CRL reload question

2013-09-30 Thread Markus Moeller
Hi, How do I correctly re-loading CRLs ? I use X509_STORE_add_crl but get an error: error:0B07D065:x509 certificate routines:X509_STORE_add_crl:cert already in hash table Even if the CRL was updated I get the same error. I use openssl-0.9.8x. Thank you Markus

RE: CAPI and Private keys

2013-09-30 Thread Fili, Tom
So the string that the capi engine needs is a comma separated string of the entry values like what is returned by CertNameToStr with CERT_SIMPLE_NAME_STR type. The only problem the I seem to run into is when dealing with extended characters. CertNameToStr seems to output a correct looking

How do I get the .key file, to put on the server (for use by Apache httpd)

2013-09-30 Thread Ted Byers
I issued the following command (with my own name in place of privkey) openssl genrsa -out privkey.pem 2048 I then made the csr using openssl req -new -key privkey.pem -out cert.csr That is simple enough. But, I need a .key file to deploy on the server beside the crt files. If I understand

Re: How do I get the .key file, to put on the server (for use by Apache httpd)

2013-09-30 Thread Kelly John Rose
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 If the PEM file contains the private key, then openssl rsa -in veripay.pem -out gw.veripay.co.uk.key should work as expected. pem is just a wrapper around the data, so it should just pull it out of there if it's in there to start. On 30/09/2013

Re: Add message_id and date to encrypted mime

2013-09-30 Thread Daode
JohnSmith emmanuelemman...@web.de wrote: |*I encrypt an signed mime with this openssl command:* | |smime -encrypt -aes128 -to stadl3.de -from stweb.de -subject Nachricht -in |signedmessage -out encryptedsignedmessage2 stadl2certificate.pem | |*My problem is that the encrypted message only

GCM questions.

2013-09-30 Thread jtanis
Hi folks, I'm a bit of a newbie to OpenSSL (certainly to the forums), but I have worked with the code for a little while now. I have some questions about GCM which I'm hoping are appropriate to ask here: 1) Is there a way to run a GCM (AES-GCM-{128,192,256} FWIW) in a fashion that does not

RE: How do I get the .key file, to put on the server (for use by Apache httpd)

2013-09-30 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Kelly John Rose Sent: Monday, September 30, 2013 14:29 If the PEM file contains the private key, then openssl rsa -in veripay.pem -out gw.veripay.co.uk.key should work as expected. pem is just a wrapper around the data, so it should