Set public key in a CSR

2014-01-23 Thread wizzbert
I am using openssl 1.0.1e and attempting to generate a CSR. In this case we are generating our own key pair and will sign independently, so I can't have openssl generate the key pair and then sign for me. This is all within an embedded device, so making the calls to the x509_req. I have the public

Re: [PEAR-DEV] Some answers!

2014-01-23 Thread Stelian Mocanita
Please ignore, it is just spam On Wed, Jan 22, 2014 at 5:56 PM, Keshav Nair klo...@live.com wrote: _ http://demo.simple2solutions.com/download/opatip.php kload1

openssl-cmp(RFC 4210)-support

2014-01-23 Thread Sriram
Hello Everyone, I have not explored the openssl much, but just wanted to check the following things, 1. Using openssl , is it possible to setup CA which can listen to CertReq coming from the clients.(Cert Reqs are usually sent in HTTP payload) and sends CertResponse. 2. Using openssl, is it

Re: Open SSL errors increase in Linux compared with Solaris

2014-01-23 Thread Florian Weimer
On 01/22/2014 11:40 PM, Dave Thompson wrote: Originally it meant the connection is terminated *abnormally* by the other end, as opposed to a normal/graceful FIN exchange. Windows sends RST if an application crashes, but all Unixes I have seen do FIN, unless the application forces RST by setting

Re: Set public key in a CSR

2014-01-23 Thread Dr. Stephen Henson
On Wed, Jan 22, 2014, wizzbert wrote: Below is my call stack. Using this, I get a lot of extra information in the CSR that is not needed, below the call stack. I think the extra data is actually incorrect and I do not need it as part of the CSR. Is there a way I can just cut off this extra

Re: Set public key in a CSR

2014-01-23 Thread Viktor Dukhovni
On Thu, Jan 23, 2014 at 02:06:53PM +0100, Dr. Stephen Henson wrote: On Wed, Jan 22, 2014, wizzbert wrote: You need to set the EC_KEY to use the named curve option which isn't the default. You can do that with: EC_KEY_set_asn1_flag(eckey, OPENSSL_EC_NAMED_CURVE); I think the below also

Re: Set public key in a CSR

2014-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2014, Viktor Dukhovni wrote: On Thu, Jan 23, 2014 at 02:06:53PM +0100, Dr. Stephen Henson wrote: On Wed, Jan 22, 2014, wizzbert wrote: You need to set the EC_KEY to use the named curve option which isn't the default. You can do that with:

Appending to encrypted data.

2014-01-23 Thread Sean Langley
Hi All, I have been using AES 256, CTR mode to encrypt the contents of a file on disk. The IV for the file is written to the first 16 bytes followed by the encrypted file data. Up to now, this encrypted data is created with a single encryption session. This is all on a mobile device, using

Status of using 'openssl dgst' with external engines (revision 5a9e3f05ff)

2014-01-23 Thread Russell Leake
Dr. Henson, I'm trying to understand the status of a thread (noted at the bottom of this e-mail) in which you recommend a patch to fix an issue that various people (including myself) incur with using openssl dgst with an external engine. It seems that the patch has been applied to certain

Re: Status of using 'openssl dgst' with external engines (revision 5a9e3f05ff)

2014-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2014, Russell Leake wrote: Dr. Henson, I'm trying to understand the status of a thread (noted at the bottom of this e-mail) in which you recommend a patch to fix an issue that various people (including myself) incur with using openssl dgst with an external engine. It

Re: Appending to encrypted data.

2014-01-23 Thread Jakob Bohm
On 1/23/2014 4:55 PM, Sean Langley wrote: Hi All, I have been using AES 256, CTR mode to encrypt the contents of a file on disk. The IV for the file is written to the first 16 bytes followed by the encrypted file data. Up to now, this encrypted data is created with a single encryption

Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Rogério Saulo
Hi all, Sorry if it as a stupid question but... I'm trying to add an custom policy qualifier attribute with another NID different from NID_id_qt_cps to an PKCS7 envelope. If I use the NID_id_qt_cps all works fine, BUT if I change the NID to another created by OBJ_create the program crashes

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2014, Rogrio Saulo wrote: Hi all, Sorry if it as a stupid question but... I'm trying to add an custom policy qualifier attribute with another NID different from NID_id_qt_cps to an PKCS7 envelope. If I use the NID_id_qt_cps all works fine, BUT if I change the NID to

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Rogerio Saulo
Hi Steve, First thanks for the quick response. Well, this function is mine, it's not the problem. you can see the function below : int POLICY_add_attrib(PKCS7_SIGNER_INFO *si, POLICYINFO *pInfo) { ASN1_STRING *seq; unsigned char *p, *pp ; int len; len

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2014, Rogrio Saulo wrote: Hi all, Sorry if it as a stupid question but... I'm trying to add an custom policy qualifier attribute with another NID different from NID_id_qt_cps to an PKCS7 envelope. If I use the NID_id_qt_cps all works fine, BUT if I change the NID to

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Rogerio Saulo
OK, I Understand now...but cannot make it work... I tried this, but without success : int id_spq_ets_uri = OBJ_create(1.2.840.113549.1.9.16.5.1, id_spq_ets_uri, id_spq_ets_uri); pQInfo-pqualid = OBJ_nid2obj(id_spq_ets_uri); pQInfo-d.other = ASN1_TYPE_new(); char *urlPolitica =

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Dr. Stephen Henson
On Thu, Jan 23, 2014, Rogerio Saulo wrote: OK, I Understand now...but cannot make it work... I tried this, but without success : int id_spq_ets_uri = OBJ_create(1.2.840.113549.1.9.16.5.1, id_spq_ets_uri, id_spq_ets_uri); pQInfo-pqualid = OBJ_nid2obj(id_spq_ets_uri);

Re: Cannot set pqualid of POLICYQUALINFO with another NID different of NID_id_qt_cps

2014-01-23 Thread Rogerio Saulo
It's working now, Thanks a lot Steve!!! Rogerio On Jan 23, 2014, at 22:55 , Dr. Stephen Henson st...@openssl.org wrote: On Thu, Jan 23, 2014, Rogerio Saulo wrote: OK, I Understand now...but cannot make it work... I tried this, but without success : int id_spq_ets_uri =