Re: pkcs12 output change between release 1.0.2 and 1.1.1

2021-10-28 Thread Patrice Guérin
Hi Matt, Ok, we'll proceed by another way. Thank you for your fast answer Kinbd regards, Patrice. Matt Caswell a écrit : On 28/10/2021 10:06, Patrice Guérin wrote: Hi all, The output of pkcs12 command differs between release 1.0.2 and 1.1.1. The command used is    openssl pkcs12

pkcs12 output change between release 1.0.2 and 1.1.1

2021-10-28 Thread Patrice Guérin
Hi all, The output of pkcs12 command differs between release 1.0.2 and 1.1.1. The command used is   openssl pkcs12 -passin pass: -nokeys -in signedcert.bin In the bag attributes, if the subject (and probably the issuer) contains bytes outside ASCII range, I get a different result and

Useable digest algorithms with signature

2021-02-20 Thread Patrice Guérin
Dear All, Which digest algorithms can be used for signature with a RSA key ? sha and ripemd160 work well, but - whirlpool that works in 1.0.2o, doesn't anymore (1.1.1j) - the same applies to blake, shake Error setting context 6116:error:0408C09D:rsa routines:check_padding_md:invalid

Cheking public or private key

2021-02-16 Thread Patrice Guérin
Dear All, Is there a way to check if a EVP_PKEY is a public or private key ? In the case of use of EVP_Sign or EVP_DigestSign functions, an application leads to crash with SIGSEGV if an incorrect key is given when finalizing process. Thanks in advance for your answers. Kind regards,

Fwd: Re: openssl s_client connection fails

2020-11-18 Thread Patrice Guérin
Hi All, Sorry, send to missing. Patrice. Message transféré Sujet : Re: openssl s_client connection fails Date : Wed, 18 Nov 2020 14:46:45 + De :Matt Caswell Pour : Patrice Guérin On 18/11/2020 14:33, Patrice Guérin wrote: Hello Matt, Thank you

Fwd: Re: openssl s_client connection fails

2020-11-18 Thread Patrice Guérin
Hi All, Sorry, send to missing. Patrice. Message transféré Sujet : Re: openssl s_client connection fails Date : Wed, 18 Nov 2020 11:40:33 + De :Matt Caswell Pour : openssl-users@openssl.org On 18/11/2020 11:24, Patrice Guérin wrote: 3072988928:error

openssl s_client connection fails

2020-11-18 Thread Patrice Guérin
Hello, I experience the following on Linux Debian 9 (openssl 1.1.0l) : When using openssl s_client to connect on a site, I get the following CONNECTED(0003) 3072988928:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1407:SSL alert

Possible Cause of error ?

2020-03-16 Thread Patrice Guérin
Hello, Can anybody tell me what is a possible cause of error status 20087002 : 'BIO routines:BIO_lookup:system lib' This happens only once on Debian 9 standard OpenSSL package (1.1.0l-1~deb9u1) Thank you in advance. Kind regards, Patrice.

[openssl-users] Questions about Ciphers

2019-02-14 Thread Patrice Guérin
Hello, I have two questions : * I use OBJ_NAME_do_all_sorted() with  OBJ_NAME_TYPE_CIPHER_METH to get the list of supported cipher methods Is there a difference between lowercase and uppercase names ? I've noticed that some do not have uppercase name (ex. aes-128-ccm) Is there a

Re: [openssl-users] EVP_Encrypt/EVP_Decrypt input/output buffers requirements

2019-01-30 Thread Patrice Guérin
Hello Matt, Thank you very much. Patrice. Matt Caswell a écrit : On 30/01/2019 09:45, Patrice Guérin wrote: Hello to all, Documentation does not provide input/output buffers requirements for encryption/decryption, so is it safe to submit the same buffer (ie, input=output

[openssl-users] EVP_Encrypt/EVP_Decrypt input/output buffers requirements

2019-01-30 Thread Patrice Guérin
Hello to all, Documentation does not provide input/output buffers requirements for encryption/decryption, so is it safe to submit the same buffer (ie, input=output) for these operations ? If not, what is the minimum distance 'd' required (input = output+d) ? This is to be used in small memory

[openssl-users] PKCS7 signature process

2018-05-16 Thread Patrice Guérin
Hello OpenSSL-users In the purpose of signing pdf files, I've found a difference of behaviour that I can't explain between two ways of computing signatures. The first one leads to an error in the way that Adobe says that the file was modified after signing, the second does not. First Method:

Re: CRYPTO_malloc_init()

2014-11-14 Thread Patrice Guérin
Hello Michael, Thank you very much for your help. I will rebuild OpenSSL for static linking and use it in my program. Kind regards, Patrice. Michael Wojcik a écrit : From: owner-openssl-us...@openssl.org [mailto:owner-openssl- us...@openssl.org] On Behalf Of Patrice Guérin Sent: Wednesday, 12

CRYPTO_malloc_init()

2014-11-12 Thread Patrice Guérin
Hello All, I have a program on Windows that, among tohers things, access databases through ODBC and computes sha1 values from files. OpenSSL functions are accessed through a DLL and do initialisation when it needs to. My program uses release OpenSSL 0.9.8 DLLs The used database is a

Re: Does OpenSSL supports the HTTP POST request?

2010-06-02 Thread Patrice Guérin
Hi Yogesh Of course, yes ! SSL is completly independant of HTTP protocol. HTTP GET and POST methods differ in the way of passing parameters. On GET, parameter are passed in the URI as URI?param=valueparam=value...param=value On POST, parameters are passed in the same format

BIO sockets usage

2010-05-12 Thread Patrice Guérin
Hello All, I have some basic questions about BIO sockets. In order to use BIO sockets as simple network layer without SSL negotiation. Is SSL_library_init() needed or not ? I think it's not mandatory, but I want to have a confirmation of this. On Win32 platforms, there are two functions,

Re: Using OpenSsl in a .Net server (ongoing opensource project)

2010-04-24 Thread Patrice Guérin
Hello Amit, Maybe you can explore the IJW way... I use Visual C++ 6 to build my aWin32 pplications and I had to use some .NET Crypto functions such as RSA to communicate with a customer. I've used Visual C++ 2005 Express, in which I add the Win32 environment (from a platform SDK. Express don't

Re: Using OpenSsl in a .Net server (ongoing opensource project)

2010-04-24 Thread Patrice Guérin
be in an adjacent dll) OR to completely eliminate the Applink usage. If i misunderstood please correct me :) Amit Ben Shahar VP RD ISQ Technologies (+972) 545-592-934 a...@isqgroup.net mailto:a...@isqgroup.net www.isqgroup.net http://www.isqgroup.net 2010/4/24 Patrice