Re: Signature Algorithm

Thanks, I discovered this too, by searching for X509_get_signature_type in Google's codesearch tool. Where are these things documented anyway? On Mon, Jan 10, 2011 at 11:40 AM, Christian Hohnstaedt christ...@hohnstaedt.de wrote: On Mon, Jan 10, 2011 at 10:51:21AM +0530, Karthik Ravikanti

Re: Signature Algorithm

I remember seeing a method to get the signature parameters as a buffer. I can't find it now. :-( On Mon, Jan 10, 2011 at 2:13 PM, Karthik Ravikanti karthik.ravika...@gmail.com wrote: Thanks, I discovered this too, by searching for X509_get_signature_type in Google's codesearch tool. Where

Re: Signature Algorithm

On Mon, Jan 10, 2011 at 02:32:35PM +0530, Karthik Ravikanti wrote: I remember seeing a method to get the signature parameters as a buffer. I can't find it now. :-( OBJ_nid2ln(OBJ_obj2nid(cert-sig_alg-algorithm)) returns a pointer to the string representation of the signature algorithm like

Re: Signature Algorithm

Actually I'm working on a small wrapper for the X509 object. I need all the following: 1. Version: got this from X509_get_version(cert) 2. Serial number: got this from ASN1_INTEGER_get(X509_get_serialNumber(cert)) 3. Signature Algorithm as a string: got this from

Re: Signature Algorithm

9. Public key algorithm parameters: I used EVP_PKEY_print_param and printed to a mem bio. On Mon, Jan 10, 2011 at 3:53 PM, Karthik Ravikanti karthik.ravika...@gmail.com wrote: Actually I'm working on a small wrapper for the X509 object. I need all the following: 1. Version: got this

pem file with intermediate certificates

Hi. Two months ago, we installed our SSL certificate with stunnel-openssl succesfully. That certificate was issued by Verisign. We did not experience any issues. A few weeks ago, we had to renew that certficate and after doing that, we started to get 'Invalid certificate' errors form our web

openssl fips cross compilation 1.2.2

I've previously been trying to cross compile openssl-fips version 1.2 for my MIPS target, following the guidance in the user's guide, security policy, and this mailing list. I don't see a crossbuild patch for version 1.2.2, nor any instructions in the 1.2.2 documentation. I'm wondering if

Re: openssl fips cross compilation 1.2.2

On Mon, Jan 10, 2011, blaan...@rockwellcollins.com wrote: I've previously been trying to cross compile openssl-fips version 1.2 for my MIPS target, following the guidance in the user's guide, security policy, and this mailing list. I don't see a crossbuild patch for version 1.2.2, nor any

Question on SHA1 Functions

Hi, I am a newbie to openssl and have run into what is probably a stupid question. I am using openssl-1.0.0c. So here it goes. I wanted to look at how openssl implemented the following functions which are defined in the openssl crypto library in openssl/crytpo/sha.h: int SHA1_Init(SHA_CTX *c);

Re: Question on SHA1 Functions

Hi, SHA1_Init is indeed defined in sha_locl.h as HASH_INIT, whereas SHA1_Update and SHA1_Final are defined in md32_common.h (under crypto folder) as HASH_UPDATE and HASH_FINAL respectively. Happy hacking, -- Mounir IDRASSI IDRIX http://www.idrix.fr On 1/10/2011 4:40 PM, Stan Joyner wrote:

Re: FIPS and OpenSSL-1.0.0

On Mon, Dec 27, 2010 at 6:47 AM, Henrik Grindal Bakken h...@ifi.uio.no wrote: 3) obtaining your own from-scratch validation starting with the 1.0.0 baseline.  Good luck with that, you have a long row to hoe. We're going for 3), but as I said, our crypto module is not OpenSSL, it's the entire

Trust and Key management

Hi, Does OpenSSL provide any API for managing a trust store and a key store like Java? Thanks, karthik