DSA and DH key validation

2012-10-30 Thread Jitendra Pawar
How to validate DSA and DH generated keys from openssl command line interface. Since we can validate the rsa keys using '-check' option in rsa command . Do we have same provision for DSA and DH keys. -- Thanks Regards Jitendra Pawar

Re: PEM_read_PrivateKey

2012-10-30 Thread Gerardo Ganis
Dear Steve, Thank you very much for the prompt and exhaustive reply. Gerardo On 10/29/12 7:06 PM, Dr. Stephen Henson wrote: On Mon, Oct 29, 2012, Gerardo Ganis wrote: Dear OpenSSL Users, Could someone confirm that when loading private keys in memory using

Re: [openssl-users] Re: Reference material on how to do certificate validation with OpenSSL

2012-10-30 Thread Alban D.
Sorry for the confusion. We initially uploaded the wrong version of the paper and that's something I noticed yesterday. The code was out of sync with the repo on Github. I also changed a few other things while I was at it. Thanks for all the feedback. 2012/10/30 Jeffrey Walton noloa...@gmail.com:

Re: RSA quintuple vs. xmldsig mismatch

2012-10-30 Thread Miroslav Mikluš
I'm afraid RSAKeyValue may represent both public, or private key, but that's not the point. The RFC itself defines 2 forms of representation of private key, but openssl works only with the second one, the encryption works fine when I pushed zeroes to the RSA structure, but I didn't find any

RES: PEM_read_PrivateKey

2012-10-30 Thread Leonardo Laface de Almeida
Dave, The Page: http://www.openssl.org/docs/crypto/pem.html Actually, the code is not equal I've reported here. In fact, I will create a project only for this callback problem. The password problem was copy-paste error. I'm sorry about it. I'm going to take the the error code, then I reply

Re: https server using openssl

2012-10-30 Thread Andrey Koltsov
Hi. I think that you should write simple HTTP server first and add SSL support to it afterwards. Best regards, Andrey Koltsov software developer 29.10.2012 20:49, Indtiny s пишет: Hi, I have CCM chiper suite in the openssl and for some other requirement I have write my own simple

RE: https server using openssl

2012-10-30 Thread Charles Mills
Absolutely! Charles -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Andrey Koltsov Sent: Tuesday, October 30, 2012 4:08 AM To: openssl-users@openssl.org Cc: Indtiny s Subject: Re: https server using openssl Hi. I think that

RES: PEM_read_PrivateKey

2012-10-30 Thread Leonardo Laface de Almeida
Hi, The code for my project example is attached. The error code is as well. The error remains. For generating Key, the callback is called. For getting Private Key, the callback is not called. What's wrong here? I really appreciate any help. Thanks. Leonardo attachment:

Re: Reference material on how to do certificate validation with OpenSSL

2012-10-30 Thread Jakob Bohm
On 10/29/2012 7:05 PM, Jeffrey Walton wrote: On Mon, Oct 29, 2012 at 11:04 AM, Jakob Bohm jb-open...@wisemo.com wrote: On 10/27/2012 10:58 PM, Jeffrey Walton wrote: On Sat, Oct 27, 2012 at 11:00 AM, Alban D. blan...@gmail.com wrote: Hi everyone, iSEC Partners just released a paper that

Re: RSA quintuple vs. xmldsig mismatch

2012-10-30 Thread Jakob Bohm
(continuing TOFU posting to match the OP) A private/public RSA key pair in (n,e)+(n,d) format can be converted to (n,p,q,e,d,d%(p-1),d%(q-1), (1/q)%p) form by using well known mathematical steps that are fairly cheap. A private RSA key in (n,d) format with no information on e cannot be

Re: RSA quintuple vs. xmldsig mismatch

2012-10-30 Thread Miroslav Mikluš
+1 Thanks, M. On 30. 10. 2012 15:36, Jakob Bohm wrote: (continuing TOFU posting to match the OP) A private/public RSA key pair in (n,e)+(n,d) format can be converted to (n,p,q,e,d,d%(p-1),d%(q-1), (1/q)%p) form by using well known mathematical steps that are fairly cheap. A private RSA key

Re: Adding OIDs

2012-10-30 Thread aparnavegendla
hello everyone, I tried to add OID in objects.txt int his way X509 57 : DUID:DeviceUID and then compiled using these commands from objects folder [ /usr/local/src/openssl-1.0.0a/crypto/objects ]. #perl objects.pl objects.txt obj_mac.num obj_mac.h it displayed, Added OID DeviceUID #perl

Re: Reference material on how to do certificate validation with OpenSSL

2012-10-30 Thread Jeffrey Walton
On Tue, Oct 30, 2012 at 10:03 AM, Jakob Bohm jb-open...@wisemo.com wrote: On 10/29/2012 7:05 PM, Jeffrey Walton wrote: On Mon, Oct 29, 2012 at 11:04 AM, Jakob Bohm jb-open...@wisemo.com wrote: On 10/27/2012 10:58 PM, Jeffrey Walton wrote: On Sat, Oct 27, 2012 at 11:00 AM, Alban D.

openssl RSA_sign() and Java verify how

2012-10-30 Thread redpath
I am using openssl to create a signature for a file contents and use openssl to verify the contents using the signature file. The public key is from an x509 cert. All works great. I need to verify a file contents using Java. So I have written a sample Java application and it returns false and

Build FIPS capable OpenSSL for iOS, Android on macos

2012-10-30 Thread Jun Sun
Hi everyone, I am working on a project to cross compile FIPS capable openssl library for iOS and Android on a Mac OS computer. I found some place of openssl need to be modified to successfully compile the code, here are the changes I did and hope it can help others. The FIPS module I am using

Use openssl artifacts RSA_sign() (signature) and Java to verify

2012-10-30 Thread redpath
How to use created openssl artifacts (Signature and RSA public key in x509) from Java to verify signature of the contents of a file. I ran into problems doing this so I am posting it for others in the future. I use openssl to create artifacts a signature for a file contents and an RSA

Re: RES: PEM_read_PrivateKey

2012-10-30 Thread Dr. Stephen Henson
On Tue, Oct 30, 2012, Leonardo Laface de Almeida wrote: Hi, The code for my project example is attached. The error code is as well. The error remains. For generating Key, the callback is called. For getting Private Key, the callback is not called. What's wrong here? I really