Re: Large CRL Handling Problem

2010-07-04 Thread Ger Hobbelt
On Sat, Jul 3, 2010 at 12:31 AM, Ryan Smith elr...@drmomonthego.com wrote: However with the ~200MB CRL, I get the following error, 1418976:error:0D078064:asn1 encoding routines:ASN1_ITEM_EX_D2I:aux error:tasn_dec.c:407:Type=X509_CRL_INFO 1418976:error:0D08303A:asn1 encoding

ENGINE: where are corresponding 'save' methods for ENGINE_set_load_pub/privatekey_function?

2010-07-04 Thread Jeff Saremi
How does one provide own engine functions for saving public and private keys? thanks jeff This email contains Morega Systems Inc. Privileged and Confidential information. __ OpenSSL Project

Serials and root certificates

2010-07-04 Thread Jon Kristensen
Currently, I'm using openssl req -x509 to create root certificates and openssl x509 to create all other certificates. I'm using the openssl x509 parameters -CAserial and -CAcreateserial to let OpenSSL automatically increment and manage the serial number upon updating the non-root

Re: openssl Window's Crypt library

2010-07-04 Thread Jeffrey Walton
Hi Mark, I think I need to pull some data out of the header in the openssl DER file and put it into the key BLOB (BLOBHEADER/RSAPUBKEY) structure in Windows. When you pluck the various ASN Integers out of the DER encoded key file, the integers have to be baked a bit before inserting into the

Re: openssl Window's Crypt library

2010-07-04 Thread Mark Bishop
That confirms *exactly* (especially the ASN integers) what I am seeing. I am able to move forward now with this info. Thank you for the help. Quoting Jeffrey Walton noloa...@gmail.com: Hi Mark, I think I need to pull some data out of the header in the openssl DER file and put it

ENGINE: RSA_METHOD-rsa_keygen does not behave like other function pointers

2010-07-04 Thread Jeff Saremi
To avoid having to override every RSA function, I could fill my engine's custom RSA_METHOD with methods from RSA_PKCS1_SSLeay. Alternatively I could have my functions wrap the internal OpenSSL functions. For instance: int myEngineRsaModExp(BIGNUM *r0,const BIGNUM *I,RSA *rsa,BN_CTX *ctx) { int

RE: verify certificate in c

2010-07-04 Thread Jeremy Farrell
From: Behalf Of Michael S. Zick Sent: Saturday, July 03, 2010 6:51 PM On Sat July 3 2010, Dr. Stephen Henson wrote: On Sat, Jul 03, 2010, belo wrote: Damn! how can be possible that in the official openssl documentation there's nothing about this