Re: File CER into File PFX

2011-02-15 Thread yann458
I know , but i haven't file .KEY (eg. cert.key) , i must convert file .cer into .pfx without file .key ramaswamy.bm wrote: Try this openssl pkcs12 -inkey cert.key -in cert.cer -export -out output.pfx Thanks, Ram yann458 wrote: Hello, I need to convert a file .CER into file PFX

RE: looking for openssl doc outline

2011-02-15 Thread Welling, Conrad Gerhart
If you're compelled (as I have been), encourage O'Reilly to encourage John Viega to update Network Security with OpenSSL and release a 2nd edition. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John R Pierce Sent: Monday,

RE: looking for openssl doc outline

2011-02-15 Thread dave.mclellan
I second that. Absolutely that is a great way to learn about OpenSSL. It's old but it's how lots of people learn. Very friendly to a new SSL person. -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of John R Pierce Sent:

Re: File CER into File PFX

2011-02-15 Thread Jeffrey Walton
Hi Yann, I know , but i haven't file .KEY (eg. cert.key) , i must convert file .cer into .pfx without file .key Factor n, or solve the discrete log to recover the private exponent. On Mon, Feb 14, 2011 at 11:44 AM, yann458 sival...@gmail.com wrote: I know , but i haven't file .KEY (eg.

Re: ASN.1 encoding a private structure

2011-02-15 Thread Peter Sylvester
On 02/14/2011 01:11 PM, Eisenacher, Patrick wrote: I want to encode a private asn1 structure, say something like the following: SEQUENCE true_false BOOLEAN certificate Certificate I checked the asn1parse command and was able to specify my outer sequence and the inner boolean in the

RE: ASN.1 encoding a private structure

2011-02-15 Thread Eisenacher, Patrick
-Original Message- From: Peter Sylvester On 02/14/2011 01:11 PM, Eisenacher, Patrick wrote: I want to encode a private asn1 structure, say something like the following: SEQUENCE true_false BOOLEAN certificate Certificate I checked the asn1parse command and was

at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread Aro RANAIVONDRAMBOLA
Hello, I 'd like to know at what time have I to call SSL_free( ) and SSL_CTX_free( ) 1) For example, I call SSL_CTX_free( ) when a call to a function which fill in the CTX fails ( SSL_CTX_set_cipher_list( ), SSL_CTX_use_certificate_file( ), ..., SSL_CTX_set_verify( ) ). I am wondering if it is a

Pass parameter to an engine without entering OpenSSL Prompt

2011-02-15 Thread Torsten Weber
Hello, I have written a dynamic engine that implements digest algorithms. The engine got an entry in the openssl.conf file to make it replace the default digest implementation: ./openssl dgst -sha1 my_file.dat I also added support for some command-line parameters in the engines code. Now I

Re: Pass parameter to an engine without entering OpenSSL Prompt

2011-02-15 Thread Dr. Stephen Henson
On Tue, Feb 15, 2011, Torsten Weber wrote: Hello, I have written a dynamic engine that implements digest algorithms. The engine got an entry in the openssl.conf file to make it replace the default digest implementation: ./openssl dgst -sha1 my_file.dat I also added support for some

RE: Adding non-root certificates to the list of trusted certificates?

2011-02-15 Thread Martin Nicholes
Dear Viktor, Thanks for the reply. I will take a closer look at the callbacks to see if they will work for me. Marty -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Victor Duchovni Sent: Monday, February 14, 2011 11:54 AM

Re:at what time must I call SSL_free( ) / SSL_CTX_free( )

2011-02-15 Thread lzyzizi
What time have you to call SSL_free() and SSL_CTX_free() depends what you want to end the SSL/SSL_CTX object's lifecycle.Calling these functions is just likedel the object in C++,which means you don't want the object any more. The failure of calling functions(e.g.SSL_CTX_set_cipher_list( ),

Newbie Struggles with SMIME

2011-02-15 Thread ManicPixel
Hello, I've been searching the mail archives for days and pouring over the examples in the /demo projects and can't seem to figure this one out on my own. I'm trying to use OpenSSL to encrypt and decrypt S/MIME messages. I'd be happy with decrypt at this point! I am a rookie with encryption

Re: Newbie Struggles with SMIME

2011-02-15 Thread Dr. Stephen Henson
On Tue, Feb 15, 2011, ManicPixel wrote: Hello, I've been searching the mail archives for days and pouring over the examples in the /demo projects and can't seem to figure this one out on my own. I'm trying to use OpenSSL to encrypt and decrypt S/MIME messages. I'd be happy with decrypt

Re: Newbie Struggles with SMIME

2011-02-15 Thread ManicPixel
Did I mention I was a rookie? :-) I had not tried that. Excellent suggestion, thank you. I just did (after a crash course in cert key exports). I do get the following error, however I signed the message and my certs are decrypting it. Verify error:self signed certificate in certificate chain