Smart cards and private keys

Title: Smart cards and private keys Hi, Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? Thank you in advance, Milan

Re: Smart cards and private keys

Milan Tomic wrote: Hi, Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? Thank you in advance, Milan Hi ! I don't know if it concerns really OpenSSL. I know that few smart cards can generate key pairs

Re: Smart cards and private keys

Milan Tomic wrote: Hi, Is it possible to extract private key from some (any) smart card? I'm using ActivCard equipement and it seems that it is not possible? in general it's not possible to extract the private key Cheers, Nils

Re: Smart cards and private keys

Title: Smart cards and private keys OpenSSL does not managethat directly, but it is possible: you will have to create a set of functions using your own software, let's sayusing Windows CryptoAPI to access smartcard , and then suply that callbacksto the RSA_METHOD structure. -

Re: Smart cards and private keys

There are very good reasons NOT to allow extraction of a private key from a crypto device. Investigate the vendor's provisions for either backing up or cloning a device. It is possible that the device will export its private key under some kind of protection (like encryption with some master key

User specified cert in an httpsClient

Hi, I am working on a project that involves modifying an existing httpsClient to support user specified certs. The cert is provided in PEM format by a 3rd party. At first this seemed rather trivial, but the changes I made don't seem to work. Here is the code I am using: if (flCertString) /* is

Custom BIO

Hi, I need to write a custom BIO to integrate OpenSSL into my custom comms/proxy library. Could anyone point me in the right direction or make any suggestions as to the best way to go about this? Kind Regards, Paul

AW: Certificate Chain

Hi Shaun, I use certificate chain for Apache. Herefor I only concatenate the files. Regards Richard -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Shaun Lipscombe Gesendet: Donnerstag, 20. Januar 2005 17:14 An: openssl-users@openssl.org

Re: Even CA's make mistakes..

Maybe am a bit off my head but given a rubik cube, and a fixed axes of orientation defining it in space, are there more than one ways to get the cube into a particular formation? (not that I can solve the cube manually either...) Are block algorithms not closer to tensors? sorry if this

Simple cert verification code saught.

Hi all, I'm writing a little code snippet to just check the validity of a certificate ( and the entire chain preferably ). Whilst using the example code it's easy enough to make the connection and setup a session but being a newbie I'm not clear on what/how I should verify the certs. So far.

Re: Simple cert verification code saught.

Well, I just added this : SSL_get_verify_result( ssl ); And with the result being one of the return codes listed here : http://www.openssl.org/docs/apps/verify.html#DIAGNOSTICS Looks like I've answered myself :) On Fri, 2005-01-21 at 14:04 +0900, Naoki wrote: Hi all, I'm writing a little

Re: Simple cert verification code saught.

Errm. Except that returns a long, how do I map that to the definitions listed in include/openssl/x509_vfy.h in order to return something more useful than '20' ? On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: Well, I just added this : SSL_get_verify_result( ssl ); And with the result being

Re: Simple cert verification code saught.

Sorry, just worked it out... again... X509_verify_cert_error_string(). On Fri, 2005-01-21 at 14:13 +0900, Naoki wrote: Well, I just added this : SSL_get_verify_result( ssl ); And with the result being one of the return codes listed here :

Re: Even CA's make mistakes..

I'm no expert, so please verify anything that you don't trust here. Block algorithms typically don't operate the way a cube operates. They are named a block algorithm because they operate on a single block in, single block out. They have the same starting point and rules for each block.

Re: Even CA's make mistakes..

I'm no expert, so please verify anything that you don't trust here. Block algorithms typically don't operate the way a cube operates. They are named a block algorithm because they operate on a single block in, single block out. ok per block, it is still a function (on a set) = output They

Re: Even CA's make mistakes..

Alok wrote: I'm no expert, so please verify anything that you don't trust here. Block algorithms typically don't operate the way a cube operates. They are named a block algorithm because they operate on a single block in, single block out. ok per block, it is still a function (on a set) =

Re: Even CA's make mistakes..

ok per block, it is still a function (on a set) = output Sorry, I don't understand your analogy with rubik's cube (most possibly because that's just not the way my brain's working... ;)) :o) A block cypher has a defined output for a defined input, so if you encode the same