how to create Certificate chain

I want to know the steps to create a certificate chain using the openssl command prompt. Kindly tell me the step by step instructions to do so. -- View this message in context: http://www.nabble.com/how-to-create-Certificate-chain-tp19722970p19722970.html Sent from the OpenSSL - User mailing

How to convert certificate from .pem to .der format

I want to know the openssl APIs to convert a certificate from .pem to .der format. I know about the openssl command which does the same. But Can you tell me how to do it in a Cprogram using openssl or any other method -- View this message in context:

CA.pl resign certificate problem

Hi, If I'd like to sign a certificate for a server for which I had previously signed a certificate with a different server key how can I do this from the same CA using the builtin CA.pl script? It has saved something about the first time that a cert was signed for server x and now just gives

OpenSSL Version Compatabitlity issues

Hi   I am facing issues in running my application on two different Linux distributions having different OpenSSL versions.   The application “foo” is built on SUSE 9 and is intended to be executed on RHEL 4, 5, SUSE 9 and 10. The application”foo” links implicit dynamic with OpenSSL libraries

Re: question about dtls server with multiple client

Hi, I have exactly the same problem as you. Did you do any progress with this problem? I have some simple results of my experiments with this problem. When one connection between server and client is established and other client tries to connect, then SSL_read(ssl_01) returns error:

query regarding Fedora and SSL

Hi All, I am using Fedora Linux. How to determine the kind of sockets that the SSL code uses. I need to work on those sockets. And then how to know the socket calls that are specific to Fedora version of linux? Regards, Prashanth

Article on PKI and OpenSSL

Hello, my name is Alessandro Tani, together with my colleague Iarno Pagliani, we made a guide (http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html) on how to create a PKI infrastructure with OpenSSL on Debian platform, to provide digital certificates for programs like Postfix,

Re: Article on PKI and OpenSSL

On Tue September 30 2008, Alessandro Tani wrote: Hello, my name is Alessandro Tani, together with my colleague Iarno Pagliani, we made a guide (http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html) on how to create a PKI infrastructure with OpenSSL on Debian platform, to provide

Installation Steps for OpenSSL on AIX Unix

Greetings, We would like to install the latest stable version of the OpenSSL software on our AIX 5.3 Unix server to support a product known as Cloverleaf Integrator (an interface engine). We have downloaded a tarball from the official OpenSSL website and opened it up using Winzip. We

Client Certificates

Hello all, I'm having a little trouble testing out some web services for a client. They have provided us with a couple of pfx certificate files to allow us to authenticate to their web servers. I can import this into IE and connect to the site without any trouble but when I try and use s_client I

Re: Installation Steps for OpenSSL on AIX Unix

I think you are attempting to install from the source code. This installation is highly platform dependent and varies from platform to platform. Having said that OpenSSL uses the GNU make system. The basic steps are: Unzip/untar Enter new directory Run ./configure Run make Run make install

Trouble with bidirectional shutdown

I have an application which is occasionally hanging. I have tracked it down to an SSL_shutdown call. The value (0) returned from the shutdown call indicates that the shutdown is not finished. The shutdown man page indicates that a second call to SSL_shutdown should cause a bidirectional shutdown,

Re: How to convert certificate from .pem to .der format

praveens wrote: I want to know the openssl APIs to convert a certificate from .pem to .der format. I know about the openssl command which does the same. But Can you tell me how to do it in a Cprogram using openssl or any other method Hi, load your x509 file using loaded = PEM_read_X509(f,

Re: How to convert certificate from .pem to .der format

There is an apps directory in the openssl source tarball. That is a gud starting point to dig for the api's ur looking for. -ugen praveens wrote: I want to know the openssl APIs to convert a certificate from .pem to .der format. I know about the openssl command which does the same. But

Re: Installation Steps for OpenSSL on AIX Unix

Hello, [EMAIL PROTECTED] wrote on 09/30/2008 03:34:28 PM: Greetings, We would like to install the latest stable version of the OpenSSL software on our AIX 5.3 Unix server to support a product known as Cloverleaf Integrator (an interface engine). We have downloaded a tarball from

RE: Installation Steps for OpenSSL on AIX Unix

Thank you for your excellent suggestions. I will pass these on to our Unix Admin group here at Allina. Bob Richardson Allina Hospitals and Clinics IS Data Integration - Cloverleaf Phone: 612-262-0041 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

Error Encrytping Symmetric key with RSA Public Key

Hi group, I have written a simple program to test my understanding of the OpenSSL APIs. And of course I have a problem with one of them. My problem is that when I use RSA_public_encrypt to encrypt my Symmetric key is get the following error: Testing RSA encryption of Symmertic key

RE: Error Encrytping Symmetric key with RSA Public Key

The answer is in: data too large for key size According to Secure Programming Cookbook, when using RSA PKCS #1 v1.5 padding you can only encrypt messages up to 11 bytes smaller than the modulus size in bytes. If you are using RSA-1024, then that is (1024/8)-11=117 bytes. Bill -Original

RE: Trouble with bidirectional shutdown

Solveig Viste wrote: I have an application which is occasionally hanging. I have tracked it down to an SSL_shutdown call. The value (0) returned from the shutdown call indicates that the shutdown is not finished. As happens with non-blocking sockets, sometimes the operation does not

Re: Error Encrytping Symmetric key with RSA Public Key

Bill, You are 100% right. I increased my buffer from 1024 to 1115 and it works fine now. I guess I should RTFM more? Thanks. Bill Colvin wrote: The answer is in: data too large for key size According to Secure Programming Cookbook, when using RSA PKCS #1 v1.5 padding you can only