Re: Apache server says unknown ca when clientcertificate chain is sent to server

2009-04-21 Thread prathima
Hi Patrick, Firstly I would like to thankyou for the help in this issue. Now by generating Intermediate CA certificates with Version V3, Mutual TLS is successful with Apache Server. Prathima Patrick Patterson-3 wrote: > > Hi Prathima: > > Ok - a few things that I've noticed: > > 1: Most of

Reading DER format public Key Using JSAFE ToolKit

2009-04-21 Thread Dineshkumar C
Hello Experts, i am implementing Digital Signature process in our application using the CRYPTO - J toolkit (JSAFE). i need to read the DER encoded ASN.1 or PEM format Public Key. Can you please help me to read this file using the JSAFE tool kit? Thanks Dinesh

Re: unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
To be clear, your program is the client (on 'production server') connecting to the 'web server'? Also to be sure, you're using software OpenSSL in your program, not one of the hardware 'engines'? yes I have reproduced this with openssl s_client SSL_get_verify_result is returning "unable to

RE: unable to get local issuer certificate

2009-04-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Duncan Berriman > Sent: Tuesday, 21 April, 2009 10:18 > I'm doing final testing of some code on a production server > and I have one website/SSL certificate that is randomly > failing when I try to verify the certificate. Some times it > work

RE: Sha1 verify and load_verify_locations()?

2009-04-21 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of PVi1 > Sent: Sunday, 19 April, 2009 13:12 > i am trying to write application used for verifying digest > signature of text files. > I have used this command to create sign of file e.g. index.php: > openssl dgst -sha1 -sign private_key.pem -out

OpenSSL 1.0.0 beta 2 released

2009-04-21 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenSSL version 1.0.0 Beta 2 OpenSSL - The Open Source toolkit for SSL/TLS http://www.openssl.org/ OpenSSL is currently in a release cycle. The second beta is now released. The beta release is available for d

Re: hmac digest wrong?

2009-04-21 Thread Michael Sierchio
Ronald Hatcher wrote: > Hi there - > > I'm trying to create an hmac digest which works OK from php as: > > $signature = hash_hmac('sha1', "ronald" , $apikey); > > However, I get a different digest using: > > echo "ronald" | openssl dgst -sha1 -hmac $apikey > > Is there something obvious I'm d

Re: hmac digest wrong?

2009-04-21 Thread Victor Duchovni
On Tue, Apr 21, 2009 at 04:36:34PM +0100, Ronald Hatcher wrote: > Hi there - > > I'm trying to create an hmac digest which works OK from php as: > > $signature = hash_hmac('sha1', "ronald" , $apikey); > > However, I get a different digest using: > > echo "ronald" | openssl dgst -sha1 -hmac $apike

hmac digest wrong?

2009-04-21 Thread Ronald Hatcher
Hi there - I'm trying to create an hmac digest which works OK from php as: $signature = hash_hmac('sha1', "ronald" , $apikey); However, I get a different digest using: echo "ronald" | openssl dgst -sha1 -hmac $apikey Is there something obvious I'm doing wrong here? BTW I'm using OpenSSL 0.9

unable to get local issuer certificate

2009-04-21 Thread Duncan Berriman
Hi, I'm doing final testing of some code on a production server and I have one website/SSL certificate that is randomly failing when I try to verify the certificate. Some times it works, some times it doesn't, try it again a short while later and its fine. I don't know the technology on the web s

FIPS 140-2 compliance question

2009-04-21 Thread carlyoung
Hi all, I have an application that uses OpenSSL and AES 192-bit keys to encrypt data [files]. In it's original incarnation, it used PBKDF2 to derive the key. In its newer form, it uses a FIPS approved PRNG to generate a random key and the key is encrypted with a large RSA key for recovery. The

Re: openssl in apache on windows

2009-04-21 Thread Thomas J. Hruska
Tirtza Bernstein wrote: Hello, I installed apache with openssl on windows. When I try to use openssl command line I get the following error Can't open config file /usr/local/ssl/openssl.cnf How do I change the location where it looks for the config file? Thanks Set OPENSSL_CONF. -

openssl in apache on windows

2009-04-21 Thread Tirtza Bernstein
Hello, I installed apache with openssl on windows. When I try to use openssl command line I get the following error Can't open config file /usr/local/ssl/openssl.cnf How do I change the location where it looks for the config file? Thanks