[FWD] problem in privete key

2011-01-31 Thread Lutz Jaenicke
Forwarded to openssl-users for public discussion. Best regards, Lutz - Forwarded message from praveen kumar kapraveen1...@indiatimes.com - Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=private;

Extended Key Usage

2011-01-31 Thread Karthik Ravikanti
Hi, Using the command line tools I was able to create a CA, a certificate request and a certificate signed by the CA. However, I also need to add the Extended Key Usage field to the certificate. I used the -exfile and -extensions options in x509 to no avail. Help! Thanks, Karthik

Re: Got X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY when there was a root in the store.

2011-01-31 Thread Karthik Ravikanti
Dave, Sorry for a late reply, but I was able to zero in on the real problem. I was converting X509 objects to DER and that to Apple's SecCertificateRef. In the lookup method I was again getting DER from SecCertificateRef and an X509 from it. Strangely, both the objects have the same printed

Re: Extended Key Usage

2011-01-31 Thread Karthik Ravikanti
Never mind. This helped: http://www.mail-archive.com/openssl-users@openssl.org/msg37839.html On Mon, Jan 31, 2011 at 3:48 PM, Karthik Ravikanti karthik.ravika...@gmail.com wrote: Hi, Using the command line tools I was able to create a CA, a certificate request and a certificate signed by

Re: [FWD] problem in privete key

2011-01-31 Thread David Schwartz
On 1/31/2011 12:25 AM, Lutz Jaenicke wrote: Dear friend This is praveenkumar working as a app developer from Linkwell telesystems,hyderabad,India. i have a problem in ssl while hitting the server with the certificate provided by server.i am using openssl tool in linux. When

Re: OpenSSL with Managed C++

2011-01-31 Thread John R Pierce
On 01/31/11 10:55 AM, Harshvir Sidhu wrote: Hi, Can we use OpenSSL lib with Managed C++? Thanks. can you call native C style DLL's from this 'Managed C++' (whatever that is) ? my initial google of 'Managed C++' indicates its a Microsoft .NET thing that was deprecated circa 2005.

RE: First time attempting PostgreSQL SSL

2011-01-31 Thread David Patricola
I found an excellent tutorial on this: http://www.howtoforge.com/postgresql-ssl-certificates I followed the instructions perfectly, and used my client computer's IP address as the CA. Here's my setup so far: On the server: - In Postgre data/ I have the server.crt and server.key files

RE: PKCS12_parse / PKCS12_create issue

2011-01-31 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Muhammed Shafeek Sent: Wednesday, 26 January, 2011 12:30 I've a program that extracts private key and cert from the input pfx file loaded into the system and then create a p12 file out of this private key and cert

RE: [FWD] problem in privete key

2011-01-31 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of David Schwartz Sent: Monday, 31 January, 2011 09:50 To: openssl-users@openssl.org Cc: Lutz Jaenicke; praveen kumar On 1/31/2011 12:25 AM, Lutz Jaenicke [forwarded]: openSSLs_client -connect ip:port -cert certfile.crt ERROR:

Re: OpenSSL with Managed C++

2011-01-31 Thread Lee Fisher
Can we use OpenSSL lib with Managed C++? Thanks. http://openssl-net.sourceforge.net/ __ OpenSSL Project http://www.openssl.org User Support Mailing List

FW: First time attempting PostgreSQL SSL

2011-01-31 Thread David Patricola
Whoops, I forgot to include root.crt in the Postgre /data directory. Now that I fixed that, I am still getting the same connection error on the client side. -Original Message- From: David Patricola [mailto:david.patric...@jefferson.edu] Sent: Monday, January 31, 2011 4:10 PM To:

Re: First time attempting PostgreSQL SSL

2011-01-31 Thread Lou Picciano
David, First step - well before placing your certificates correctly, is to be sure your PostgreSQL _server_ has been compiled with SSL support. From that message, it seems it isn't... From there, you have to place all the certificates and keys in correct locations - but I think you're not

Re: First time attempting PostgreSQL SSL

2011-01-31 Thread Lou Picciano
David, a couple of additional thoughts, as I re-read this... First, in your client certs location - %appdata%/postgresql - you do _not_ need the CSR. This is the Certificate Signing Request. It won't hurt you, but save this elsewhere. Next: A common gotcha on Windows is that the %APPDATA%

Re: OpenSSL with Managed C++

2011-01-31 Thread William A. Rowe Jr.
On 1/31/2011 1:07 PM, John R Pierce wrote: On 01/31/11 10:55 AM, Harshvir Sidhu wrote: Hi, Can we use OpenSSL lib with Managed C++? Thanks. can you call native C style DLL's from this 'Managed C++' (whatever that is) ? my initial google of 'Managed C++' indicates its a Microsoft .NET

RSA_generate_key function

2011-01-31 Thread Ashwin Chandra
I would like to call this function to generate the same public/private key everytime. I thought all I had to do was create the same seed using RAND_seed each time, however I still keep getting different key pairs. Is there any way to have RSA_generate_key generate the same public/private key

Re: RSA_generate_key function

2011-01-31 Thread David Schwartz
On 1/31/2011 5:37 PM, Ashwin Chandra wrote: I would like to call this function to generate the same public/private key everytime. I thought all I had to do was create the same seed using RAND_seed each time, however I still keep getting different key pairs. Is there any way to have

RE: RSA_generate_key function

2011-01-31 Thread Ashwin Chandra
Hi David, 1. I am not sure what you mean by replacing RSA_generate_key with my own function, because I would like it to go through the process of creating prime numbers, and modulus, etc. Basically I want the RSA_generate_key to generate the same public key at startup each time my process runs.

Re:RSA_generate_key function

2011-01-31 Thread lzyzizi
int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e_value, BN_GENCB *cb) I would like to call this function to generate the same public/private key everytime. I do not sure what exactly want.I suppose that you want everytime you called theRSA_generate_key_exwith same parameters and you can