RE: Using certificate and private key from Windows cert store with OpenSSL

2011-11-02 Thread Andrejs Štrumfs
? -- From: Jakob Bohm Sent: Tuesday, November 01, 2011 8:04 PM To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL This option is for the OpenSSL API, and I sure hope it would work with all the supported Windows

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Vladimir Belov
? --- From: Sergio NNX Sent: Monday, October 31, 2011 11:12 PM To: openssl-users@openssl.org Subject: RE: Using certificate and private key from Windows cert store with OpenSSL Ciao. I use MinGW to build OpenSSL and it has always worked very

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Jakob Bohm
Subject: RE: Using certificate and private key from Windows cert store with OpenSSL Ciao. I use MinGW to build OpenSSL and it has always worked very well. Steps: a) perl Configure mingw shared enable-capieng --prefix=/mingw --openssldir=C:/OpenSSL b) make After a while, you'll have

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Vladimir Belov
Bohm Sent: Tuesday, November 01, 2011 8:04 PM To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL This option is for the OpenSSL API, and I sure hope it would work with all the supported Windows Compilers, so you can use

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Jakob Bohm
, October 31, 2011 11:12 PM To: openssl-users@openssl.org Subject: RE: Using certificate and private key from Windows cert store with OpenSSL Ciao. I use MinGW to build OpenSSL and it has always worked very well. Steps: a) perl Configure mingw shared enable-capieng --prefix=/mingw --openssldir=C

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Dr. Stephen Henson
On Tue, Nov 01, 2011, Vladimir Belov wrote: How to use some engine API in my program? What is the name of this some engine API or engine plug-in? Please, give a small example or where can I find documentation about this? Is any documentation on the openssl.org? Note that the ENGINE

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Vladimir Belov
functions for next verifications of certificate with Windows CryptoAPI? From: Dr. Stephen Henson Sent: Tuesday, November 01, 2011 10:45 PM To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL On Tue, Nov 01, 2011, Vladimir Belov

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-11-01 Thread Jakob Bohm
, 2011 10:45 PM To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL On Tue, Nov 01, 2011, Vladimir Belov wrote: How to use some engine API in my program? What is the name of this some engine API or engine plug-in? Please, give

RE: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Andrejs Štrumfs
Duh... I was sure these were the needed parts. Now, I tried to call CryptExportKey with PRIVATEKEYBLOB flag, and of course it returned error, because the certificate was imported to store without Mark as Exportable option. But there has to be way to use certificate and private key somehow with

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Jakob Bohm
In that case look for the CryptoAPI engine for openssl, not sure of its official name though. On 10/29/2011 8:21 AM, Andrejs Štrumfs wrote: Duh... I was sure these were the needed parts. Now, I tried to call CryptExportKey with PRIVATEKEYBLOB flag, and of course it returned error, because

RE: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Sergio NNX
-open...@wisemo.com To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL In that case look for the CryptoAPI engine for openssl, not sure of its official name though. On 10/29/2011 8:21 AM, Andrejs Štrumfs wrote: Duh... I

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Jakob Bohm
with the 'enable-capieng' option you'll be able to access every single store and all the certs stored in Windows. I hope it helps. Sergio. Date: Mon, 31 Oct 2011 09:44:11 +0100 From: jb-open...@wisemo.com To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Vladimir Belov
To: openssl-users@openssl.org Subject: RE: Using certificate and private key from Windows cert store with OpenSSL Ciao Andrejs. I don't know much about the source code you posted previously but if you build OpenSSL with the 'enable-capieng' option you'll be able to access every single store

RE: Using certificate and private key from Windows cert store with OpenSSL

2011-10-31 Thread Sergio NNX
Certificate store. If you're using Windows boxes, I can send you my copy of OpenSSL for you to test. I hope it helps. Sergio. From: ml.vladimbe...@gmail.com To: openssl-users@openssl.org Subject: Re: Using certificate and private key from Windows cert store with OpenSSL Date: Mon, 31

Using certificate and private key from Windows cert store with OpenSSL

2011-10-28 Thread Andrejs Štrumfs
Hi! I am trying to make a program, that uses some Web Services in Delphi XE. To connect to the Web Services, i have to use self signed (hope this is correct term) certificate, which is stored in Windows cert store. So, i open the cert store with CertOpenSystemStore, get cert with

Re: Using certificate and private key from Windows cert store with OpenSSL

2011-10-28 Thread Jakob Bohm
Simple, really: You have not set the private part of the private key (d, p, q, dmp1, dmq1, iqmp). You need to export the private key from CryptoAPI too, and convert that blob, not the public key blob. Alternatively, I have heard rumors of a CryptoAPI engine plug in for OpenSSL which will