Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Rajeshwar Singh Jenwar
ateKey() which takes 4 parameters.But it beats me why I cannot find the definition ofd2i_RSAPrivateKey() anywhere.--- Rajeshwar Singh Jenwar <[EMAIL PROTECTED]> wrote: > how come ? plz explain.>> On 6/13/06, Girish Venkatachalam> <[EMAIL PROTECTED]> wrote:> >> >

Re: i am confused in PEM_read_PrivateKey

2006-06-13 Thread Rajeshwar Singh Jenwar
how come ? plz explain. On 6/13/06, Girish Venkatachalam <[EMAIL PROTECTED]> wrote: bcoz d2i resolves to d2i_X509() , not tod2i_PrivateKey--- �� < [EMAIL PROTECTED]> wrote:> when i use PEM_read_PrivateKey find it work error> ,so i look into> PEM_read_PrivateKey to find the reason.> first i fin

profiling of openssl ?

2006-06-01 Thread Rajeshwar Singh Jenwar
Hi All,   I had ported openssl in my embedded environment(ARM7 & pSOS). I m using openssl to 1. Generate Certificates. 2. Manage Certificates. 3. SSL connection 4. Encryption algos. But it(openssl) used lot of memory and slow. Can anyone comment on feasibility of optimising or can give some pointe

X509 certificate request in PKCS 12 format ?

2006-01-08 Thread Rajeshwar Singh Jenwar
Hi All, Can we have X509 certificate request in PKCS 12 format ? What will be the use and advantage of it or it is no use ?? - RSJ

X509 certificate verification ?

2005-12-27 Thread Rajeshwar Singh Jenwar
Hi All,   I am using rsj_verify_x509cert() for X509 certificate verification against a CA. This function is derived from eay_verify_x509cert() from ipsec-tools.5.2 rsj_verify_x509cert() takes memory pointer for cert and CA cert instead of directory in eay_check_x509cert(). But i am experiencing a m

X509_free() ?

2005-12-21 Thread Rajeshwar Singh Jenwar
Hi All,   1. Can anybody give a hint where exactly X509_free() is defined ? 2. I m doubting on some memory leak in OpenSLL on our port version, any pointer how to debug that ?   Thanks & Regards, RSJ  

Re: load x509 certificate from base 64 string into X509 structure

2005-12-01 Thread Rajeshwar Singh Jenwar
-users@openssl.orgCc:Subject:Re: load x509 certificate from base 64 string into X509 structureOn Thu, Dec 01, 2005, Rajeshwar Singh Jenwar wrote:> extern X509 *mem2x509_pem(char *cert) >> {>  X509 *x509= NULL;>  BIO *bio = NULL;>  int len = -1;>  bio = BIO_new(BIO_s_mem(

Re: load x509 certificate from base 64 string into X509 structure

2005-12-01 Thread Rajeshwar Singh Jenwar
extern X509 *mem2x509_pem(char *cert)     { X509 *x509= NULL; BIO *bio = NULL; int len = -1;  bio = BIO_new(BIO_s_mem()); if (!bio)  goto end; len = BIO_write(bio, cert, strlen(cert)); if (len == -1)    goto end;   x509 = PEM_read_bio_X509(bio, NULL, NULL, NULL);  if(!x509)     goto end;end:  if(bi

packing CA CRL in pkcs12 format ??

2005-11-04 Thread Rajeshwar Singh Jenwar
Hi All, I just want to pack CA CRL in .p12 cert. But i m not able to find any option for this in `openssl pkcs12`. Even i gone through apps/pkcs12.c  but not able to find. Any suggestions ?? Thanks in advance. Njoy # RSJ

Re: Certificate Hierarchy

2005-10-30 Thread Rajeshwar Singh Jenwar
Hi Steve, I just want to expand this thread. Can u help me ? I want create root CA using openssl(0.9.8) on linux box(kernel 2.6.10). Then i want to create intermediate CAs signed by the root CA using openssl. Can you suggest me how this is possible ??   Thanks in advance.   Rajeshwar Singh  On 10/3

CA1 signing CA2's certificate

2005-09-09 Thread Rajeshwar Singh Jenwar
Hi All, I m creating a CA named CA1 using openssl. CA1 needs to certify other certification authorities called  CA2 & CA3 (generated through openssl).     CA1   / \     CA2  CA3     /  \

Re: problem with d2i_X509() ??

2005-09-04 Thread Rajeshwar Singh Jenwar
Hi Nils, U r write. That was the reason.  On 9/5/05, Nils Larsch <[EMAIL PROTECTED]> wrote: Rajeshwar Singh Jenwar wrote:> Hi All,>> I have to read x509 certificate(in .pem format) from memory. > I have written two functions.>> Fn.1>> /* get X509 structure from mem

problem with d2i_X509() ??

2005-09-03 Thread Rajeshwar Singh Jenwar
Hi All,   I have to read x509 certificate(in .pem format) from memory. I have written two functions. Fn.1 /* get X509 structure from memory. */extern X509 *mem2x509(vchar_t *cert){   X509 *x509;  unsigned char *bp;  bp = (unsigned char *) cert->v;  x509 = d2i_X509(NULL, &bp, cert->l);  if(x509 ==

Verify a signed & private key pair

2005-08-29 Thread Rajeshwar Singh Jenwar
Hi, How to verify a signed certificate by a CA(.pem) &  coresponding private key(.pem) ? It is just to verify that someone has played with private key or not. Thx. Rajeshwar Singh

RSA_privtae_eccrypt() is causing the STACK DUMP !!!

2005-08-04 Thread Rajeshwar Singh Jenwar
Hi All, I am using pSOS on ARM 7.0 LE board. RSA_private_encrypt() which is needed to "signing the private key with hash" is causing a "STACK CRASH" ? The Function trace is :- RSA_private_encrypt() -> RSA_eay_private_encrypt() -> loop of ( BN_mod_exp_mount() -> BN_from_montgomery() ) and it i

Re: Capturing X509 certificate and storing them using the Windows Certificates API

2005-07-07 Thread Rajeshwar Singh Jenwar
Hi Just try this. Generating Certificates for Windows Clients When generating certicates forWindows clients you have to make sure that the lifetime of the certicate lies within the lifetime of the CA. If the lifetime of the certicate exceeds the lifetime of the CA, the windows client will not ac

Verifying X509 certificates without file system

2005-07-05 Thread Rajeshwar Singh Jenwar
Hi All, my application intends to verify the peer's X509 certificate X509_verify_cert(). However, that function requires that the certificate is written to a file, and i don't have a file system. Is there any way to pass the X509 certificate OpenSSL library as a string ? Thanks in advance, Rajes