Re: [openssl-users] Help finding replacement for ASN1_seq_unpack_X509

2016-07-20 Thread Jim Carroll
Thanks muchI have a corollary question if you don't mind. In OpenSSL 1.1.0, what is the accepted procedure to convert a STACK_OF(X509) to DER? Would it be acceptable to just iterate the stack elements, passing each X509 through i2d_X509 and appending the results -- would that generate valid

[openssl-users] openssl-SNAP-20160720

2016-07-20 Thread The Doctor
./libcrypto.so: undefined reference to `RUN_ONCE' cc: error: linker command failed with exit code 1 (use -v to see invocation) *** Error code 1 Please fix -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca God,Queen and country!Never Satan President

[openssl-users] Generate ECC key with password protection

2016-07-20 Thread Ken Goldman
From these web pages: https://wiki.openssl.org/index.php/Command_Line_Elliptic_Curve_Operations https://www.openssl.org/docs/manmaster/apps/ecparam.html the "openssl ecparam -genkey" command does not accept a password. The (perhaps) equivalent "openssl genrsa" command does. Is there a

Re: [openssl-users] Generate ECC key with password protection

2016-07-20 Thread Jakob Bohm
On 20/07/2016 16:21, Ken Goldman wrote: From these web pages: https://wiki.openssl.org/index.php/Command_Line_Elliptic_Curve_Operations https://www.openssl.org/docs/manmaster/apps/ecparam.html the "openssl ecparam -genkey" command does not accept a password. The (perhaps) equivalent "openssl

Re: [openssl-users] RSA sign message

2016-07-20 Thread Gabriel Ivașcu
On Wed, Jul 20, 2016 at 12:19 AM, Dr. Stephen Henson wrote: > > If you want to hash and sign the hash you should use EVP functions such as > EVP_DigestSign*() functions instead. If you already have the hash you can > use RSA_sign (though EVP_PKEY_sign() is preferred) the type