Hello Sunil,

answers inline...

On 10/2/09 3:32 PM, Trivedi, Sunil J. wrote:
Hello Max,

I read the subject email thread on nabble.com; I am also trying to
generate ECC certificates and CRLs signed with

ECDSA-with-SHA256.

I guess with OpenSSL.. right ?

My situation: Excuse my ignorance, but currently I am using “OpenSSL
0.9.8k 25 Mar 2009” binaries downloaded from the OpenSSL site. I am not
a programmer/software engineer by trade; but more into systems engineering.

Question 1: I can’t find 0.9.9 SNAP at ftp://ftp.*openssl*.org/snapshot/
<ftp://ftp.openssl.org/snapshot/> ; I can see 1.0.0-stable-SNAP

You can download the latest stable version of OpenSSL from:

        ftp://ftp.openssl.org/source/

the latest "almost final" version is openssl-1.0.0-beta3.tar.gz. I think
you can use that safely.

and 0.9.8-stable-SNAP. And then other tar balls without version numbers

Question 2: After downloading one of those SNAP, I assume, I have to
compile from scratch. Is it possible to share some simple instructions
so that I can try on my own or with some help from a local software
engineer can come up with 0.9.9 SNAP or equivalent binaries.

Actually it is very simple to compile openssl from scratch, you simply have
to do the following:

        $ cd Downloads/           <---- directory where you downloaded it
        $ tar xvfpz openssl-1.0.0-beta3.tar.gz
        $ cd openssl-1.0.0-beta3
        $ ./config --prefix=/usr
        $ make
        $ sudo make install       <---- you need to be root to install it

That will do the trick.

In addition to it, if you want to speedup the development of applications
that use PKIs you might want to consider LibPKI. You can find a description
(that we need to update) here:

        http://www.openca.org/projects/libpki/
        http://mm.cs.dartmouth.edu/wiki/index.php/LibPKI

and the last packages here:

        http://ftp.openca.org/libpki/

I hope that will help :D



--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                   ope...@acm.org
                                                 project.mana...@openca.org

Dartmouth Computer Science Dept               Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory                          Work Phone: +1 (603) 646-8734
--o------------------------------------------------------------------------
People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to