RE: howto be my own CA for my new certificates

2011-08-04 Thread Tomas Macek
On Thu, 4 Aug 2011, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Alan Buxey Sent: Thursday, 04 August, 2011 03:54 Thank you! But now I'm spending my time with another issue with this: I cannot create certificate longer than I month: The server certificate was

X509_NAME_print_ex_fp on Windows, was RE: Applink issues

2011-08-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Colin Rice > Sent: Thursday, 04 August, 2011 15:43 > [including applink.c] fixes the sample program. > But it doesn't fix all of the original bug. We have an issue with > X509_print_name_ex_fp called with flags You mean

RE: howto be my own CA for my new certificates

2011-08-04 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Alan Buxey > Sent: Thursday, 04 August, 2011 03:54 > > Thank you! But now I'm spending my time with another issue > with this: I > > cannot create certificate longer than I month: > > The server certificate was created by command: > > ope

Re: Applink issues

2011-08-04 Thread Colin Rice
That fixes the sample program. But it doesn't fix all of the original bug. We have an issue with X509_print_name_ex_fp called with flags XN_FLAG_ONELINE is causing a crash during SSL_connect but calling it with no flags works. -Colin On 08/04/2011 02:25 PM, Harshvir Sidhu wrote: Seems like

Re: Applink issues

2011-08-04 Thread Harshvir Sidhu
Seems like you are using DLLs for OpenSSL. Try including applink.c in your application. On Thu, Aug 4, 2011 at 1:19 PM, Colin Rice wrote: > Hello, > > We are currently using OpenSSL for a network communications program. > However we have encountered an obscure bug on windows where we are unable

Applink issues

2011-08-04 Thread Colin Rice
Hello, We are currently using OpenSSL for a network communications program. However we have encountered an obscure bug on windows where we are unable to print X509 certificates without recieving OPENSSL_Uplink(10109000,08): no OPENSSL_Applink A sample program is attached. Running with /MD, /

Applink issues

2011-08-04 Thread Colin Rice
Hello, We are currently using OpenSSL for a network communications program. However we have encountered an obscure bug on windows where we are unable to print X509 certificates without receiving: OPENSSL_Uplink(10109000,08): no OPENSSL_Applink A sample program is attached. Running with /MD,

Re: [openssl-users] How to do a PKCS#10 in embedded systems

2011-08-04 Thread Erwann ABALEA
Bonjour, Hodie pr. Non. Aug. MMXI, Giordano Bruno scripsit: > Thank you for reply, > I didn't understand what you mean with this sequence (02, padding, DER > sequence with hash OID and value). Can you explain? > The hash of our der file (without the first header, the signature > header and the sig

Re: [openssl-users] How to do a PKCS#10 in embedded systems

2011-08-04 Thread Giordano Bruno
Hi Erwann, Thank you for reply, I didn't understand what you mean with this sequence (02, padding, DER sequence with hash OID and value). Can you explain? The hash of our der file (without the first header, the signature header and the signature) should be the expected result of your command (open

Re: [openssl-users] How to do a PKCS#10 in embedded systems

2011-08-04 Thread Erwann ABALEA
Hodie pr. Non. Aug. MMXI, Giordano Bruno scripsit: > Hi people, I have a problem in in certifications in low level issue, > but I think it is the best place to solve, > > I need to generate a PKCS#10 with a very limited device, a MSP430F5438 > from Texas Instruments plus a co-processor that implem

OpenSSL and slow internet connections

2011-08-04 Thread jott321
Hello, This applies to internet connections with speeds of less than 0.75 Mb/s (usually found on dial-up and slow performance DSL connections). Wtih faster connections, no problems. Using version 0.9.8k on the client (my OpenSSL code), and after all client and server handshaking has completed

How to do a PKCS#10 in embedded systems

2011-08-04 Thread Giordano Bruno
Hi people, I have a problem in in certifications in low level issue, but I think it is the best place to solve, I need to generate a PKCS#10 with a very limited device, a MSP430F5438 from Texas Instruments plus a co-processor that implement the RSA and SHA-1 algorithms. The coprocessor generate t

Re: howto be my own CA for my new certificates

2011-08-04 Thread Erwin Himawan
When you are creating a CA and issuing certificate you are building a PKI (Public Key Infrastructure). In operating a PKI, you might want to consider crafting a certification policy, specifying the process for managing the lifecycle of your certificates, securing the CA's private key, securing th

PKCS#10

2011-08-04 Thread Giordano Bruno
Dear I got your mail from XCA, that is a very nice app. I work with embedded systems and need to generate a PKCS#10 with a very limited device, a MSP430F5438 from Texas Instruments plus a co-processor that implemente the RSA and SHA-1 algorithms (VaultIC). We got a DER file from internet, we used

Re: howto be my own CA for my new certificates

2011-08-04 Thread Tomas Macek
On Thu, 4 Aug 2011, Bernhard Fröhlich wrote: Am 04.08.2011 08:23, schrieb Tomas Macek: We have some web servers and I want to create self signed certificates for them. What do I want: - I want to create my own certification authority keys and certificate, that will be imported to all web b

Re: howto be my own CA for my new certificates

2011-08-04 Thread Bernhard Fröhlich
Am 04.08.2011 08:23, schrieb Tomas Macek: We have some web servers and I want to create self signed certificates for them. What do I want: - I want to create my own certification authority keys and certificate, that will be imported to all web browsers of our employees - I want to create certi

Re: howto be my own CA for my new certificates

2011-08-04 Thread Tomas Macek
On Thu, 4 Aug 2011, Alan Buxey wrote: Hi, Thank you! But now I'm spending my time with another issue with this: I cannot create certificate longer than I month: This is my CA certificate validity: ... Not Before: Aug 3 10:07:14 2011 GMT Not After : Aug 2 1

Re: howto be my own CA for my new certificates

2011-08-04 Thread Alan Buxey
Hi, > Thank you! But now I'm spending my time with another issue with this: I > cannot create certificate longer than I month: > > This is my CA certificate validity: > ... > Not Before: Aug 3 10:07:14 2011 GMT > Not After : Aug 2 10:07:14 2012 GMT > ... >

Re: howto be my own CA for my new certificates

2011-08-04 Thread Tomas Macek
Thank you! But now I'm spending my time with another issue with this: I cannot create certificate longer than I month: This is my CA certificate validity: ... Not Before: Aug 3 10:07:14 2011 GMT Not After : Aug 2 10:07:14 2012 GMT ... This is my server'

Re: howto be my own CA for my new certificates

2011-08-04 Thread yyy
Everything seems to be fine, only for new installations it is recomended to use at least 2048 bit keyand, at least some time ago, openssl used to default to MD5 for certificate signatures,check, if it is not the case.   Citējot Tomas Macek : We have some web servers and I want to create self signe