smime verify bug???

2011-07-20 Thread Mailing List SVR
Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is also the binary cert from which I extracted the pem, I have the following: openssl smime -verify -in sod.pem -inform pem -noverify sod.data

Re: ECDSA public key token to/from binary

2011-07-20 Thread Billy Brumley
Thanks for the response.  Are X and Y the public key? The tuple (X,Y), yep. But not in any kind of standard, portable form--just in OpenSSL BIGNUM structures. I tried this and it seems to work.  Error checking omitted for easier reading.  Comments? That looks sane to me. Billy

how to disable theCRL check and time check in X509_verify_cert() api..?

2011-07-20 Thread brajan
can any one tell me how to remove the crl revocation check and Expiry check. i want to validate the signature of the certificate alone no CRL or Expiry check. any flag i need to set -- View this message in context:

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is also the binary cert from which I extracted the pem, I have the following: openssl smime

Bug in OpenSSL 0.9.8e

2011-07-20 Thread Vinay Kumar
Hi All, I am using OpenSSL *OpenSSL 0.9.8e*. The OpenSSL function sometimes *sha1_block_host_order () *crashes on Linux. Is there any fix available for this issue or what are the modifications need to be done? Please guide me. _The core back trace is as follows:_ Program terminated

Using PEM_read_X509 openSSL Api

2011-07-20 Thread Mayur Premi
Hi , I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x, pem_password_cb *cb, void *u); to get a X509 certificate structure from PEM format File. My File(fp) looks like below: -BEGIN CERTIFICATE-

Re: Please help: OpenSSL + OpenVPN Elliptic Curves (SHA512, ECDSA, ECDH, Linux, Debian)

2011-07-20 Thread Gaglia
On 07/16/2011 07:13 PM, y...@inbox.lv wrote: ... So everybody here seems to agree that steps 1)...7) I listed in the first post are correct, and that the problem in EC management lies in OpenVPN, right? __ OpenSSL Project

Re: Using PEM_read_X509 openSSL Api-Sample Certificate

2011-07-20 Thread brajan
Mayur Premi wrote: Hi , I am using X509* ** pX = * PEM_read_X509*(FILE *fp, X509 **x, pem_password_cb *cb, void *u); to get a X509 certificate structure from PEM format File. My File(fp) looks like below: -BEGIN CERTIFICATE-

X509_Verify API always returns -1 . how to over come this

2011-07-20 Thread brajan
hi can any one tell me how to over that error i am validating the certificate using X509_verify_cert() the out put of this is Signature verification error.. i go through the code and found ASN1_item_verify function is called where can i find this function c code and how to over come the

openssl 0.9.8g bug..?

2011-07-20 Thread brajan
hi i am using openssl 0.9.8g version .. ASN1_item_verify () in this function Void* asn is used as ASN1_VALUE* asn. my complier show error for that.. whether it is the reason for X509_verify(cert,cakey) function fails .? -- View this message in context:

Fwd: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
It didn't fix it. In the end, I cannot link statically without libsasl2.a, which I am having difficulty obtaining, but which must be somehow obtainable. In the meantime, I am including libraries for which I have a static version in my objective files list, rather than as linker flags. I am

Re: Fwd: Trying to Link Statically to Libcrypto

2011-07-20 Thread Michael S. Zick
On Wed July 20 2011, brandon...@aol.com wrote: It didn't fix it. In the end, I cannot link statically without libsasl2.a, which I am having difficulty obtaining, but which must be somehow obtainable. In the meantime, I am including libraries for which I have a static version in my

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread Jeffrey Walton
On Wed, Jul 20, 2011 at 8:48 AM, brandon...@aol.com wrote: It didn't fix it.  In the end, I cannot link statically without libsasl2.a, which I am having difficulty obtaining, but which must be somehow obtainable. http://asg.web.cmu.edu/sasl/sasl-library.html In the meantime, I am including

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
Wow, you guys are good! Thanks. -Original Message- From: Michael S. Zick open...@morethan.org To: openssl-users openssl-users@openssl.org Sent: Wed, Jul 20, 2011 9:27 am Subject: Re: Fwd: Trying to Link Statically to Libcrypto On Wed July 20 2011, brandon...@aol.com wrote: It

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
He just isn't a Linux guy, and I didn't know enough to advise him. -Original Message- From: Andreas Mueller a...@othello.ch To: brandonshw brandon...@aol.com Sent: Wed, Jul 20, 2011 9:32 am Subject: Re: Fwd: Trying to Link Statically to Libcrypto Brandon, Quoting brandon...@aol.com:

Re: Trying to Link Statically to Libcrypto

2011-07-20 Thread brandonshw
What a great amount of useful information. Thanks. -Original Message- From: Jeffrey Walton noloa...@gmail.com To: openssl-users openssl-users@openssl.org Sent: Wed, Jul 20, 2011 9:57 am Subject: Re: Trying to Link Statically to Libcrypto On Wed, Jul 20, 2011 at 8:48 AM,

Re: X509_Verify API always returns -1 . how to over come this

2011-07-20 Thread Dr. Stephen Henson
On Wed, Jul 20, 2011, brajan wrote: hi can any one tell me how to over that error i am validating the certificate using X509_verify_cert() the out put of this is Signature verification error.. i go through the code and found ASN1_item_verify function is called where can i find this

Re: smime verify bug???

2011-07-20 Thread Dr. Stephen Henson
On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached is also the binary cert from which I extracted the

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the one attached, attached

Re: smime verify bug???

2011-07-20 Thread Michael Ströder
Mailing List SVR wrote: Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem file works fine there is something strange with the

Re: smime verify bug???

2011-07-20 Thread Mailing List SVR
Il 20/07/2011 19:09, Michael Ströder ha scritto: Mailing List SVR wrote: Il 20/07/2011 17:06, Dr. Stephen Henson ha scritto: On Wed, Jul 20, 2011, Mailing List SVR wrote: Il 20/07/2011 08:44, Mailing List SVR ha scritto: Hi, openssl seems unable to verify the attacched sod.pem, other pem