions EVP_* last week, and your suggestion is pretty usefull because now I know it's possible make it work. I was following the main function in genpkey.c file and following the same sequence for generating key pair. I've got some execut

Re: Encryption algorithm

2012-10-15 Thread Alex Chen
We only use OpenSSL_add_all_algorithms during SSL initialization, no other SSL_[CTX]_set_cipher_list calls are made, therefore the cipher used should be the default DHE-RSA-AES256-SHA then. Alex On Oct 14, 2012, at 3:01 PM, Dave Thompson wrote: >> From: owner-openssl-us...@openssl.org On Behal

RE: top 10 mistakes when using libopenssl?

2012-10-15 Thread Charles Mills
Whew! Thanks. Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson Sent: Monday, October 15, 2012 9:51 AM To: openssl-users@openssl.org Subject: Re: top 10 mistakes when using libopenssl? On Mon, Oct 1

Re: top 10 mistakes when using libopenssl?

2012-10-15 Thread Dr. Stephen Henson
On Mon, Oct 15, 2012, Charles Mills wrote: > Oh-oh. I'm not calling OpenSSL_add_all_algorithms() or anything real > similar. > > I call SSL_library_init() and SSL_load_error_strings() and set up the > Locking callback but that's it. > SSL_library_init() counts as similar to OpenSSL_add_all_algo

RE: top 10 mistakes when using libopenssl?

2012-10-15 Thread Charles Mills
Oh-oh. I'm not calling OpenSSL_add_all_algorithms() or anything real similar. I call SSL_library_init() and SSL_load_error_strings() and set up the Locking callback but that's it. It seems to work. Both my client code and my server code interoperate with non-OpenSLL TLS implementation without err

Re: openssl function to convert pkcs#8

2012-10-15 Thread Sanjay Patnaik (sanpatna)
Hi, Is there any documentation available for functions like PEM_read_PrivateKey, Pem_write_PrivateKey etc. My problem is that I have an asn1 encoded data (DER format) in buffer x which I have to use for getting a pkcs1 format private key. So using d2_X509_SIG, pkcs8_decrypt, EVP_PKCS82PKE

Re: Firefox unhappy with my self signed Cert

2012-10-15 Thread Derek Cole
As some additional info, I am suspecting this may be an issue with my config file. I am using the same config file I used to set up my certificate authority, which has under [ req ] a couple of values plugged in - for one, prompt=no, because I didnt want it to prompt me for values. It also has a v

[FWD] Bug report

2012-10-15 Thread Lutz Jaenicke
Forwarded to openssl-users for discussion Best regards, Lutz -- Lutz Jaenicke jaeni...@openssl.org OpenSSL Project http://www.openssl.org/~jaenicke/ --- Begin Message --- Hello There, We are facing an issue with OpenSSL. Please see the following description. Version

Re: id-aes256-GCM command line encrypt+decrypt fail

2012-10-15 Thread Michel
Thanks for the explanation Mr. Henson. I do not wish to take up too much of your time, but as I am still trying to understand OpenSSL, I would be grateful if you can add a few words on how you cope with this in TLS, and point me to the corresponding source code. Thanks again, Michel. Le 12