R: CSR with only public key

2019-09-12 Thread Francesco Petruzzi
Yes Paul, you are right. Real CA must never accept CSR without verifying the signature. Francesco Petruzzi Information Security Manager Innovery SpA Via Farini, 81 – 20159 Milano Cell. +39 320 170 4978 Da: Paul Yang [mailto:kaishen...@alipay.com] Inviato: giovedì 12 settembre 2019 10

R: CSR with only public key

2019-09-12 Thread Francesco Petruzzi
Sign request with a fake private key and hope the client do not require signature verification. Regards Francesco Petruzzi Da: openssl-users [mailto:openssl-users-boun...@openssl.org] Per conto di Paul Yang via openssl-users Inviato: giovedì 12 settembre 2019 09:51 A: Bharathi Prasad Cc

R: concatenate two CRL's

2011-11-15 Thread Francesco Petruzzi
The combined crl means a certificate revocation list including all revoked certificate for the whole (and single) CA and the partitioned one is a more light crl limited to a known number of emitted certificate. CAs must publish a number of partitioned crls that covers all issued certificates and

R: Why would RSA_size() crash?

2011-05-16 Thread Francesco Petruzzi
Is pubKey a valid pointer after PEM_read_bio_RSA_PUBKEY? If it is NULL there is an error in PEM data. Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di G S Inviato: lunedì 16 maggio 2011 12:13 A: openssl-users@openssl.org Oggetto: Why would RSA_size() c

R: error:0D07209B:asn1 encoding routines:ASN1_get_object:too long

2011-04-05 Thread Francesco Petruzzi
Correct cast is , but your problem probably is in str content, not asn1 der format. Is your source certificate in der format? Da: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di ikuzar Inviato: martedì 5 aprile 2011 02:05 A: openssl-users@openssl.org Ogge

R: Certificate Access Question

2011-03-09 Thread Francesco Petruzzi
: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] Per conto di Harshvir Sidhu Inviato: mercoledì 9 marzo 2011 13:45 A: openssl-users@openssl.org Cc: Francesco Petruzzi Oggetto: Re: Certificate Access Question Hi, Do you mean i should install client certificate into

R: Certificate Access Question

2011-03-09 Thread Francesco Petruzzi
If your service uses “my” in order to retrieve certificate it only reads its certificate (service launcher UserA), you can save certificate for LocalMachine but your service must use local machine store to retrieve certificate and not “my” (personal) store. Da: owner-openssl-us...@openssl.o