Re: Slow crypto initialization.

2010-07-01 Thread Ger Hobbelt
On Wed, Jun 30, 2010 at 9:12 PM, Brian Makin ma...@vivisimo.com wrote: Thank you... this is mostly what I expected. In our case we having a problem with a CGI program so the response time is important and initialization happens many times. We may just have to hope no other boxes display

Re: RFC 3436 (tls-over-sctp) support?

2010-07-01 Thread Michael Tüxen
On Jun 30, 2010, at 1:03 PM, Byron Campen wrote: I am looking into the possibility of using openssl on an sctp association (for SIP, specifically), and the standardized way of doing it is non-trivial (although not terribly complex; I call it non-trivial because it is doing something

[no subject]

2010-07-01 Thread YU WU
dear all, i am using openssl 0.9.8.e in M$ and compile in MSYS. i just want to encrypt a string and then decrypt later. for the encryption, it is always ok. but for decryption, it failed randomly. the word randomly means that for some cases, the decryption is ok, but for other cases, it

Skipping the OID and BIT string prefix in DER formatted RSA keys

2010-07-01 Thread Nick Kelsey
Hi guys, I am using the following command to output the public key for a given RSA private key: openssl rsa -in keyfile.private.pem -pubout -outform DER The output includes a SEQ with an OID, followed by a BIT string containing the DER formatted public key I need. Deleting the first 22 bytes

PKCS#7 and CMS Signed-And-Enveloped-Data command line

2010-07-01 Thread Federico Berton
Hi guys, I have to create a program following the PKCS#7 standard with Signed-And-Enveloped-Data datatype: SignedAndEnvelopedData ::= SEQUENCE { version Version, recipientInfos RecipientInfos, digestAlgorithms DigestAlgorithmIdentifiers, encryptedContentInfo EncryptedContentInfo, certificates

Re: Slow crypto initialization.

2010-07-01 Thread Jean-Marc Desperrier
Ger Hobbelt wrote: a symptom I have learned to associate with the Rand_poll() heap walking issue. AFAIR some time ago there was a problem that *just the first call* to the heap walking function would, under 64 bits Windows, take second in some circumstances. That's clearly a bug, and only

Password (passin/passout) parameters for openssl x509

2010-07-01 Thread Jon Kristensen
Looking at the man page for openssl x509* I can't find any password (passin/passout) arguments. However, when I run the command, I get prompted for the certificate pass phrase. How am I supposed to provide the certificate pass phrase? Thank you in advance! Warm regards, Jon Kristensen *)

byte order portability of message digests?

2010-07-01 Thread David Mathog
When making a message digest using the EVP_DigestInit_ex, EVP_DigestUpdate, EVP_DigestFinal_ex functions one ends up with a 20 byte (for instance, with sha1) data structure stored in the md array. What I would like to know is if the order of those bytes is affected by underlying architecture of

Re: byte order portability of message digests?

2010-07-01 Thread Dr. Stephen Henson
On Thu, Jul 01, 2010, David Mathog wrote: When making a message digest using the EVP_DigestInit_ex, EVP_DigestUpdate, EVP_DigestFinal_ex functions one ends up with a 20 byte (for instance, with sha1) data structure stored in the md array. What I would like to know is if the order of those

problem about value optimized out

2010-07-01 Thread 翔芦
Dear all, My code segment is to get a private key from a pem file for the data signing. The code is as the following: 1BIO *priv_pem; 2OpenSSL_add_all_algorithms(); 3priv_pem = BIO_new_file(privkey.pem, rb); 4 pKey_priv = RSA_new(); 5 pKey_priv =

openssl 1.0.0.a OCSP responder problem

2010-07-01 Thread Glenn, William
Hi, Is there a way to make the version 1.0.0a ocsp responder to sign responses using SHA256? The rsigner certificate is SHA256 and the requests are signed with SHA256 but responses are always SHA1. I saw a reference in a thread from 5/13/10 to draft-ietf-pkix-ocspagility that seems to imply

RE: Skipping the OID and BIT string prefix in DER formatted RSA keys

2010-07-01 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Nick Kelsey Sent: Thursday, 01 July, 2010 02:00 I am using the following command to output the public key for a given RSA private key: openssl rsa -in keyfile.private.pem -pubout -outform DER The output includes a SEQ with an OID,

RE: problem about value optimized out

2010-07-01 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of ?? Sent: Thursday, 01 July, 2010 18:13 My code segment is to get a private key from a pem file for the data signing. The code is as the following: 1BIO *priv_pem; 2

Re: problem about value optimized out

2010-07-01 Thread 翔芦
Dear Dave, Thank you for your detailed explanation. However, I still confused with those optimized line, which also occurs in the verification process. Here is the code to get a public key from the corresponding certificate, which follows your suggestions about EVP.