Re: CRLDistributionPoints

2006-10-31 Thread Karsten Ohme
Dr. Stephen Henson wrote: On Sun, Oct 29, 2006, Karsten Ohme wrote: Hello, The example from: http://www.openssl.org/docs/apps/x509v3_config.html Those docs are for 0.9.9-dev check the docs with your distribution. OK, works better. Almost. But I want to add an base DN for an LDAP

CRLDistributionPoints

2006-10-29 Thread Karsten Ohme
Hello, The example from: http://www.openssl.org/docs/apps/x509v3_config.html crlDistributionPoints=crldp1_section [crldp1_section] fullname=URI:http://myhost.com/myca.crl CRLissuer=dirName:issuer_sect reasons=keyCompromise, CACompromise [issuer_sect] C=UK O=Organisation CN=Some Name

indirectCRLs

2006-10-20 Thread Karsten Ohme
Hello, I have created a CA and want to generate CRLs for another CA, i.e. an indirectCRL. How can this be done with the command line? I also want to add a CRL extensions to it. How is the syntax for the IssuingDistributionPoint extension in openssl.cnf? Regards, Karsten

PKCS#7 - storing raw data of ECDSA operation

2005-09-26 Thread Karsten Ohme
Hello, I have the raw signature data of a elliptic curve DSA operation from a smart card. In addition I will have a certificate for the public key of the elliptic curve algorithm. I want to store the results as a p7s file. How can this be done? I haven't found any documentation, only the in the

EVP_SignFinal() throws access violation - wrong documentation

2005-03-08 Thread Karsten Ohme
Hello I have problems running an application under Windows XP, which uses EVP functionality. EVP_SignFinal() always fails. After some days of lost time I compiled a debugable version of OpenSSL and the error always occurred in line 86 in the file p_sign.c int EVP_SignFinal(EVP_MD_CTX *ctx,