Re: Problem generating CSR.

2000-09-06 Thread Alan E. Derhaag 

Julio Cesar de Melhado e Lima [EMAIL PROTECTED] writes:

 Hiya,
 
 I'm using ssl0.9.5a on Solaris 8.
 I want to create a RSA private key for my Apache server (will be Triple-DES encrypted
 and PEM formatted):
 But, when I ran the command  :
 
 ./openssl genrsa -rand -des3 -out server.key 1024
 
 I have the following error :
 
 0 semi-random bytes loaded
 Generating RSA private key, 1024 bit long modulus
 363:error:24064064:random number generator:SSLEAY_RAND_BYTES:PRNG not
 seeded:md_rand.c:538:
 363:error:04069003:rsa routines:RSA_generate_key:BN lib:rsa_gen.c:182:
 

There may well be problems with the lack of /dev/random on a Solaris
box but doesn't the `-rand' option take a file name(s) parameter
something like: 

 ./openssl genrsa -rand /tmp/rand1:/tmp/rand2 -des3 -out server.key 1024

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: problem w/certificate request to Netscape CMS

2000-08-17 Thread Alan E. Derhaag 

Dr S N Henson [EMAIL PROTECTED] writes:

  
  Still no success!  The `openssl req -noout -text' output looks
  something like:
  
  ...
  RSA Public Key: (1024 bit)
  Modulus (1024 bit):
  00:b8:66:e9:4f:ca:ba:4a:34:a8:2e:e4:65:d7:40:
  2d:1f:84:e6:07:c0:4c:d6:57:44:8e:89:4e:9c:bb:
  79:b2:5f:01:60:01:d9:6c:64:16:2d:99:c6:a2:5e:
  ef:1d:cb:32:fc:71:5b:69:cf:4a:e0:90:90:8f:d5:
  8b:dd:9a:fd:b7:5f:43:fa:b4:fb:03:30:f8:f7:86:
  0a:9e:f7:e9:aa:d1:a8:35:d1:e3:42:d4:a8:50:0e:
  37:be:a0:96:52:f1:a7:c9:08:15:a3:ba:a6:ec:ef:
  d9:09:cb:68:5b:62:c5:c8:97:14:db:18:95:90:1a:
  00:c1:65:fc:d9:41:e0:98:d3
  Exponent: 65537 (0x10001)
  Attributes:
  a0:00
  Signature Algorithm: md5WithRSAEncryption
  ...
  
  which I believe is valid (a length of zero) but I don't know what the
  `a0' indicates (set of?).
  
 
 Yeah. Thats described in the manual page.
 
 Hmmm, are there any blank lines or extra stuff around the BEGIN and END
 lines? Also try a 512 bit key just in case.

Ahh..  I remedied the biggest problem.  The certificate request did
verify as good but the problem was that I was supplying the request to
the Netscape Certificate Manager as a Netscape type certificate
request (KEYGEN = subjectKeyGenInfo form field).  When I changed it
to be an MSIE request (pkcs10Request form field) the certificate was
returned instead of the invalid format error return.

Thanks to all for your help and being the effective sounding board...

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Alan E. Derhaag   N2H2, Creators of Bess and Searchopolis
phone: 206-336-2972 900 Fourth Avenue, Suite 3600
email: [EMAIL PROTECTED],[EMAIL PROTECTED]   Seattle, WA 98164
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]