Re: [openssl-users] Re: create certificate request programmatically using OpenSSL API

2012-07-30 Thread Jeffrey Walton
On Mon, Jul 30, 2012 at 5:15 AM, Erwann Abalea wrote: > GOST is not a block cipher, it's the acronym for "GOsudarstvennyi STandard", > which means "State Standard". It's not dedicated to cryptography. My apologies. I thought you were referring to the GOST block cipher. (I've never used it, but kne

Re: create certificate request programmatically using OpenSSL API

2012-07-30 Thread Abyss Lingvo
Hi Jeff There are two GOST algorithms. GOST 28147-89 is for symmetric block cyphering and GOST R 34.10-2001 for asymmetric cyphering and digital signing.  OpenSSL support both algorithms. I mean GOST R 34.10-2001 here.   Best Regards

Re: [openssl-users] Re: create certificate request programmatically using OpenSSL API

2012-07-30 Thread Erwann Abalea
GOST is not a block cipher, it's the acronym for "GOsudarstvennyi STandard", which means "State Standard". It's not dedicated to cryptography. Speaking of GOST standard is redundant, but clearer for non russian locutors. There's a block cipher (poorly) defined as a GOST standard, referenced

Re: create certificate request programmatically using OpenSSL API

2012-07-28 Thread Jeffrey Walton
On Fri, Jul 27, 2012 at 9:00 AM, Abyss Lingvo wrote: > Hi all! > > The last problem is how to create GOST key pair for certificate. > It is clear how to create RSA keys. > Sample is here : http://www.openssl.org/docs/crypto/EVP_PKEY_keygen.html > > #include > #include > EVP_PKEY_CTX *ctx; >

Re: create certificate request programmatically using OpenSSL API

2012-07-27 Thread Abyss Lingvo
Hi all!  The last problem is how to create GOST key pair for certificate. It is clear how to create RSA keys. Sample is here : http://www.openssl.org/docs/crypto/EVP_PKEY_keygen.html    #include  #include  EVP_PKEY_CTX *ctx;  EVP_PKEY *pkey = NULL;  ctx = EVP_PKEY_CTX_new_id(EVP_PKEY_RSA, NULL)

Re: create certificate request programmatically using OpenSSL API

2012-07-22 Thread Ozweepay
I wrote this a while ago, but I think it was trivially modified from something I found online. I added a few comments, which perhaps is helpful__ OpenSSL Project http://www.openssl.org User Suppor

Re: create certificate request programmatically using OpenSSL API

2012-07-20 Thread Dr. Stephen Henson
On Fri, Jul 20, 2012, Abyss Lingvo wrote: > Hi all!  > > > How to > create certificate request programmatically via OpenSSL API? > > This is the solution for command line utility:  > > openssl genrsa -out server_key.pem -passout pass:$passwd -des3 1024 > > > openssl req -new -key server_key.

Re: create certificate request programmatically using OpenSSL API

2012-07-20 Thread Peter Sylvester
You can take the code in apps/req.c and extract the pieces you need. On 07/20/2012 10:17 AM, Abyss Lingvo wrote: Hi all! How to create certificate request programmatically via OpenSSL API? This is the solution for command line utility: openssl genrsa -out server_key.pem -passout pass:$passwd