problem on RSA_public_decrypt()

Dear all, I am sorry for the bad email formation. Here is another post. I am programming to achieve the RSA PSS sign for the messages. For the signature, I think the result is correct by the information in gdb. However, for the verification, the RSA_public_decrypt() always fails to put the

Re: Best way to store keys and certs on Windows [was: Windows Certificate Store Private Key]

On 26-06-2010 18:29, Mohan Radhakrishnan wrote: Please ignore if this question belongs else where but it looks like the OP is storing and retrieving SSL certificate from a Windows store. I have been looking for ways to use the Windows store to secure SSL certificates and keys and SFTP

defines set in build

To build OpenSSL without Perl, I want to use CMake ( only for windows ) files to generate visual studio solutions. I want to have the same defines set as when I build it like this: perl Configure VC-WIN32 no-asm --prefix=c:\some\openssl\dir ms\do_ms nmake -f ms\ntdll.mak install How

Re: Creating a x509 request with Whirlpool

Hi, Thank you for the information. I modified some source codes in OpenSSL and achieve what I was looking for. 2010/6/7 Dr. Stephen Henson st...@openssl.org On Mon, Jun 07, 2010, Davi Tozoni wrote: Hello, I was experimenting OpenSSL 1.0.0 and I needed to create a request that must be

Re: defines set in build

On 28-06-2010 10:54, Deckers, Rob wrote: To build OpenSSL without Perl, I want to use CMake ( only for windows ) files to generate visual studio solutions. I want to have the same defines set as when I build it like this: perl Configure VC-WIN32 no-asm --prefix=c:\some\openssl\dir ms\do_ms

Re: Creating a x509 request with Whirlpool

So did you make up your own OID, or your own ASN structure or did you find the right OID somewhere so the rest of us can use it? On 28-06-2010 13:33, Davi Tozoni wrote: Hi, Thank you for the information. I modified some source codes in OpenSSL and achieve what I was looking for. 2010/6/7 Dr.

Re: defines set in build

On 6/28/2010 7:15 AM, Jakob Bohm wrote: On 28-06-2010 10:54, Deckers, Rob wrote: To build OpenSSL without Perl, I want to use CMake ( only for windows ) files to generate visual studio solutions. I want to have the same defines set as when I build it like this: perl Configure VC-WIN32 no-asm

Re: Windows Certificate Store Private Key

A question for everyone: What If you only use the BIO structures to call RAND_bytes(), in your threads, and you are not using any of the SSL structures, do you still need a callback function? My purpose of using the OpenSSL library is to generate random numbers only. -

Error with dgst -sign

I think I wrote this mail in a wrong way so I post it again: Hello, when I run: openssl dgst -sha1 -sign id_of_private_key -keyform engine -out file -engine id-engine file-with-data In OpenSSL 0.9.8 when the load privkey function ends, OpenSSL is waiting and do nothing (doesn't invoke

Re: Error with dgst -sign

On Mon, Jun 28, 2010, Nacho lvarez wrote: I think I wrote this mail in a wrong way so I post it again: Hello, when I run: openssl dgst -sha1 -sign id_of_private_key -keyform engine -out file -engine id-engine file-with-data In OpenSSL 0.9.8 when the load privkey function ends, OpenSSL

How to add CMP module to openssl-package?

Hi I am a newbie to openssl. I want to integrate CMP(Certificate Management Protocol) package to openssl-1.0.0-a. How can I do the integration? Thanks and Regards Varun Gupta Please do not print this email unless it is absolutely necessary. The information contained in this electronic

Re: Creating a x509 request with Whirlpool

Sorry, I should give more details. First of all, I don't know if all I've done is correctly. Basically, I made up my own OID, so I can use it in my application. If you want to do this too, here is the easy steps: 1. In crypto/objects/objects.txt, I added: ecdsa-with-Specified 5:

Re: Error with dgst -sign

It's a custom engine. load privkey is the pointer to function used as argument in the call: ENGINE_set_load_privkey_function (e, load_private_key); This function is called when OpenSSL try to get the command line key argument. In that function I assign the RSA private key (get it from hardware,

certificate request missing locale

I'm trying to process a CRQ that came from a hardware appliance, and its apparently missing its country code. $ openssl ca -out tomcat-cert.pem -days 3650 -config ./openssl.cnf -infiles tomcat_crq.pem Using configuration from ./openssl.cnf 11516:error:0E06D06C:configuration file

Re: Error with dgst -sign

On Mon, Jun 28, 2010, Nacho lvarez wrote: It's a custom engine. load privkey is the pointer to function used as argument in the call: ENGINE_set_load_privkey_function (e, load_private_key); This function is called when OpenSSL try to get the command line key argument. In that function I

problem on RSA_verify_PKCS1_PSS()

Dear all, This email is still about the implementation of RSA PSS. Based on the code I posted yesterday, I found the problem may exist in the verification function. I pasted the RSA_verify_PKCS1_PSS() code from /crypto/rsa/rsa_pss.c in my code to replace the function call of

RE: certificate request missing locale

From: owner-openssl-us...@openssl.org On Behalf Of John R Pierce Sent: Monday, 28 June, 2010 13:18 I'm trying to process a CRQ that came from a hardware appliance, and its apparently missing its country code. and more. $ openssl ca -out tomcat-cert.pem -days 3650 -config

RE: p7 is NULL with d2i_PKCS7_bio(in,NULL)

From: owner-openssl-us...@openssl.org On Behalf Of r r Sent: Monday, 28 June, 2010 01:47 I have PKCS7 signed image in DER format, Verifing with d2i_PKCS7_bio That just parses, it doesn't verify. If you want to verify, you'll need additional code after the load

Re: problem on RSA_verify_PKCS1_PSS()

Dear all, I have made my code work now. Thank you so much. Best Regards, Xiang 2010/6/29 翔芦 luxiang...@gmail.com Dear all, This email is still about the implementation of RSA PSS. Based on the code I posted yesterday, I found the problem may exist in the verification function. I pasted

SSL Library Errors: 336105650 and 218910881

This might be more a question for the mod_ssl forums, but I suspect it is more fundamentally rooted in openssl than that so here goes: Intermittently, we receive the following block of errors in our Apache SSL logs: [Mon Jun 28 11:24:09 2010] [error] [client ip_address_scrubbed] Certificate

Re: SSL Library Errors: 336105650 and 218910881

On Mon, Jun 28, 2010, Chris Peters wrote: This might be more a question for the mod_ssl forums, but I suspect it is more fundamentally rooted in openssl than that so here goes: Intermittently, we receive the following block of errors in our Apache SSL logs: [Mon Jun 28 11:24:09 2010]

RE: openssl execution failure: (Win Apache) configfile name?

Hi, I am running as Administrator and tried moving the dlls to the windows\system32 directory because I remembered this as being an issue for me in the past. Ran command from the DOS command line. Will try it again later without quotes - as has been indicated quotes are not required in my case.