Need help on creating certs

2010-02-26 Thread prasad kasthuri
Hi Team, I am getting the following error while creating certs using openssl command. Please help me to create a cert using openssl. C:\OpenSSL\binopenssl -inkey mykeyfile.pem -in -mycertfile.pem -out myCert.p1 -export openssl:Error: '-inkey' is an invalid command. Standard commands asn1parse

problems building on mingw

2010-02-26 Thread Maneki Neko
I'm running Windows 7, with MSys 1.0.11 and MinGW 5.1.6. I'm attempting to build OpenSSL 0.9.8m, but it's failing. I started by untarring openssl-0.9.8m.tar.gz: tar -xzf openssl-0.9.8m.tar.gz This causes a ton of warnings about inability to create symlinks. Trying anyway, I enter the new

Re: Need help on creating certs

2010-02-26 Thread Chaitra
I think it should be just -key. Thanks Regards Chaitra Shankar prasad kasthuri wrote: Hi Team, I am getting the following error while creating certs using openssl command. Please help me to create a cert using openssl. C:\OpenSSL\binopenssl -inkey mykeyfile.pem -in -mycertfile.pem -out

SSL Wrong version number OpenSSL 0.9.8g

2010-02-26 Thread P0DB
Hi, I'm trying to connect to an epp server via sslv3 in php. OpenSSL version is OpenSSL 0.9.8g. I have got correct certificates. I'm able to establish new connection, but server only sends to me hello and after it does not anwser any posts. Instead it returns to me these warnings: SSL operation

Problem with verifying of PKCS7-structure signed with ECDSA-certificate

2010-02-26 Thread Alexei Soloview
Hello! I try to check signature on PKCS7-structure(see attached file pkcs7.bin). The following sequence of commands is performed: openssl pkcs7 -in pkcs7.bin -inform DER -outform PEM -out pkcs7.PEM openssl smime -verify -in pkcs7.PEM -inform pem -noverify 1pkcs7.data Verification

Re: OpenSSL 0.9.8m renegotiation alerts?

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Victor Duchovni wrote: On Fri, Feb 26, 2010 at 02:45:19AM +0100, Dr. Stephen Henson wrote: On Thu, Feb 25, 2010, Victor Duchovni wrote: If I field a patched server, and sufficiently many unpatched pre-0.9.8m OpenSSL clients attempt re-negotiation under

Re: Problem with verifying of PKCS7-structure signed with ECDSA-certificate

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Alexei Soloview wrote: Hello! I try to check signature on PKCS7-structure(see attached file pkcs7.bin). The following sequence of commands is performed: openssl pkcs7 -in pkcs7.bin -inform DER -outform PEM -out pkcs7.PEM openssl smime -verify -in pkcs7.PEM

CFB change (was Re: OpenSSL version 0.9.8m release)

2010-02-26 Thread Bruce Stephens
With 0.9.8m I'm getting some failures to read PEM files (and do some other thnigs, I think) that 0.9.8l is happy with. The PEM files are created by BouncyCastle, I think (though I imagine 0.9.8l could be persuaded to write similarly failing files). they begin something like: -BEGIN RSA

Re: CFB change (was Re: OpenSSL version 0.9.8m release)

2010-02-26 Thread Dr. Stephen Henson
On Fri, Feb 26, 2010, Bruce Stephens wrote: With 0.9.8m I'm getting some failures to read PEM files (and do some other thnigs, I think) that 0.9.8l is happy with. The PEM files are created by BouncyCastle, I think (though I imagine 0.9.8l could be persuaded to write similarly failing

Re: CFB change

2010-02-26 Thread Bruce Stephens
Dr. Stephen Henson st...@openssl.org writes: [...] Didn't realise anyone was using CFB for that. Is that some default or does it have to be specifically requested? It was explicitly requested, though I'm not sure for any positive reason in this case (more because we'd used that cipher and

Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
Hello: I'm trying to use the SSL libreries. When I try to comipile my code y always obtain the same error: cli.c:(.text+0x20): undefined reference to `SSL_library_init' cli.c:(.text+0x25): undefined reference to `SSLv2_client_method' cli.c:(.text+0x30): undefined reference to

Re: Another memory growing on AIX

2010-02-26 Thread David
I was working with 128 SSL connections at the time. On Solaris, the memory size when it stopped growing was bigger than AIX. However, on Solaris, the memory stopped growing after about 2 or 3 iterations of stopping and starting the SSL connections (maybe within half an hour). -David

Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
Hello: I'm trying to use the SSL libreries. When I try to comipile my code y always obtain the same error: cli.c:(.text+0x20): undefined reference to `SSL_library_init' cli.c:(.text+0x25): undefined reference to `SSLv2_client_method' cli.c:(.text+0x30): undefined reference to

Re: Error copiling ssl: undefined reference

2010-02-26 Thread Anand Patel
Do you link against correct libraries? Try linking with ssleay and libeay. -Anand On Fri, Feb 26, 2010 at 12:08 PM, xabi esteban xab...@msn.com wrote: Hello: I'm trying to use the SSL libreries. When I try to comipile my code y always obtain the same error: cli.c:(.text+0x20): undefined

Re: Need help on creating certs

2010-02-26 Thread Anand Patel
You are not using any valid command. Error clearly explains that command '-incommand' is not valid command, and gives you output of valid commands. Look at, http://openssl.org/docs/apps/ca.html# openssl x509 openssl ca openssl req simple expample to get you started. openssl genrsa -out

RE: Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
I don't understand you. I put the libreries in the includes #include openssl/ssl.h #include but i'din't put nothing more. How i could link with this libreries? I didn't found any example. Thanks Date: Fri, 26 Feb 2010 12:39:57 -0500 Subject: Re: Error copiling ssl: undefined reference

Re: Error copiling ssl: undefined reference

2010-02-26 Thread Anand Patel
Those are the header you included. But you need to link against libs after compilation. What platform(win/linux) and What tool(studio/shell)? -Anand On Fri, Feb 26, 2010 at 1:59 PM, xabi esteban xab...@msn.com wrote: I don't understand you. I put the libreries in the includes #include

Re: Error copiling ssl: undefined reference

2010-02-26 Thread John R Pierce
xabi esteban wrote: I don't understand you. I put the libreries in the includes #include openssl/ssl.h #include but i'din't put nothing more. How i could link with this libreries? I didn't found any example. you're confusing include files with libraries. you need to tell the linker

RE: Error copiling ssl: undefined reference

2010-02-26 Thread xabi esteban
I am using in a shell in Ubuntu Linux thanks Date: Fri, 26 Feb 2010 14:47:22 -0500 Subject: Re: Error copiling ssl: undefined reference From: anand.apa...@gmail.com To: openssl-users@openssl.org Those are the header you included. But you need to link against libs after compilation. What

Re: Error copiling ssl: undefined reference

2010-02-26 Thread John R Pierce
xabi esteban wrote: I am using in a shell in Ubuntu Linux try adding -lssl to your link options. __ OpenSSL Project http://www.openssl.org User Support Mailing List

RE: Need help on creating certs

2010-02-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of prasad kasthuri Sent: Thursday, 25 February, 2010 14:44 To: openssl-users@openssl.org Subject: Need help on creating certs I am getting the following error while creating certs using openssl command. Please

RE: Crash in BIO_set_fp()

2010-02-26 Thread Dave Thompson
From: owner-openssl-us...@openssl.org On Behalf Of Michael Boman Sent: Thursday, 25 February, 2010 15:26 if (options-xmlOutput != 0) { fileBIO = BIO_new(BIO_s_file()); BIO_set_fp(fileBIO, options-xmlOutput, BIO_NOCLOSE); // - Crashing here }

Verify with RSA Public Key Fails

2010-02-26 Thread Paul Suhler
Hi, everyone. In Openssl 0.9.8i, I'm trying to take an RSA public exponent and public modulus, assemble them into an RSA key, and use that to verify a signature for a message. However, EVP_VerifyFinal() always fails, apparently because of the wrong use of padding. My code: RSA *