Re: CSR with only public key

2019-09-12 Thread Paul Yang via openssl-users
n. > > Regards > Francesco Petruzzi > > Da: openssl-users [mailto:openssl-users-boun...@openssl.org > <mailto:openssl-users-boun...@openssl.org>] Per conto di Paul Yang via > openssl-users > Inviato: giovedì 12 settembre 2019 09:51 > A: Bharathi Prasad > Cc

Re: CSR with only public key

2019-09-12 Thread Paul Yang via openssl-users
ndly help me. > > Regards, > Bharathi > > > > -- > Sent from: http://openssl.6102.n7.nabble.com/OpenSSL-User-f3.html Regards, Paul Yang signature.asc Description: Message signed with OpenPGP

Re: [openssl-users] Openssl async support

2018-12-18 Thread Paul Yang
Read this: https://www.openssl.org/docs/man1.1.0/crypto/ASYNC_start_job.html Usually async operations happen in engines when they need to talk to hardware but you can still utilize async mechanism in pure software if you have

Re: [openssl-users] Is there any C code that implements SM2 algorithm separately?

2018-11-08 Thread Paul Yang
No, OpenSSL doesn't provide such stuff... > On Nov 9, 2018, at 09:50, 朱明哲 wrote: > > Hi all, > > Is there any C code that implements SM2 algorithm separately, which means is > there a version in C language that is implemented independently of the > existing library of openssl? > Thanks a

[openssl-users] Anecdotes of OpenSSL China Tour

2018-02-26 Thread Paul Yang
Hi there, Some people may know that five then OMC members had a tour in China last September. You can find some official media articles reporting the event in Tim’s blogs: https://www.openssl.org/blog/blog/2017/09/28/china/ and

Re: [openssl-users] [openssl-dev] A question DH parameter generation and usage

2017-12-05 Thread Paul Yang
For DHE_RSA, you first need a pair of RSA certificate/key for signing. And you if want to use specific DH parameters, you can use the SSL_CTX_set_tmp_dh API, there is documentation describing how to use this function. DH parameter could be generated by OpenSSL in many ways, one of the common

Re: [openssl-users] Existing connections on certification expires

2017-08-28 Thread Paul Yang
> On 28 Aug 2017, at 13:09, mahesh gs wrote: > > Hello All, > > We are using openssl for providing the secured communication for our > application. I have some basic queries about the openssl behaviour. > > 1) What happens to the existing SSL connections on certification

Re: [openssl-users] openssl rsa -check

2017-07-28 Thread Paul Yang
Please refer to this: https://github.com/openssl/openssl/pull/4043 <https://github.com/openssl/openssl/pull/4043> > On 29 Jul 2017, at 00:21, Paul Yang <paulyang@gmail.com > <mailto:paulyang@gmail.com>> wrote: > > Hmmm, it’s a bug introduced by the us

Re: [openssl-users] openssl rsa -check

2017-07-28 Thread Paul Yang
Hmmm, it’s a bug introduced by the use of RSA_check_key_ex function. Thanks for reporting. > On 28 Jul 2017, at 19:16, Georg Höllrigl wrote: > > Hello, > > I think there is something broken with verifying the Private Key with > "openssl rsa -check" like it was

Re: [openssl-users] Security of DH in TLS

2017-07-26 Thread Paul Yang
ed by the DH parameters (from the .pem file I > mentioned). > > If a server only supported ECDH or ECDHE, the DH parameters (.pem) file > wouldn't even be needed. > > Yes, in that case, you only need an EC key (and also EC parameters to > generate this key, of course) >

Re: [openssl-users] Security of DH in TLS

2017-07-26 Thread Paul Yang
lso EC parameters to > generate this key, of course) > > Is this correct? > > Thank you for your help, > kind regards, > SaAtomic > > - > > Paul Yang paulyang.inf at gmail.com > > Wed Jul 26 07:19:31 UTC 2017 > > The ‘key size’ concept is usually re

Re: [openssl-users] Security of DH in TLS

2017-07-26 Thread Paul Yang
(and also EC parameters to generate this key, of course) > > Is this correct? > > Thank you for your help, > kind regards, > SaAtomic > > - > > Paul Yang paulyang.inf at gmail.com > > Wed Jul 26 07:19:31 UTC 2017 > > The ‘key size’ concept is usually

Re: [openssl-users] Security of DH in TLS

2017-07-26 Thread Paul Yang
The ‘key size’ concept is usually referred to the length of modulus. (In public key crypto area) For DH and ECDH, it (the size) ’s generated and defined in the ‘parameters’, as you pasted. Parameters are not exactly the final ‘keys’, they are the ‘materials’ to produce keys (both private ones