Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread David von Oheimb
On 13.10.21 01:32, Philip Prindeville wrote: Is there demo code for creating a CSR? demos/x509/mkreq.c seems to have gone away a while ago... Thanks! What I generally take as demo/sample code is the OpenSSL apps implementation in apps/ , though that can be rather complicated due to many

Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread David von Oheimb
On 13.10.21 01:32, Philip Prindeville wrote: Is there demo code for creating a CSR? demos/x509/mkreq.c seems to have gone away a while ago... Thanks! What I generally take as demo/sample code is the OpenSSL apps implementation in apps/ , though that can be rather complicated due to many

Re: Creating a CSR using OpenSSL v1.1.1

2021-10-12 Thread Philip Prindeville
> See: > > https://www.openssl.org/docs/man1.1.1/man3/i2d_re_X509_REQ_tbs.html > > Matt Is there demo code for creating a CSR? demos/x509/mkreq.c seems to have gone away a while ago... Thanks!

Re: Creating a CSR using OpenSSL v1.1.1

2021-04-29 Thread Joe Eremita
Hi Matt, Thanks so much for your response. Now I see what the 'tbs' acronym is for! I do have another question: this regards setting the signature in the signature element of the request. I figured out how to make an ECDSA_SIG object using the r and s components of the ECDSA

Re: Creating a CSR using OpenSSL v1.1.1

2021-04-29 Thread Matt Caswell
On 29/04/2021 15:04, Joe Eremita wrote: datasig_len = i2d_X509_REQ_INFO( req->req_info, NULL ); You can achieve this by instead doing: datasig_len = i2d_re_X509_REQ_tbs(req, NULL); See: https://www.openssl.org/docs/man1.1.1/man3/i2d_re_X509_REQ_tbs.html Matt

Creating a CSR using OpenSSL v1.1.1

2021-04-29 Thread Joe Eremita
Hello all, I am developing a library that uses an HSM, and I need to create a CSR to send to the CA. I have some examples using the X509_REQ to set the public key and attributes. I 've also seen examples of signing the CSR, which finds the req_info that is needed to sign the CSR:

Memory Leak Creating a CSR

2009-05-30 Thread Paul Suhler
Hi. Using OpenSSL 0.9.8i, I'm getting a memory leak when I create a CSR. My process is taken more-or-less from the Viega, et al. book: Initial: X509_REQ_new() to get the request structure OPENSSL_malloc(1) to add a byte to the request for the version RSA Key: RSA_new() for an RSA structure

Re: Memory Leak Creating a CSR

2009-05-30 Thread Dr. Stephen Henson
On Sat, May 30, 2009, Paul Suhler wrote: Hi. Using OpenSSL 0.9.8i, I'm getting a memory leak when I create a CSR. My process is taken more-or-less from the Viega, et al. book: No idea what that version is but the one in demos/x509/mkreq.c doesn't leak memory. Steve. -- Dr Stephen N.

RE: Memory Leak Creating a CSR

2009-05-30 Thread Paul Suhler
-users@openssl.org Subject: Re: Memory Leak Creating a CSR On Sat, May 30, 2009, Paul Suhler wrote: Hi. Using OpenSSL 0.9.8i, I'm getting a memory leak when I create a CSR. My process is taken more-or-less from the Viega, et al. book: No idea what that version is but the one in demos/x509

creating a CSR PKCS#10

2006-04-27 Thread K Vu (sent by Nabble.com)
need to try it using openssl command line first. Thanks so much, KVu. -- View this message in context: http://www.nabble.com/creating-a-CSR-PKCS-10-t1520782.html#a4129504 Sent from the OpenSSL - User forum at Nabble.com

Re: creating a CSR PKCS#10

2006-04-27 Thread Dr. Stephen Henson
On Thu, Apr 27, 2006, K Vu (sent by Nabble.com) wrote: Hello, I'm very new to openssl. I wanted to create a CSR PKCS#10 tried the following command: openssl req -config openssl.cnf -new -x509 -days 1001 -key private/cakey.pem -out certs/ca.cert and I got the following error:

creating a CSR

2003-02-23 Thread Rick Assmus
I was asked to renew a digital certificate for one of our servers running Apache Tomcat, but I'm running into problems. Below is the output I get when I try creating a CSR using the following command line from the VeriSign site, openssl req -new -nodes -keyout private.key -out public.csr. I sent

Creating a CSR with Extensions

2002-03-01 Thread Oliver Pawellek
I'm using the openssl req command with the -config openssl.cnf and -extensions set at in this case v3_ca, however, the end generated CSR pem file does not appear to contain the extensions at all. I view the file with openssl req -noout -text -verify -in xreq.pem. Any ideas? or have I really

Creating a CSR and a CA

2000-05-11 Thread Thomas Heidkamp
Hey there, I am realy new in ssl, so perhaps this Question is stupid, but perhaps I am getting an answer: Normaly first I have to create a CSR-Key : with this command cd /usr/local/ssl/certs /usr/local/ssl/bin/openssl req -new -x509 -days 365 -key server.key -out server.csr Ok, now I have