Ver 0.9.8 j compiled

2009-01-20 Thread rfx
I find url to download openssl ver 0.9.8 j compiled ... Thanks Dr Franck ROUSSIA __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org A

Accelerate decrypting

2008-06-29 Thread rfx
Using Openssl.exe to decypted s/mime mail, it's very low when i add a file about 2 Mo to the mail. what are options to accelarate decrypting in this case ? Thanks Dr Franck ROUSSIA __ OpenSSL Project

Re: nodetach and certfile

2008-04-01 Thread rfx
Yes, it's my fault ... in fact i use a PKCS11 engine to sign and there is a problem with it. Thank you Dr Franck ROUSSIA Dr. Stephen Henson a écrit : On Tue, Apr 01, 2008, rfx wrote: I use this function with success to sign a message and add a cert file : openssl smime -sig

nodetach and certfile

2008-04-01 Thread rfx
I use this function with success to sign a message and add a cert file : openssl smime -sign -in message.txt -text -out mail.msg -signer mycert.pem -inkey mykey.pem -certfile othercert.pem But when i try to sign with "opaque" function "nodetach" it don't want to add cert file : "openssl smi

Re: S_client

2008-02-24 Thread rfx
tion. An idea ? Thanks Dr Franck ROUSSIA rfx a écrit : I use s_client -connect www.mysite.com:443 with success. I Obtain cert form ssl server and html pages after using "GET / HTTP/1.0" and now i would like, after authentification with openssl, get html page from ssl server with us

S_client

2008-02-24 Thread rfx
I use s_client -connect www.mysite.com:443 with success. I Obtain cert form ssl server and html pages after using "GET / HTTP/1.0" and now i would like, after authentification with openssl, get html page from ssl server with usual browser. (perhaps like a proxy ?) Is it possible ? Thanks Dr F

Opaque signed data

2008-02-15 Thread rfx
I use with success "pkcs7 -in signdata.txt -inform DER -print_certs -outform PEM -out Cert.cer" to extract certificats. But how to extract message from a pkcs7 opaque signed data ? Thanks Dr Franck ROUSSIA __ OpenSSL Proje

Re: verify and CRLs

2008-01-16 Thread rfx
It's logical ;-) Thank you Dr Franck ROUSSIA Dr. Stephen Henson a écrit : On Wed, Jan 16, 2008, rfx wrote: "If i all understood" ;-) I have 2 certificates : - One with "keyusage" as AC Certificate "CertAC.cer" - One with "keyusage" as crl sign

Re: verify and CRLs

2008-01-16 Thread rfx
quot; extension is the same !! So when the last file copy is "Cert_crlsigner.cer" i have "unable to get issuer certificate" error and when the last file copy is "CertAC.cer" i have "key usage does not include CRL signing" error Is it the reason of my problems ? So how

Re: verify and CRLs

2008-01-16 Thread rfx
Henson a écrit : On Wed, Jan 16, 2008, rfx wrote: I make new path using hash name/ ".0" extension for certificat/".r0" extension for CRL The function: 'verify -CApath @CRLCA\ -issuer_checks -crl_check "SignCertPEM.cer" The result is : SignCertPEM.ce

verify and CRLs

2008-01-16 Thread rfx
I make new path using hash name/ ".0" extension for certificat/".r0" extension for CRL The function: 'verify -CApath @CRLCA\ -issuer_checks -crl_check "SignCertPEM.cer" The result is : SignCertPEM.cer: /C=FR/O=GIP-CPS/OU=M\xE9decin/CN=0081013443/SN=ROUSSIA/GN=FRANCK error 29 at 0 depth lo

Re: CMS RFC2360 and asn1parse ...

2008-01-08 Thread rfx
Yes ! ... i try it and it seem to be well when i compare ASN1 structures ... i think i would like to "complicated my life" ;-) Thank you Dr Franck ROUSSIA Dr. Stephen Henson a écrit : If you want to include the content in the PKCS#7 structure then use the -nodetach option to smime. Steve. --

Re: CMS RFC2360 and asn1parse ...

2008-01-08 Thread rfx
"It wouldn't help if you could because that structure contains a digital signature later on and if you changed the content the signature would no longer be valid." Perhaps, signed "data" using "smime" function in RFC 2315 format of openssl with signature at the end and integrate "data" in the pk

Re: CMS RFC2360 and asn1parse ...

2008-01-08 Thread rfx
s it possible to introduce "data" at the good offset using asn1parse function of openssl ? ... other method ? This difference is alone ? Thanks Dr Franck ROUSSIA Dr. Stephen Henson a écrit : On Tue, Jan 01, 2008, rfx wrote: An IGC need sign request certificat to subscribe only i

Re: CMS RFC2360 and asn1parse

2008-01-07 Thread rfx
end and i don't know the ASN1 functions to do it ... i try to copy certificat in DER format using text editor "but more simply", it 's wrong method ;-) Other solution ? Thanks Dr Franck ROUSSIA rfx a écrit : An IGC need sign request certificat to subscribe only in CMS RFC2

Re: How to create openssl certificate by using only single commands

2008-01-07 Thread rfx
I think you can use : -passin pass:"yourpass" ... Dr Franck ROUSSIA Tran Son a écrit : Hi all. Whenever i create certificates using openssl i have to type my pass phrase and something else. Now how can i create certificate just using single commands with the pass phrase, country... in the par

Re: subscribe

2008-01-07 Thread rfx
Excuse ... server problems keeping emails since 8 days ... Dr. Franck ROUSSIA rfx a écrit : I would like to subscrib to your mail list - openssl.org ... Can't you tell me how to Thank you Dr Franck ROUSSIA __ Op

CMS RFC2360 and asn1parse

2008-01-07 Thread rfx
An IGC need sign request certificat to subscribe only in CMS RFC2360 format so i would like (but i don't know if it's the best solution) to make it using asn1parse and genconf functions. I try to reproduce an example of CMS signeddata with first part is : -- 0:d=0 hl=4

CMS RFC2360 and asn1parse ...

2008-01-07 Thread rfx
An IGC need sign request certificat to subscribe only in CMS RFC2360 format so i would like (but i don't know if it's the best solution) to make it using asn1parse and genconf functions. I try to reproduce an example of CMS signeddata with first part is : -- 0:d=0 hl=

CMS RFC2360 and asn1parse ...

2008-01-07 Thread rfx
An IGC need sign request certificat to subscribe only in CMS RFC2360 format so i would like (but i don't know if it's the best solution) to make it using asn1parse and genconf functions. I try to reproduce an example of CMS signeddata with first part is : -- 0:d=0 hl

CMS RFC2360 and asn1parse

2008-01-07 Thread rfx
An IGC need sign request certificat to subscribe only in CMS RFC2360 format so i would like (but i don't know if it's the best solution) to make it using asn1parse and genconf functions. I try to reproduce an example of CMS signeddata with first part is : -- 0:d=0 h

subscribe

2008-01-07 Thread rfx
I would like to subscrib to your mail list - openssl.org ... Can't you tell me how to Thank you Dr Franck ROUSSIA __ OpenSSL Project http://www.openssl.org User Support Mailing List

Test

2008-01-06 Thread rfx
Test __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]