Re: How to implement DH algorithm using openSSL library?

2012-12-21 Thread Hemayamini Kurra
I also have a problem in sending the pub_key to peer. As I am using DH_generate_parameters to generate prime and generator and DH_generator_key for generating the public key , I have to send the prime, g and pub_key to the peer. Is there any function to do this?? Thanks in advance. Yamini. On Fr

Re: How to implement DH algorithm using openSSL library?

2012-12-21 Thread Hemayamini Kurra
Thanks prashant!! This helped alot!! On Thu, Dec 20, 2012 at 10:09 PM, Prashant Batra wrote: > I have this fucntion which I use to generate public-private key pair. > > - prime : depends on the dh group, you can find these values in DH rfc - > http://www.ietf.org/rfc/rfc3526.txt > > int32_t DHIn

Re: Issue with certificate chain

2012-12-21 Thread Jakob Bohm
On 12/21/2012 1:27 PM, Deeztek.com Support wrote: I have a weird issue when creating and importing PFX files into Windows 7 clients. I have created a CA and a sub CA and I have created client certificates. When I import them into Windows 7 clients (in all fairness I have only tried windows 7), w

Re: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Jakob Bohm
On 12/21/2012 1:13 PM, Tayade, Nilesh wrote: Hi, I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to c

Re: rsa private key formats

2012-12-21 Thread Jakob Bohm
On 12/20/2012 6:58 PM, Pavol Supa wrote: Hi all, I wonder if there is some format directly supported by openssl, suitable for storing RSA key pair in the following way: - RSA private key (d,p,q,...) encrypted with passhphrase - RSA public key (n,e) unencrypted, so I can load public key without

Re: ECDSA_do_verify

2012-12-21 Thread Matt Caswell
You should just be able to create an ECDSA_SIG structure using: ECDSA_SIG *mysig; if(!(mysig = ECDSA_SIG_new())) goto err; And then simply copy your r and s values directly into the ECDSA_SIG structure (assuming they are BIGNUMs): if(!BN_copy(mysig->r, r)) goto err; if(!BN_copy(mysig->s, s)) go

RE: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Tayade, Nilesh
> -Original Message- > From: Florian Weimer [mailto:fwei...@redhat.com] > Sent: Friday, December 21, 2012 5:58 PM > To: openssl-users@openssl.org > Cc: Tayade, Nilesh > Subject: Re: RSA_private_decrypt function takes longer time. > > On 12/21/2012 01:13 PM, Tayade, Nilesh wrote: > > > I a

Issue with certificate chain

2012-12-21 Thread Deeztek.com Support
I have a weird issue when creating and importing PFX files into Windows 7 clients. I have created a CA and a sub CA and I have created client certificates. When I import them into Windows 7 clients (in all fairness I have only tried windows 7), when I go to look at the certification path, it t

Re: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Florian Weimer
On 12/21/2012 01:13 PM, Tayade, Nilesh wrote: I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to comp

RSA_private_decrypt function takes longer time.

2012-12-21 Thread Tayade, Nilesh
Hi, I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to compute key. It is seen that RSA_private_decrypt

答复: how to load a certs chain from memory, thanks

2012-12-21 Thread 赵峰
Thanks Dave ! Your suggestion and demo code are pretty good ! And I also read the source code of " SSL_CTX_load_verify_locations" api and find that: We can imitate the implement of " X509_load_cert_crl_file" function in X509_load_cert_crl_file file int X509_load_cert_crl_file(X509_LOOKUP *ctx, c

rsa private key formats

2012-12-21 Thread Pavol Supa
Hi all, I wonder if there is some format directly supported by openssl, suitable for storing RSA key pair in the following way: - RSA private key (d,p,q,...) encrypted with passhphrase - RSA public key (n,e) unencrypted, so I can load public key without knowing passphrase, from the same data (bin

how to load a certs chain from memory, thanks

2012-12-21 Thread 赵峰
Hi all, I want to load a certs chain from memory ( ie. From a std::string variable with the certs chain’s content loading from the mysql db ). The content of certs chain is like a CAfile. Because loading from memory, can not call the “SSL_CTX_load_verify_locations” api. So I call “S