RE: How to use a binary public key

2013-01-25 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Tovey, Dwight (LaserJet R&D FW Eng.) > Sent: Friday, 25 January, 2013 17:50 > On Jan 24, 2013, at 8:13 PM, Dave Thompson > wrote: > > > If you want to do it actually in Python: > > - get m and e from the public key (DER isn't hard to parse,

RE: Problems reading PKCS8 private key

2013-01-25 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Viktor Dukhovni > Sent: Friday, 25 January, 2013 12:21 > On Fri, Jan 25, 2013 at 05:10:03PM +, Viktor Dukhovni wrote: > > > On Fri, Jan 25, 2013 at 04:13:02PM +, Ken Allen wrote: > > > > > Hi All, I'm having a bit of a problem. I need

RE: No certificate matches private key

2013-01-25 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Goulet, Brian >Sent: Friday, 25 January, 2013 15:53 >I'm trying to create an SSL certificate for >and keep getting the error "No certificate matches private key". >These are the steps I have taken: >1. Generate the private key and CSR with

Re: How to use a binary public key

2013-01-25 Thread Tovey, Dwight (LaserJet R&D FW Eng.)
On Jan 24, 2013, at 8:13 PM, Dave Thompson wrote: > If you want to do it actually in Python: > - get m and e from the public key (DER isn't hard to parse, > you were already shown an example elsethread, and if Python > doesn't have a direct way to convert bytestring to bignum > which I'd exp

No certificate matches private key

2013-01-25 Thread Goulet, Brian
I'm trying to create an SSL certificate for a Cisco Wireless LAN controller and keep getting the error "No certificate matches private key". These are the steps I have taken: 1. Generate the private key and CSR with the command openssl req -newkey rsa:2048 -subj "/C=XX/O=XX/OU=XX/OU=XX/OU

Re: OpenSSL infrastructure migration

2013-01-25 Thread Jakob Bohm
On 1/15/2013 7:05 PM, Lutz Jaenicke wrote: On 01/15/2013 12:50 PM, Lutz Jaenicke wrote: Hi! As you will already have noted, the OpenSSL project is currently moving its infrastructure to a new server. This migration is combined with a change and/or upgrade of the tools (CVS -> GIT, RT 3.x -> 4.x

Re: EVP_* in FIPS-compliant openSSL 2.0

2013-01-25 Thread Jakob Bohm
(Note: Please don't use the Outlook Reply button to start a new thread, it will make Outlook send mail flags(headers) that indicate it is part of the old thread, and some non-MS mail clients will list your messages as part of the old thread) On 1/25/2013 7:14 PM, Gibbs, Pierce M (IS) (Contr) wrot

EVP_* in FIPS-compliant openSSL 2.0

2013-01-25 Thread Gibbs, Pierce M (IS) (Contr)
I implemented HMAC, AES encryption and DSA routines using openssl version 1.2.3. I used the EVP_EncryptInit, EVP_EncryptUpdate, EVP_EncryptFinal etc routines. I have a requirement to use FIPS compliant version of OPenSSL. I recently got OpenSSL 2.0 and cannot find the EVP_* routines. Are they

RE: Problems reading PKCS8 private key

2013-01-25 Thread Ken Allen
Thanks for your help, guys! Ken Allen Senior Software Engineer ESS Division Ultra Electronics, Prologic 15 E. Main St. Westminster, MD 21157 ken.al...@ultra-prologic.com Tel: +1 410 203 1103 Fax: +1 410 203 1151 www.ultra-prologic.com From: owner-openssl

Re: Problems reading PKCS8 private key

2013-01-25 Thread Dr. Stephen Henson
On Fri, Jan 25, 2013, Ken Allen wrote: > Awesome, that worked. Is there a "official" name for the asn.1 structure > that's being produced here? > It's a PKCS#8 PrivateKeyInfo structure. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see:

RE: Problems reading PKCS8 private key

2013-01-25 Thread Ken Allen
Awesome, that worked. Is there a "official" name for the asn.1 structure that's being produced here? Ken Allen Software Engineer ESS Division Ultra Electronics, Prologic 15 E. Main St. Westminster, MD 21157 ken.al...@ultra-prologic.com Tel: +1 410 203 1103 Fax: +1 410 203 1151 www.ultra-prologi

Re: Problems reading PKCS8 private key

2013-01-25 Thread Viktor Dukhovni
On Fri, Jan 25, 2013 at 05:10:03PM +, Viktor Dukhovni wrote: > On Fri, Jan 25, 2013 at 04:13:02PM +, Ken Allen wrote: > > > Hi All, I'm having a bit of a problem. I need to load a private > > key (EC, but I'm having the same problem with RSA) from an unecrypted, > > der encoded, PKCS8 mem

Re: Problems reading PKCS8 private key

2013-01-25 Thread Viktor Dukhovni
On Fri, Jan 25, 2013 at 04:13:02PM +, Ken Allen wrote: > Hi All, I'm having a bit of a problem. I need to load a private > key (EC, but I'm having the same problem with RSA) from an unecrypted, > der encoded, PKCS8 memory buffer. I'm just trying to get it to work > loading from a file for now

Problems reading PKCS8 private key

2013-01-25 Thread Ken Allen
Hi All, I'm having a bit of a problem. I need to load a private key (EC, but I'm having the same problem with RSA) from an unecrypted, der encoded, PKCS8 memory buffer. I'm just trying to get it to work loading from a file for now and it's simply not working. Can someone tell me what I'm doing w

Proper usage of BIO functions

2013-01-25 Thread Jason Gerfen
I have been scouring the web to find information on the proper use (or using the correct functions available) of the BIO_* family of functions. What I am attempting to do is to simply return a public key as a string. Currently I am performing a series of operations to accomplish this like so:

Re: path to openssl.cnf hardcoded?

2013-01-25 Thread Dr. Stephen Henson
On Fri, Jan 25, 2013, T J wrote: > > openssl version -d shows the INSTALL_PREFIX directory == $(SSLDIR)/base. > > OpenSSL> version -d > OPENSSLDIR: > "/home/tjordan/workspace/myproject/current/appfs/openssl/build/base" > OpenSSL> > > If I set --openssldir="/usr/bin", I see openssl.cnf gets put

Fwd: [openssl-users] OpenSSL: RC4 and IDEA algorithms

2013-01-25 Thread sarju tambe
Thanks for information. just confirmation: In OpenSSL 0.98x, is RC5 and Camellia disabled in Configure file ? *code* <<< # All of the following is disabled by default (RC5 was enabled before 0.9.8): my %disabled = ( # "what" => "comment" [or special keyword "experimental"]

Re: EVP_aes_256_gcm - Retrieving the MAC value

2013-01-25 Thread Roar Lien
Can anybody help me out with this one? - Roar -- View this message in context: http://openssl.6102.n7.nabble.com/EVP-aes-256-gcm-Retrieving-the-MAC-value-tp43070p43347.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

Wrong GOST engine parameter causes a segmentation fault.

2013-01-25 Thread Aleksey Sushko
Hi Method get_encryption_params from engines/ccgost/gost_crypt.c maby return NULL with error code GOSTerr(GOST_F_GET_ENCRYPTION_PARAMS, GOST_R_INVALID_CIPHER_PARAM_OID) or GOSTerr(GOST_F_GET_ENCRYPTION_PARAMS,GOST_R_INVALID_CIPHER_PARAMS) Metod pkey_GOST01cp_encrypt from engines/ccgost/gos

Passing parameters to the engine

2013-01-25 Thread Jan Nitecki
I'm trying to use CAPI engine to renew certificate which is stored in windows certificate store (Local Computer/Personal (My)). Loading engine dynamically and listing certificate including container works fine. I'm also adding engine to the list of engines, but when I'm trying to use key in foll