pb in simultaneous certificate generation

2007-05-16 Thread piyush tewari
Hello everybody, i m trying to create openssl for generating multiple certificate generation, simultaneously. but the error i m having during this process is that some other process is using serial file. Is there any mean by which i can perform the simultaneous crt generation by bat file

RE: CRL management pb

2007-05-16 Thread jfhuynh
Thank you Steve .. I try to perform the test with s_server but I believe it does not handle CRL file ( no option for this apparently) :( Thank you Dr. Henson for the answer .. I feel more ensured ... :) I achieved to go a little bit further in my test now after having put the right

Encrypt the big file with symmetric algorithm

2007-05-16 Thread JGong
Hi, all I have encrypted the file with the manpage example (blowfish), and then decrypt it. It will be fine if I try some small files, however, when I test some big files (e.g.: 100M), the decryption will not work. Is there anybody can suggest me an available way to do big file encryption and

Certificates, users and machines

2007-05-16 Thread Urjit Gokhale
Hello everyone, I have some doubts about certificates, which I wish to get clarification on. Here is my understanding about certificates: * Certificates bind the public key with some other information like the name of the owner(user), who generated the certificate, the validity period etc. *

Re: Certificates, users and machines

2007-05-16 Thread Kyle Hamilton
A certificate binds the public key of a public/private (asymmetric) key pair with additional information. A certificate is trusted by some trusting authority. In most cases, this is a certifying authority (CA) -- and the asymmetric signature by the CA is an assertion that the CA believes

Re: Encrypt the big file with symmetric algorithm

2007-05-16 Thread Harald Latzko
Hi! I use for big file encryption the new stream support of openSSL 0.9.9, it works perfectly. For decryption (and signature verification), the stream support is not implemented yet. So we have to wait until it's implemented, or find another solution. If you have found another way to do

Re: CRL management pb

2007-05-16 Thread Dr. Stephen Henson
On Wed, May 16, 2007, [EMAIL PROTECTED] wrote: Thank you Steve .. I try to perform the test with s_server but I believe it does not handle CRL file ( no option for this apparently) :( In OpenSSL 0.9.8 and later at least you set the -crl_check option or -crl_check_all. The certificates

Re: CRL management pb

2007-05-16 Thread Victor B. Wagner
On 2007.05.16 at 13:30:12 +0200, Dr. Stephen Henson wrote: In OpenSSL 0.9.8 and later at least you set the -crl_check option or -crl_check_all. The certificates and CRL(s) for verification can be supplied in a single file using -CAfile or a directory using -CApath. But it is still

Re: Certificates, users and machines

2007-05-16 Thread Victor B. Wagner
On 2007.05.16 at 16:03:38 +0530, Urjit Gokhale wrote: Hello everyone, I have some doubts about certificates, which I wish to get clarification on. Here is my understanding about certificates: * Certificates bind the public key with some other information like the name

Re: CRL management pb

2007-05-16 Thread jfhuynh
Just to be sure... I have a crl file called crl.pem and a CA file called trustees.pem To perform crl check with s_server, do I have to create a new file cacrlfile.pem which is the concatenation of trustees.pem and crl.pem file. and launch the following command: openssl s_server -accept 7770 -cert

Re: Certificates, users and machines

2007-05-16 Thread Peter Sylvester
I hope this information helps. -Kyle H Thank you for your response and information about the proxies. I now have a feeling that to write a verification callback function, I will need to retrieve the information stored in the certificate that the peer has sent to me. If you want

Re: CRL management pb

2007-05-16 Thread Dr. Stephen Henson
On Wed, May 16, 2007, [EMAIL PROTECTED] wrote: Just to be sure... I have a crl file called crl.pem and a CA file called trustees.pem To perform crl check with s_server, do I have to create a new file cacrlfile.pem which is the concatenation of trustees.pem and crl.pem file. and launch

Extracting all extensions from a certificate

2007-05-16 Thread Christopher Kunz
Hi, how can I extract all extensions from a certificate into a STACK_OF(X509_EXTENSION)? For certificate requests, there is X509_REQ_get_extensions that returns this stack, but how is that done with an actual certificate? Regards, --ck

Re: Extracting all extensions from a certificate

2007-05-16 Thread Bruce Stephens
Christopher Kunz [EMAIL PROTECTED] writes: how can I extract all extensions from a certificate into a STACK_OF(X509_EXTENSION)? For certificate requests, there is X509_REQ_get_extensions that returns this stack, but how is that done with an actual certificate? X509_get_ext_count(),

Re: Extracting all extensions from a certificate

2007-05-16 Thread Christopher Kunz
Bruce Stephens schrieb: X509_get_ext_count(), X509_get_ext(), and the usual stack macros STACK_OF(X509_EXTENSION), sk_X509_EXTENSION_push() and so on, I guess. That does the trick. However, I'm stumped at how to convert an extension value back to a string. I call obj =

Re: Extracting all extensions from a certificate

2007-05-16 Thread Bruce Stephens
Christopher Kunz [EMAIL PROTECTED] writes: [...] Is there any up-to-date complete documentation available for the full function set of OpenSSL? For some of the stuff, like ASN.1 manipulation, I can't even find anything on Google... Not that I know of. I use Source Navigator (or

Re: Extracting all extensions from a certificate

2007-05-16 Thread Dr. Stephen Henson
On Wed, May 16, 2007, Christopher Kunz wrote: Bruce Stephens schrieb: X509_get_ext_count(), X509_get_ext(), and the usual stack macros STACK_OF(X509_EXTENSION), sk_X509_EXTENSION_push() and so on, I guess. That does the trick. However, I'm stumped at how to convert an extension

Re: Encrypt the big file with symmetric algorithm

2007-05-16 Thread Chaz.
[EMAIL PROTECTED] wrote: Hi, all I have encrypted the file with the manpage example (blowfish), and then decrypt it. It will be fine if I try some small files, however, when I test some big files (e.g.: 100M), the decryption will not work. Is there anybody can suggest me an available way to do