bntest BN_sqr Test Fails on Linux ( SUSE and REDHAT ) Z Series 64bit ..

2009-01-06 Thread Anil Tambe
hi, bntest BN_sqr Test Fails on Linux ( SUSE and REDHAT ) Z Series 64bit .. it works fine on 32bit. openssl version: openssl 0.9.8g platform : Linux ( SUSE and REDHAT ) Z Series 64bit . / Abstract from log .. test BN_sqr print test BN_sqr\n -E0FFD4 * -E0FFD4 -

Custom attribute identifier for stateOrProvinceName

2009-01-06 Thread SilverThunder
Hi everyone, I need to create CSRs to be processed by a CA running on Windows 2003. The problem that I have is that the CA do not use the standard ST attribute for stateOrProvinceName, they use S instead. I have researched this but can't find anything... can it be done without modifying the code

help about ssl access with openssl cert.

2009-01-06 Thread Buddy wu
I use openssl to sign the cert. and I've setuped a ca req a cert for my webserver, and sign with this ca, name with server.crt(cert file) and server.key(key file) configured the apache to use ssl, and the cert file. now I can access this ssl web site with firefox 3.0 but I can't access this ssl

Build error: /usr/local/ssl/lib/libcrypto.a: could not read symbols: Bad value

2009-01-06 Thread Patrick Waldo
Hi All, I'm trying to get ssl support for my server running SLES 10 and python 2.4.5 and I'd like to send emails automatically. I just installed openssl 0.9.8i with no problems. It installed to the usual /usr/local/ssl. I then ran python setup.py build_ext -I/usr/local/ssl/include

MODULE_PATH

2009-01-06 Thread Bram Cymet
Hi, I am trying to implement a new smartcard for a project I am working on. I am using M2Crypto as a python wrapper for openSSL. I am able to communicate with the smartcard using openssl on the command line just fine. The problem I have is with the python side of things. I can get all the setup

Re: AES key generation

2009-01-06 Thread Cyanure
Thank you for your quick answer. I have another question concerning the salt. Are there any recommendation about the salt length or how the salt is generated ? And for the iteration number, you said that it is recommended to have more that 1000 iterations. In wich magnitude ? 5000, 10 000, 100

pkcs8 question

2009-01-06 Thread Nate
I'm using openssl to create an encrypted key in pkcs8 format. Specifically I'm using triple des. An example of the asn1parse output is below. My goal is to take the rather long hexadecimal value, which I assume is the encrypted key, and decrypt it using a separate triple des decryption library.

Newbie Questions

2009-01-06 Thread Richard Lichvar
A newbieto OpenSSL here. (Mainly used to using 3rd party authorities.) Not very good at command line stuff either. 1. Cert request generated from IIS 6 but it is against the default website with .txt extension. Can a cert be generated using this request? 2. Used the example in

openssl 0.9.8j

2009-01-06 Thread Blasdel, Jerry
Would anyone have an update on the status of 0.9.8j and when it will be officially released? Our customer would like us to go back to using fips now that fips 1.2 has been certified. Is this version of OpenSSL going through a similar certification process? Any blurb that could be provided on

Re: AES key generation

2009-01-06 Thread Victor Duchovni
On Tue, Jan 06, 2009 at 07:02:44AM -0800, Cyanure wrote: I have another question concerning the salt. Are there any recommendation about the salt length or how the salt is generated ? ftp://ftp.rsasecurity.com/pub/pkcs/pkcs-5v2/pkcs5v2_1.pdf 4.1 Salt [ ... lots of text about multi-use

Re: pkcs8 question

2009-01-06 Thread Dr. Stephen Henson
On Tue, Jan 06, 2009, Nate wrote: I'm using openssl to create an encrypted key in pkcs8 format. Specifically I'm using triple des. An example of the asn1parse output is below. My goal is to take the rather long hexadecimal value, which I assume is the encrypted key, and decrypt it using a

Re: openssl 0.9.8j

2009-01-06 Thread Marquess
Blasdel, Jerry wrote: Would anyone have an update on the status of 0.9.8j and when it will be officially released? Our customer would like us to go back to using fips now that fips 1.2 has been certified. Is this version of OpenSSL going through a similar certification process? Any blurb

RE: Custom attribute identifier for stateOrProvinceName

2009-01-06 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of SilverThunder Sent: Monday, 05 January, 2009 14:41 I need to create CSRs to be processed by a CA running on Windows 2003. The problem that I have is that the CA do not use the standard ST attribute for stateOrProvinceName, they use S