how to load a certs chain from memory, thanks

2012-12-21 Thread 赵峰
Hi all, I want to load a certs chain from memory ( ie. From a std::string variable with the certs chain’s content loading from the mysql db ). The content of certs chain is like a CAfile. Because loading from memory, can not call the “SSL_CTX_load_verify_locations” api. So I call

rsa private key formats

2012-12-21 Thread Pavol Supa
Hi all, I wonder if there is some format directly supported by openssl, suitable for storing RSA key pair in the following way: - RSA private key (d,p,q,...) encrypted with passhphrase - RSA public key (n,e) unencrypted, so I can load public key without knowing passphrase, from the same data

答复: how to load a certs chain from memory, thanks

2012-12-21 Thread 赵峰
Thanks Dave ! Your suggestion and demo code are pretty good ! And I also read the source code of SSL_CTX_load_verify_locations api and find that: We can imitate the implement of X509_load_cert_crl_file function in X509_load_cert_crl_file file int X509_load_cert_crl_file(X509_LOOKUP *ctx,

RSA_private_decrypt function takes longer time.

2012-12-21 Thread Tayade, Nilesh
Hi, I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to compute key. It is seen that

Re: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Florian Weimer
On 12/21/2012 01:13 PM, Tayade, Nilesh wrote: I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to

Issue with certificate chain

2012-12-21 Thread Deeztek.com Support
I have a weird issue when creating and importing PFX files into Windows 7 clients. I have created a CA and a sub CA and I have created client certificates. When I import them into Windows 7 clients (in all fairness I have only tried windows 7), when I go to look at the certification path, it

RE: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Tayade, Nilesh
-Original Message- From: Florian Weimer [mailto:fwei...@redhat.com] Sent: Friday, December 21, 2012 5:58 PM To: openssl-users@openssl.org Cc: Tayade, Nilesh Subject: Re: RSA_private_decrypt function takes longer time. On 12/21/2012 01:13 PM, Tayade, Nilesh wrote: I am using

Re: ECDSA_do_verify

2012-12-21 Thread Matt Caswell
You should just be able to create an ECDSA_SIG structure using: ECDSA_SIG *mysig; if(!(mysig = ECDSA_SIG_new())) goto err; And then simply copy your r and s values directly into the ECDSA_SIG structure (assuming they are BIGNUMs): if(!BN_copy(mysig-r, r)) goto err; if(!BN_copy(mysig-s, s))

Re: rsa private key formats

2012-12-21 Thread Jakob Bohm
On 12/20/2012 6:58 PM, Pavol Supa wrote: Hi all, I wonder if there is some format directly supported by openssl, suitable for storing RSA key pair in the following way: - RSA private key (d,p,q,...) encrypted with passhphrase - RSA public key (n,e) unencrypted, so I can load public key without

Re: RSA_private_decrypt function takes longer time.

2012-12-21 Thread Jakob Bohm
On 12/21/2012 1:13 PM, Tayade, Nilesh wrote: Hi, I am using the RSA_private_decrypt() function in one of the custom applications, where we expect the premaster to get decrypted faster. I tried looking at the time consumed by RSA_private_decrypt and loops involved in pseudo-random function to

Re: Issue with certificate chain

2012-12-21 Thread Jakob Bohm
On 12/21/2012 1:27 PM, Deeztek.com Support wrote: I have a weird issue when creating and importing PFX files into Windows 7 clients. I have created a CA and a sub CA and I have created client certificates. When I import them into Windows 7 clients (in all fairness I have only tried windows 7),

Re: How to implement DH algorithm using openSSL library?

2012-12-21 Thread Hemayamini Kurra
Thanks prashant!! This helped alot!! On Thu, Dec 20, 2012 at 10:09 PM, Prashant Batra prashant0...@gmail.comwrote: I have this fucntion which I use to generate public-private key pair. - prime : depends on the dh group, you can find these values in DH rfc -

Re: How to implement DH algorithm using openSSL library?

2012-12-21 Thread Hemayamini Kurra
I also have a problem in sending the pub_key to peer. As I am using DH_generate_parameters to generate prime and generator and DH_generator_key for generating the public key , I have to send the prime, g and pub_key to the peer. Is there any function to do this?? Thanks in advance. Yamini. On