Re: how to setup my now CA and where to find an easy to understand guide about PKI (was Re: )

2012-07-26 Thread Florian Rüchel
On 26.07.2012 12:57, Tom Browder wrote: On Thu, Jul 26, 2012 at 3:45 AM, Marco Molteni (mmolteni) wrote: Hi, there are two open source CA systems I am aware of, although I haven't tried them out. Also make sure to check out OpenXPKI (http://www.openxpki.org/) _

Re: Re: RAND_bytes() causes 50% CPU load & program crash when using CAPI engine

2012-07-25 Thread Florian Rüchel
with some explanation. Regards, Florian On 25.07.2012 16:41, carlyo...@keycomm.co.uk wrote: On Wed 25/07/12 2:16 PM , Jakob Bohm jb-open...@wisemo.com sent: On 7/25/2012 3:01 PM, Florian Rüchel wrote: Hi, I have a tool which calls RAND_bytes() for a length of 16 bytes while using the CAPI en

RAND_bytes() causes 50% CPU load & program crash when using CAPI engine

2012-07-25 Thread Florian Rüchel
Hi, I have a tool which calls RAND_bytes() for a length of 16 bytes while using the CAPI engine and having set it to be used for all purposes. If I run it in my Visual Studio Debugger in executes perfectly, but if run from within a command shell, it hangs on this statement (I localized it wit

CAPI engine working with machine keystore: missing flag in CryptAcquireContext in capi_get_key()

2012-07-24 Thread Florian Rüchel
Hi, I am working with the CAPI engine and the machine keystore where I do have keys and certificates. To find my key, the engine will execute `capi_open_store()` which works just fine and pays respect to the store_flags set. I set these flags with `ENGINE_ctrl(e, ENGINE_CMD_BASE + 13, 1, NULL, NUL

Re: Convert PKCS7_encrypt output to char*

2012-06-25 Thread Florian Rüchel
Hi, A good idea might be to use the following sequence to create a base64 encoded output (safe to send over network): memorybio = BIO_new(BIO_s_mem()); base64bio = BIO_new(BIO_f_base64()); outbio = BIO_push(base64bio, memorybio); /* Copy PKCS#7 */ i2d_P

CAPI engine PKCS#7 decrypt error

2012-06-19 Thread Florian Rüchel
Hello, I have an application that decrypts an encrypted PKCS#7 structure. When I run it with keys loaded from disk, it runs perfectly, but as soon as I use engine keys from CAPI it fails with: 8244:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\crypto\evp\evp_enc.c:5