Re: [openssl-users] exporting the certificate with the .pfx

2018-06-15 Thread Viktor Dukhovni
> On Jun 15, 2018, at 7:25 PM, Harold Huggins wrote: > > We are having issues exporting the certificate with the .pfx Works here. $ openssl req -new -x509 -newkey rsa:1024 -nodes -keyout key.pem -out cert.pem -days 30 -subj "/CN=$(uname -n)" Generating a 1024 bit RSA private key

[openssl-users] exporting the certificate with the .pfx

2018-06-15 Thread Harold Huggins
Hi, Everyone, We are having issues exporting the certificate with the .pfx Error printout log file as follows: OpenSSL> pkcs12 -export -out "cfored.pfx" -inkey "cfored_encrypted_private.key" -in "mergeredcertificate.crt" Usage: pkcs12 [options] where options are -export output PKCS12 file

[openssl-users] exporting the certificate with the .pfx

2018-06-15 Thread Harold Huggins
Hi, Everyone, We are having issues exporting the certificate with the .pfx Error printout log file as follows: OpenSSL> pkcs12 -export -out "cfored.pfx" -inkey "cfored_encrypted_private.key" -in "mergeredcertificate.crt" Usage: pkcs12 [options] where options are -export output PKCS12 file

Re: [openssl-users] Access clienthello in openssl1.1.0

2018-06-15 Thread Benjamin Kaduk via openssl-users
On Wed, Jun 13, 2018 at 11:32:11AM -0500, Zeyuan Yu wrote: > Hi All, > > Is there still a way to access client hello in 1.1.0? > > Before 1.1.0 I can just access the internal `s->init_msg`. And starting > 1.1.1, APIs are provided for the client hello. But there doesn't seem to be > similar

Re: [openssl-users] I need help to implement triple des algorithm with openssl

2018-06-15 Thread Fernando A
Thank you Matt!, yes it odd, the component in C# is from a third an we don't know C#, we think that for a moment we could replace that using openssl command line. Could show me how pass a key to the openssl? Thank you! El vie., 15 de jun. de 2018 a la(s) 10:53, Matt Caswell (m...@openssl.org)

Re: [openssl-users] OpenSSL 1.1.0: No X509_STORE_CTX_set_cert_crl() function?

2018-06-15 Thread Salz, Rich via openssl-users
>Should I file an issue on GitHub about the missing setters? That would be great, thanks. Glad you got something to work. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] OpenSSL 1.1.0: No X509_STORE_CTX_set_cert_crl() function?

2018-06-15 Thread Stephan Mühlstrasser
Am 15.06.18 um 16:36 schrieb Salz, Rich via openssl-users: It looks like in OpenSSL 1.1.0 I can no longer do that. There are only functions available that return various function pointers from a X509_STORE_CTX structure (like X509_STORE_CTX_get_cert_crl), but there are no

Re: [openssl-users] OpenSSL 1.1.0: No X509_STORE_CTX_set_cert_crl() function?

2018-06-15 Thread Salz, Rich via openssl-users
It looks like in OpenSSL 1.1.0 I can no longer do that. There are only functions available that return various function pointers from a X509_STORE_CTX structure (like X509_STORE_CTX_get_cert_crl), but there are no corresponding counterparts to set the function pointers. This

Re: [openssl-users] I need help to implement triple des algorithm with openssl

2018-06-15 Thread Matt Caswell
On 15/06/18 14:34, Fernando A wrote: > Hi all, > > I am not an expert with openssl and I need replace a component in c# > that run algorithm Triple DES. > I tried in the command line something like this  > "openssl enc -des-ede3 -k 1234567890123456ABCDEFGH -in test.txt -out > test.enc" > > but

[openssl-users] OpenSSL 1.1.0: No X509_STORE_CTX_set_cert_crl() function?

2018-06-15 Thread Stephan Mühlstrasser
Hi, while porting from OpenSSL 1.0.2. to OpenSSL 1.1.0 I ran into the following problem: With OpenSSL 1.0.2. I plugged into the certificate verification mechanism in order to capture the X509_CRL that was used to validate a certificate. The original function pointer stored in the cert_crl

[openssl-users] I need help to implement triple des algorithm with openssl

2018-06-15 Thread Fernando A
Hi all, I am not an expert with openssl and I need replace a component in c# that run algorithm Triple DES. I tried in the command line something like this "openssl enc -des-ede3 -k 1234567890123456ABCDEFGH -in test.txt -out test.enc" but the result that I obtain is diferent of result launched