DH_check() claims that RFC 3526 groups have DH_NOT_SUITABLE_GENERATOR

2011-11-21 Thread Maxim Kammerer
Hello, MODP groups specified in RFC 3526 work fine once encoded as PKCS#3 DH parameters, e.g.: openssl genpkey -paramfile dh8192.pem -out private.pem openssl genpkey -paramfile dh8192.pem -out private2.pem openssl pkey -in private.pem -pubout -out public.pem openssl pkey -in private2.pem -pubout

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2011-05-24 Thread Maxim Kammerer
On Tue, Dec 7, 2010 at 01:50, Dr. Stephen Henson wrote: > On Tue, Dec 07, 2010, Maxim Kammerer wrote: >> > The command-line argument "-md" to "openssl cms -sign_receipt" is >> > apparently ignored, and the default digest algorithm (SHA-1 in my >> >

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2011-05-24 Thread Maxim Kammerer
On Tue, Dec 7, 2010 at 01:50, Dr. Stephen Henson wrote: > On Tue, Dec 07, 2010, Maxim Kammerer wrote: >> > The command-line argument "-md" to "openssl cms -sign_receipt" is >> > apparently ignored, and the default digest algorithm (SHA-1 in my >> >

Re: CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-06 Thread Maxim Kammerer
> The command-line argument "-md" to "openssl cms -sign_receipt" is > apparently ignored, and the default digest algorithm (SHA-1 in my > tests) is used instead. In addition, the "-noattr" argument has the > same effect as "-nosmimecap", apparently leaving some unnecessary > attributes (like signin

CMS: message digest algorithm selection is ignored when signing receipts (+ peer-review request)

2010-12-03 Thread Maxim Kammerer
I am implementing a two-party messages exchange system based on CMS for Liberté Linux (http://dee.su/liberte). The command-line argument "-md" to "openssl cms -sign_receipt" is apparently ignored, and the default digest algorithm (SHA-1 in my tests) is used instead. In addition, the "-noattr" argu