RE: How to use PKCS5_PBKDF2_HMAC_SHA1()

2012-03-23 Thread pkumarn
Let me go back to my white board and think what approach would be good. Even if i store HASH message my client doesn't want any keys or hash messages stored in flash be the way it is and so is the reason we wanted to even encrypt the DEK using key wrap... pkumarn wrote: Firstly i am really

RE: How to use AES_wrap_key() in openssl

2012-03-23 Thread pkumarn
Let me go to my white board and see what best i can choose. Issue is we don't want to sore any keys as it is, so is the reason to choose key wrapping. pkumarn wrote: One more thanks from side for replying to this query.,.. my comments inline... So are you saying that their is no way

Re: How to use PKCS5_PBKDF2_HMAC_SHA1()

2012-03-23 Thread Michel
If I don't misunderstand you, perhaps this little windows software could help you : http://sectools.free.fr/img/CryptoSym-EN.png http://sectools.free.fr/CryptoSym-EN.txt http://sectools.free.fr/CryptoSym-EN.zip Hope this help... Le 20/03/2012 05:35, pkumarn a écrit : Now coming to the

OpenSSL 1.0.1 libraries have 1.0.0 in the names

2012-03-23 Thread dave.mclellan
I'm seeing 1.0.0 used in the library (.so) names for crypto and ssl versions. I expected to see 1.0.1, consistent with the 0.9.X stream, where the version number agrees with version in the library name (as referenced in the link of the openssl executable for example). Can someone help me

Successfully building openssl-1.0.1 with Microsoft Visual Studio.

2012-03-23 Thread jeremy hunt
This posting is to help people to build OpenSSL 1.0.1 with Microsoft Visual Studio. It may also indicate a required change to the build instructions for Microsoft Visual Studio. Summary: -- I found I needed to install the Windows SDK and manually configure my build environment to

Query in EVP_PKEY_cmp for a particular value of .crt and .key

2012-03-23 Thread Ajay Garg
Hi all. I have been trying lately to debug a startup issue in APACHE's httpd service; and the last logs I receive in /etc/httpd/logs_error_log is # [error] SSL Library Error:

reading openssl list through gmane

2012-03-23 Thread Ken Goldman
Sorry for the administrative questions: I just started reading the openssl mailing list through gmane, and I like the newsreader interface far better than the email interface. Does anyone else use a newsreader? Two questions: 1 - Is there a way to remain 'subscribed' to the list so I'm

Re: Successfully building openssl-1.0.1 with Microsoft Visual Studio.

2012-03-23 Thread Thomas J. Hruska
On 3/23/2012 12:53 AM, jeremy hunt wrote: This posting is to help people to build OpenSSL 1.0.1 with Microsoft Visual Studio. It may also indicate a required change to the build instructions for Microsoft Visual Studio. Summary: -- I found I needed to install the Windows SDK and

Re: Query in EVP_PKEY_cmp for a particular value of .crt and .key

2012-03-23 Thread Marek . Marcola
Hello, owner-openssl-us...@openssl.org wrote on 03/23/2012 03:10:47 PM: Ajay Garg ajaygargn...@gmail.com Sent by: owner-openssl-us...@openssl.org Hi all. I have been trying lately to debug a startup issue in APACHE's httpd service; and the last logs I receive in

Re: Query in EVP_PKEY_cmp for a particular value of .crt and .key

2012-03-23 Thread Ajay Garg
Thanks Marek for the reply. I hope that it is ok if the key and cert files are with .key and .crt extensions (instead of pem). If yes, then fortunately (or unfortunately) the modulus matches.

Re: Query in EVP_PKEY_cmp for a particular value of .crt and .key

2012-03-23 Thread Marek . Marcola
Hello, Then do some more deep checking: 1) Check RSA key consistency $ openssl rsa -in key.pem -check -noout RSA key ok 2) Display RSA key and certificate $ openssl rsa -in key.pem -text -noout Private-Key: (1024 bit) modulus: 00:e3:29:5a:7f:55:8c:3d:78:d3:be:5d:85:f7:47:

Signcryption in OpenSSL

2012-03-23 Thread Shaf Alam
is it possible to implement signcryption in OpenSSL. I am new to OpenSSL, can anyone please help me to implement it. -- View this message in context: http://old.nabble.com/Signcryption-in-OpenSSL-tp33544665p33544665.html Sent from the OpenSSL - User mailing list archive at Nabble.com.

Re: Query in EVP_PKEY_cmp for a particular value of .crt and .key

2012-03-23 Thread Marek . Marcola
Hello, I'm sure you know that but just to remind: After sending to the list the output of command: $ openssl rsa -in server.key -text -noout you can not use this key (and certificate) for production. Best regards, -- Marek Marcola marek.marc...@malkom.pl owner-openssl-us...@openssl.org

RE: OpenSSL 1.0.1 libraries have 1.0.0 in the names

2012-03-23 Thread Jeremy Farrell
opensslv.h From: dave.mclel...@emc.com [mailto:dave.mclel...@emc.com] Sent: Thursday, March 22, 2012 8:43 PM To: openssl-users@openssl.org Subject: OpenSSL 1.0.1 libraries have 1.0.0 in the names I'm seeing 1.0.0 used in the library (.so) names for crypto and ssl versions. I expected