Extracting certificate serial numbers from a CRL

2008-06-18 Thread Jordi Jaen Pallares
Dear list, I am receiving a CRL. After checking its validity against the issuer's certificate, I would like to use the API to access the certificate serial numbers of the revoked certificates. With the command line and asn1parse I can check the serial numbers and the dates of revocation as

Re: aes128 code??

2007-11-26 Thread Jordi Jaen Pallares
Hola Lidia, check the book from O'Reilly Network Programming with OpenSSL. Specially chapter 6 that verses on Symmetric Cryptography. Best regards, Jordi 2007/11/26, Lidia Fernández [EMAIL PROTECTED]: Hello all! I have to use aes128 encryption into my program to encrypt a file with a

Re: Problem verifying x509 certificates: with command line OK, but not working with the C API

2007-10-25 Thread Jordi Jaen Pallares
Hi Tim, thanks a lot. Your hint helped me to solve the problem: I added this and now it works ! /* load OpenSSL stuff */ OpenSSL_add_all_algorithms(); ERR_load_crypto_strings(); cheers, Jordi 2007/10/24, Tim Hudson [EMAIL PROTECTED]: ** file cpfp_ssl.c: line 2752 Error verifying

Problem verifying x509 certificates: with command line OK, but not working with the C API

2007-10-24 Thread Jordi Jaen Pallares
Hello all, I am using the openssl 0.9.8d and the following procedure to verify certificates. The procedure gives an error, whereas if I try to verify the same certificates with the command line it succeedes. I will appreciate any hint to solve this problem. The C API procedure: /*!Procedure to

Re: How to read a EC_KEY from a certificate

2007-03-09 Thread Jordi Jaen Pallares
Hi Nils, 2007/3/9, Nils Larsch [EMAIL PROTECTED]: Jordi Jaen Pallares wrote: File offset before reading : 0 File offset after reading : 47 Error in d2i_X509_fp... 10976:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1291: 10976:error:0D07803A:asn1 encoding

How to read a EC_KEY from a certificate

2007-03-08 Thread Jordi Jaen Pallares
Dear list, I am writing an application that uses ECC and certificates. At initialization time, the idea is to generate both a self-signed root certificate (as in the examples in the /demos examples) for the CA, and a set of long terms EC keys for each client. In the program I intend to use

Re: How to read a EC_KEY from a certificate

2007-03-08 Thread Jordi Jaen Pallares
Dear Viktor, thank you very much for the tip regarding the elliptic curve to use ! 2007/3/8, Victor Duchovni [EMAIL PROTECTED]: On Thu, Mar 08, 2007 at 02:41:46PM +0100, Jordi Jaen Pallares wrote: # openssl ecparam -name sect233r1 -out sect233r1.pem You might do better with prime256v1

Re: d2i/i2d_EC_PUBKEY_bio and d2i/i2d_EC_PUBKEY_fp functions

2006-11-04 Thread Jordi Jaen Pallares
Hi Nils,the problem was between the keyboard and the chair :-)I picked the worst moment to mix up Alice and Bob... the OpenSSL d2i/i2d functions provided have no problems at all.Cheers,Jordi 2006/11/3, Nils Larsch [EMAIL PROTECTED]: Jordi Jaen Pallares wrote: Dear list, I used the ecdhtest.c file

d2i/i2d_EC_PUBKEY_bio and d2i/i2d_EC_PUBKEY_fp functions

2006-11-02 Thread Jordi Jaen Pallares
Dear list,I used the ecdhtest.c file as starting point to write a small test application to do ECDH key exchange over a network. In order to encode the peer's public keys in a TCP message I used the i2d_EC_PUBKEY_bio functions to write the public keys to memory BIOs, and from the BIOs to the TCP